DoD Rule for mandatory cyber incident reporting for contractors/subcontractors

On Oct. 4, 2016, the Defense Department issued a new rule that makes final interim requirements issued the previous October by “imposing mandatory cyber incident reporting requirements for DOD contractors and subcontractors who have agreements with DOD” and “modifies eligibility criteria to permit greater participation in the voluntary [Defense Industrial Base Cybersecurity] information sharing program.”