Virtual Library

Our research repositories present a collection of open-source resources that showcase research and analysis that has directly influenced our initiatives. Non-IST publications are copyrighted by external authors not affiliated with IST.

Submit your Content

Reports

To the Point of Failure: Identifying Failure Points for Crisis Communications Systems

Leah Walker, Alexa Wehsener

viewpdf

Reports

Mapping the Ransomware Payment Ecosystem: A Comprehensive Visualization of the Process and Participants

Zoë Brammer

viewpdf

Reports

Plan maestro de defensa contra los programas de secuestro

Grupo de Trabajo sobre Programas de Secuestro

viewpdf

Reports

Cyber Incident Reporting Framework

Cyber Threat Alliance, Institute for Security and Technology

viewpdf

Reports

Digital Tools, Cognition, and Democracy: A Review of the Literature

Zoë Brammer, Sage Miller, Leah Walker

viewpdf

Reports

Reasoning: How digital technologies influence decision making and judgment

Stephanie Rodriguez

viewpdf

Reports

Attention: How digital technologies influence what we notice, what we focus on, and how we learn

Stephanie Rodriguez

viewpdf

Contribute to our Library!

We also welcome additional suggestions from readers, and will consider adding further resources as so much of our work has come through crowd-sourced collaboration already. If, for any chance you are an author whose work is listed here and you do not wish it to be listed in our repository, please, let us know.

SUBMIT CONTENT
Playing now

Virtual Event and Live Q&A with Mr. Nand Mulchandani, Acting Director of the U.S. Department of Defense Joint Artificial Intelligence Center

Cyber Incident Reporting Framework

Cyber Threat Alliance, Institute for Security and Technology

SUMMARY

A group led by Cyber Threat Alliance and the Institute for Security and Technology that includes CREST, CipherTrace, Coveware, Cybera, Cybercrime Support Network, Cyber Peace Institute, Open Cybersecurity Alliance, and SolarWinds has come together to provide input regarding cyber incident reporting.

This group has identified a set of principles that the incident reporting regulation should incorporate, and we have developed a set of model reporting formats the Cybersecurity and Infrastructure Security Agency (CISA) could use as the foundation for the reporting forms. The report contains 3 sections:

  1. Purpose, Expectations, and Definitions
  2. Principles
  3. Incident Reporting Fields

Framework appendices include an explanation of why the U.S. government should collect the proposed information in the Cyber Incident Reporting Form and a sample, generic CIRF report.

download pdf