A supervisory report is a formal notice sent to a regulator or other oversight authority about a regulated event, such as a serious ICT incident, control failure, or compliance breach. It usually summarizes what happened, when it was detected, how it was handled, and what impact it may have on customers, services, or legal obligations.
In cyber security, supervisory reports matter because incident response is not only technical; it is also a governance and evidence problem. A strong report depends on accurate classification, timestamps, scope, root-cause analysis, and clear ownership. During attacks, weak reporting can signal poor internal coordination, while in defenses, disciplined reporting helps organizations meet notification deadlines, preserve audit trails, and demonstrate operational resilience. In regulated sectors, the quality of the supervisory report can affect both compliance standing and post-incident review.