DOD Cybersecurity: Enhanced Attention Needed to Ensure Cyber Incidents Are Appropriately Reported and Shared

GAO has reviewed the Defense Department’s cyber incident management, examining the extent to which it has established and implemented a process to (1) report and notify leadership of cyber incidents, (2) report and share information about cyber incidents affecting the defense industrial base, and (3) notify affected individuals of a breach exposing personally identifiable information.