6. Incident Reporting Forms
How to report a cybersecurity incident to GovCERT XK.
No separate reporting form is currently published.
Incidents may be reported directly by e-mail to the address below, which is the same
contact used for general enquiries (see Section 2.6).
Report by e-mail
ashi.cert@rks-gov.net
gani.zogaj@rks-gov.net
xheladin.grajcevci@rks-gov.net
Report by phone
Hours of operation
08:00–16:00, Monday to Friday, excluding public holidays in the Republic of Kosovo.
When reporting an incident, please include as much of the following as possible: affected systems or networks, date and time observed, a description of the activity, and any supporting evidence (logs, indicators of compromise, screenshots). Highly sensitive details should be sent using PGP encryption — see Section 2.7.