[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-253440-105":3,"detail-sidebar-cat-1-en-105":81,"doc-detail-253440-en":127},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","nevada-gaming-control-board-initial-cybersecurity-incident-response-form-0526","Nevada Gaming Control Board - Initial Cybersecurity Incident Response - Form 05/26","","Initial Cybersecurity Incident Response is an official Nevada Gaming Control Board reporting form for covered entities that experience a cybersecurity incident. It defines the triggering incident and requires completing and submitting an initial response report within five calendar days after activating procedures in the cybersecurity incident response plan. The form collects licensee and site locations, affected systems, breach or exfiltration indicators, gaming system impacts, incident dates and type, containment and business status, contacted law enforcement, and a structured incident summary with required impact, notification, safeguards, and next steps.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/template/","Template",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/template/forms/","Forms",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/template/nevada-gaming-control-board-initial-cybersecurity-incident-response-form-0526/253440/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/nevada-gaming-control-board-initial-cybersecurity-incident-response-form-0526/253440.png","ImageObject",442,249,{"name":42,"@type":43},"Dozel","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-30","2026-09-13",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",10,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"When must the initial cybersecurity incident response report be submitted after activating the response plan?","Question",{"text":63,"@type":64},"The report must be completed and submitted within 5 calendar days after activating the response procedures set forth in the cybersecurity incident response plan.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"What information does the form collect about affected systems and data?",{"text":68,"@type":64},"It collects the licensee and affected site/location(s), whether data was breached/exfiltrated, which systems are affected (server, network, and other), and which gaming systems are affected.",{"name":70,"@type":61,"acceptedAnswer":71},"What must be included in the incident summary section?",{"text":72,"@type":64},"The summary must provide a brief description with available technical details, the physical location of affected systems, service impact if any, whether the incident is public, whether customers/vendors were notified, safeguarding procedures, staffing adequacy for compliance, anticipated next steps, and any third-party incident response firm hired.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},253440,1791552087,{"code":4,"msg":82,"data":83},"success",[84,89,94,99,104,109,113,118,123],{"id":85,"doc_module":22,"doc_module_name":25,"category_name":86,"show_sort_weight":87,"slug":88},11,"Presentations",90,"presentations",{"id":90,"doc_module":22,"doc_module_name":25,"category_name":91,"show_sort_weight":92,"slug":93},12,"Resumes",80,"resumes",{"id":95,"doc_module":22,"doc_module_name":25,"category_name":96,"show_sort_weight":97,"slug":98},14,"Invoices",70,"invoices",{"id":100,"doc_module":22,"doc_module_name":25,"category_name":101,"show_sort_weight":102,"slug":103},15,"Posters",60,"posters",{"id":105,"doc_module":22,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},16,"Social Media",50,"social-media",{"id":110,"doc_module":22,"doc_module_name":25,"category_name":29,"show_sort_weight":111,"slug":112},17,40,"forms",{"id":114,"doc_module":22,"doc_module_name":25,"category_name":115,"show_sort_weight":116,"slug":117},18,"Letters",30,"letters",{"id":119,"doc_module":22,"doc_module_name":25,"category_name":120,"show_sort_weight":121,"slug":122},21,"Paper Templates",5,"papers-templates",{"id":124,"doc_module":22,"doc_module_name":25,"category_name":125,"show_sort_weight":4,"slug":126},158,"General","general-158",{"code":4,"msg":82,"data":128},{"doc_id":79,"user_id":129,"nickname":42,"user_avatar":130,"doc_module":22,"category_id":110,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":131,"file_id":132,"file_url":133,"file_type":134,"file_size":135,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":26,"language":136,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":137,"faqs":138,"seo_title":139,"seo_description":12,"update_tm":140,"read_time":22},962085662650,"https://ap-avatar.wpscdn.com/davatar_29158cc5080c5b710cf443261637dec0","Nevada Gaming Control Board  \nInitial Cybersecurity Incident Response  \nA cybersecurity incident is any act in which a person has gained unauthorized access to an information system of a covered entity for purpose of disrupting, disabling, destroying, or controlling the system or destroying or gaining access to the information contained therein.  \nPursuant to NGC Regulation 5.260(4)(b) A covered entity that experiences a cybersecurity incident relating to its information system that has resulted in a material loss of control, compromise, unauthorized disclosure of data or information, or any other similar occurrence shall:  \nComplete and submit an Initial Cybersecurity Incident Response report within 5 calendar days after activating the response procedures set forth in its cybersecurity incident response plan. Email this [form to](form to GCBCyber@gcb.nv.gov)[ ](form to GCBCyber@gcb.nv.gov)[GCBCyber@gcb.nv.gov](form to GCBCyber@gcb.nv.gov)[ ](form to GCBCyber@gcb.nv.gov)REPORT BY  \nFirst Name:   Last Name:    \nPosition:    \nPhone: ……………………………………………... Mobile (Optional): ……………………………………  \nEmail:    \nLICENSEE AND/OR SITE LOCATION(S) AFFECTED  \nLicensee Name:    \nSite(s)/Location(s) Affected: ……………………………………………………………………………………... Data Breached/Exfiltrated: Yes No  \nSystems affected: Server:  \nNetwork:  \nOther :    \nGaming systems affected: Slot accounting/cashless wagering: ………………………………...  \nKiosks:    \nIf affected, identify the system Count room: ………………………………………………………...  \nname and manufacturer. Player tracking/Patron management: ………………………………  \nTable games: ……………………………………………………….  \nPromotional/bonusing: ………………………………………….. ....  \nRace book and sports pool: ………………………………………...  \nInter-Casino linked systems: ……………………………………….  \nOther:    \nINCIDENT DETAILS  \nDate/Time of Occurrence:    \nDate/Time Detected:    \nType of Incident (Ransomware, Data Breach, Malware, etc.): …………………………………………………..  \nIncident Status: Resolved Unresolved Contained  \nAre you still open for business? Yes No Partial: ………………………………………………  \nIf closed, what time/date of closure occurred?   Initial Cyber Incident Response (05/26) Page 1 of 2  \nIf closed, what time/date do you anticipate reopening?……………………………………………………………. Have you contacted another law enforcement agency? Yes No  \nName of agency contacted (FBI, USSS, HSI, LVMPD, etc.): ……………………………………………………...  \nINCIDENT SUMMARY  \n1. Provide a brief summary of the incident along with available technical details.  \n2. Identity the physical location of the systems affected.  \n3. If the attack resulted in a compromise or disruption to service, provide details of the impact.  \n4. Is the cyber security attack or data breach public information?  \n5. If information was accessed, have customers, clients, vendors, etc. been notified?  \n6. Identify the procedures in place to safeguard assets (funds in a cage, all gaming areas, drop boxes, count room) .  \n7. Do you have adequate security personnel on the property to ensure compliance with standards/procedures?  \n8. What are the next steps you anticipate taking?  \n9. What third-party incident response firm has been hired to investigate/resolve the incident?  \nAdd additional sheets as needed  \nInitial Cyber Incident Response (05/26) Page 2 of 2","cbCailDIqAV6ZyTs","https://ap.wps.com/l/cbCailDIqAV6ZyTs","pdf",340395,"English","# Reporting Requirements\n## Submission Timeline and Triggering Incident\n# Form Fields\n## Covered Entity and Affected Locations\n## Systems and Gaming System Impacts\n## Incident Details and Status\n## Incident Summary\n## Additional Information and Contacts","[{\"question\":\"When must the initial cybersecurity incident response report be submitted after activating the response plan?\",\"answer\":\"The report must be completed and submitted within 5 calendar days after activating the response procedures set forth in the cybersecurity incident response plan.\"},{\"question\":\"What information does the form collect about affected systems and data?\",\"answer\":\"It collects the licensee and affected site/location(s), whether data was breached/exfiltrated, which systems are affected (server, network, and other), and which gaming systems are affected.\"},{\"question\":\"What must be included in the incident summary section?\",\"answer\":\"The summary must provide a brief description with available technical details, the physical location of affected systems, service impact if any, whether the incident is public, whether customers/vendors were notified, safeguarding procedures, staffing adequacy for compliance, anticipated next steps, and any third-party incident response firm hired.\"}]","Nevada Gaming Control Board - Initial Cybersecurity Incident Response - Form 05/26 | PDF",1789266030]