Proposed FAR Security Incident Reporting Requirements: What You Need To Know

Arnold & Porter – Under the proposed rule, contractors performing covered contracts must report to CISA, within eight hours of discovery, “all security incidents involving a product or service provided to the Government that includes information and communications technology, or…