DoD Finalizes Rule on Policies for Cyber Incident Reporting

The Department of Defense’s final rule implementing mandatory cyber incident reporting requirements for defense contractors did not address all contractor concerns, but did clarify some important provisions in the proposed rule.