Get Cyber Security Incident Report

Completing the Cyber Security Incident Report is crucial for documenting incidents and ensuring appropriate responses. This guide will provide you with clear, step-by-step instructions to fill out the report efficiently and accurately.

Follow the steps to complete the Cyber Security Incident Report online.

1. Click 'Get Form' button to access the Cyber Security Incident Report form and open it in the editor.
2. Begin with the 'State Agency' field. Enter the name of the state agency reporting the incident.
3. Fill in the 'Security Contact Information' section with relevant contact details for the individual responsible for security matters within the agency.
4. In the 'Incident Reported By' field, enter your name or the name of the person reporting the incident.
5. Provide a descriptive 'Incident Title' that summarizes the nature of the incident.
6. Enter the 'Incident Number' if applicable, identifying the specific incident.
7. Fill in the 'Report Date' with the date of submission for this report.
8. Provide the 'Date & Time of Incident' when the incident first occurred.
9. Enter the 'Date & Time Resolved' if the incident has been resolved. If not, leave this blank.
10. In the 'Statement of Incident,' describe the incident, how it was discovered, the level of unauthorized access attained, its impact on services, sensitive data affected, and the current system status.
11. Address the 'Impact of the Incident/Systems Affected' section by specifying the IP address(es), hostname(s), purpose of the system(s), operating system and version, ports of communication utilized, physical location, and attack vector utilized.
12. Document any evidence discovered in the 'Evidence discovered' section.
13. Use the 'Additional Details' portion to add any relevant context not covered in previous sections.
14. In the 'Technical Details' section, provide insights into the incident's technical aspects.
15. Complete the 'Immediate Actions' field to outline steps taken in response to the incident.
16. List 'Steps Taken to Prevent Recurrence' to indicate measures being implemented to avoid future incidents.
17. If applicable, describe any attachments in the 'Description of Attachments' section, such as logs, reports, or screenshots.
18. Once all sections are complete, review your entries for accuracy and completeness, then save changes, download, print, or share the form as necessary.

Complete and submit your Cyber Security Incident Report online today to ensure a diligent response to cyber incidents.