Who is calling for standard reporting? Harvard Business Review
Why? The nature of attacks are borderless, fast moving and difficult to predict or manage
What reasons support standard cyberattack reporting?
- Information Sharing. The wheel isn’t being recreated. Attackers will repeat methods.
- Certain Data will inform planning and defenses. this includes:
- dates relevant to the incident
- type of incident
- size of impact on financial results or ability to conduct business
- type of impact
- method used to access the network or data
- how the incident was resolved
- Enforcement. Regulators need this data too to enforce bad actors and educate constituencies
Harvard Business Review | We Need a Global Standard for Reporting Cyber Attacks