Stronger cyber reporting rules for federal contractors criticized

Several industry organizations have derided additional burdens presented by proposed changes to the Federal Acquisition Regulation that would mandate cyber incident disclosures to the Cybersecurity and Infrastructure Security Agency within an eight-hour window, as well as require a software bill of materials, and complete IT systems and personnel access following an incident, according to The Register.

access acquisition agency bill contractors cyber cyber incident cybersecurity disclosures federal governance risk and compliance government-regulations incident industry infrastructure infrastructure security materials organizations personnel regulation reporting rules security software software bill of materials stronger systems window