DOD aims to issue cyber-incident reporting regulation by fall

The Pentagon is planning to release the final version of its cyber-incident reporting regulation for the defense industry by early fall.

As Inside Cybersecurity reports:

A Defense Department regulatory report issued this month states DOD will issue the final version of the regulation in the fourth quarter of the fiscal year, meaning before Sept. 30. Similarly, a DOD regulatory schedule issued late last year projected the rule would be issued in final form by late August. At the time, a Pentagon spokeswoman told Inside Cybersecurity that schedule was “just an estimate.” But this week a source tracking the effort said that target remains in play.

Defense officials are in the process of reviewing the many public comments DOD received in response to its second interim rule on cyber-incident reporting. Although the latest iteration gave defense contractors more time to heed new security mandates compared to the first interim rule, the defense industry remains concerned with various elements of the current regulation.