Can an institution modify the USG Information Security Incident Report form to capture other information collected and tracked by the institution?
Very minor modifications to the form may be allowed, providing they do NOT impact the USG Office of Information Security’s (OIS) ability to gather the information it needs or the ability to process the incident reports quickly. The institution should consult with the USG OIS prior to making any modifications to the form. Those that do not consult with the USG OIS first, risk the possibility of their report being returned as unacceptable.
Very minor modifications to the form may be allowed, providing they do NOT impact the USG Office of Information Security & ePrivacy’s (OIS) ability to gather the information it needs or the ability to process the incident reports quickly. The institution should consult with the USG OIS prior to making any modifications to the form. Those that do not consult with the USG OIS first, risk the possibility of their report being returned as unacceptable.
Related Questions
- Can an agency modify the Agency Information Security Incident Report (SIMM 65C) form to capture other information collected and tracked by the agency?
- Are there instructions for completing the USG Information Security Incident Report?
- What is the purpose of the USG Institution Security Incident Report?
