Within 5 calendar days after activating its incident response procedures, the covered entity completes and submits the Board's Initial Cybersecurity Incident Response report on the Board's form. Instead, it may request a meeting with the Chair within the same 5 days to give information on the incident; if that meeting is held, the form is due no later than 30 days from activation. The Board's form (revised 01/26 and 05/26) asks for the reporter, the licensee and sites affected, whether data was breached or exfiltrated, the systems and gaming systems affected (slot accounting and cashless wagering, kiosks, count room, player tracking, table games, promotional systems, race and sports, inter-casino linked systems), occurrence and detection times, incident type and status, whether the property is open, law enforcement contacted, a summary with impact, public status, notifications made, safeguards for cage, gaming areas, drop boxes and count room, security staffing, next steps and the incident response firm engaged.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.