DOD cyber-incident reporting rule faces more criticism

The Defense Department has received a handful of new comments from industry expressing more concerns about an interim rule that compels defense contractors to report cyber incidents.

Last Friday was the deadline for submitting comments about DOD’s interim rule on “network penetration reporting and contracting for cloud services,” which went into effect in August.

It requires contractors and subcontractors to report “cyber incidents that result in an actual or potentially adverse effect on a covered contractor information system or...