VA: Contractors Have One Hour to Report a Security Incident

Final Rule Also Addresses 'Liquidated Damages' Contractors Must Pay in Breaches
An update to acquisition regulations within the Department of Veterans Affairs emphasizes that contractor have one hour to report a security and privacy incident. The clock starts ticking after the incident's discovery. The department says the rule change only codifies an existing requirement.

acquisition addresses change contractor contractors department discovery incident pay privacy regulations report security security incident update veterans veterans affairs