A Case Study for Cyber Incident Report in Industrial Control Systems

This research aims to answer these questions by studying the current state of Cyber Incident Reporting in terms of definition, purposes, regulations and more.

This research also seeks to understand the current Cyber Incident Reports formats available to the public and map out their advantages and disadvantages based on National Institute of Standards and Technology (NIST) Cybersecurity recommendations on Cyber Incident Reporting.

In addition, this research evaluates the use of the MITRE ATT&CK (Adversarial Tactics, Techniques & Common Knowledge) Framework for ICS in a Cyber Incident report. This research could help ICS organizations improve their process of Cyber Incident reporting.