View Rule

DoD is revising its DoD-Defense Industrial Base (DIB) Cybersecurity (CS) Activities regulation to mandate reporting of cyber incidents that result in an actual or potentially adverse effect on a covered contractor information system or covered defense information, or on a contractor’s ability to provide operationally critical support, and modify eligibility criteria to permit greater participation in the voluntary DoD-(DIB) (CS) information sharing program. The rule also revises the program's definitions to better harmonize with definitions that are already established and used by DoD and other Government agencies in similar contexts and modifies eligibility criteria to permit greater participation in the voluntary DoD-DIB CS information sharing program.