Virtual Library

Our virtual library is an online repository of all of the reports, papers, and briefings that IST has produced, as well as works that have influenced our thinking.

Submit your Content

Reports

Unlocking U.S. Technological Competitiveness: Public-Private Misalignments in Biotechnology, Energy, and Quantum Sectors

Ben Purser, Pavneet Singh

viewpdf

Reports

Effects of Electromagnetic Pulses on Communication Infrastructure: An IST Primer

viewpdf

Reports

How Does Access Impact Risk? Assessing AI Foundation Model Risk Along a Gradient of Access

Zoë Brammer, along with contributors from the AI Foundation Model Access Working Group

viewpdf

Fact Sheet

DOD and SBA Launch the Small Business Investment Company Critical Technology (SBICCT) Initiative

Strategic Balancing Initiative

viewpdf

Fact Sheet

White House Releases Outbound Investment Executive Order

Strategic Balancing Initiative

viewpdf

Reports

Strengthening Resilience in 21st Century Crisis Communications

Alexa Wehsener, Sylvia Mishra

viewpdf

Fact Sheet

DoD Releases the National Defense Science and Technology Strategy

Strategic Balancing Initiative

viewpdf

Contribute to our Library!

We also welcome additional suggestions from readers, and will consider adding further resources as so much of our work has come through crowd-sourced collaboration already. If, for any chance you are an author whose work is listed here and you do not wish it to be listed in our repository, please, let us know.

SUBMIT CONTENT

Cyber Incident Reporting Framework: Global Edition

Cyber Threat Alliance, Institute for Security and Technology

SUMMARY

This guide to cybersecurity incident reporting develops a model reporting format that cybersecurity authorities and other government authorities worldwide could use as the foundation for their national reporting frameworks and regulatory language.

Last fall, multiple industry organizations led by the Cyber Threat Alliance (CTA) and the Institute for Security and Technology (IST) came together to provide input regarding cyber incident reporting for US entities. This group identified a set of principles and developed a model reporting format that the Cybersecurity and Infrastructure Security Agency (CISA) could use as the foundation for its incident reporting regulations. This updated, global edition of the framework builds off that first document that CTA and IST released in November 2022, and adds significant contextual discussion.

Thank you to the following organizations for their support: Chainalysis, Ciphertrace, CREST, Cybera, Cybercrime Support Network, and CyberPeace Institute

download pdf