Industry still concerned about DOD cyber-incident reporting rule

Multiple industry groups criticized the Defense Department's second interim rule on cyber-incident reporting this week in new letters submitted by the Feb. 29 deadline for public comments.

The first interim rule on breach reporting and contracting for cloud services was issued last August in response to a congressional mandate and became effective immediately. It required contractors and subcontractors to report “cyber incidents that result in an actual or potentially adverse effect on a covered contractor information system or covered defense...