Nonprofit-led coalition proposes ‘principles’ to guide CISA’s development of incident reporting regulation

A coalition led by the Cyber Threat Alliance and Institute for Security and Technology is proposing 10 “principles” and a layered formatting approach for incident details to help CISA develop its upcoming cyber incident reporting regulation.

The principles are designed to “advance the quality, quantity, and utility of the reporting while minimizing the burden on the covered entities,” the coalition said in comments to CISA on Monday.

The groups responded to a CISA request for information to get...