DOD will address contractor liability worries in future rule on cyber-incident reporting

The Defense Department will address contractor liability concerns for reporting a data breach to the government in a future rulemaking, while moving forward with the bulk of a new regulation on cyber incidents issued today that affects both subcontractors and general contractors.

The new rule makes final interim requirements issued last October by “imposing mandatory cyber incident reporting requirements for DOD contractors and subcontractors who have agreements with DOD” and “modifies eligibility criteria to permit greater participation in the voluntary...