This Homeland Security Acquisition Regulation (HSAR) rule proposes to establish security standards that government contracts must contain in order to mitigate and manage potential breaches of sensitive information such as Personally Identifiable Information (PII).  Specifically, the rule would define key terms, outline security requirements and inspection provisions for contractor information technology (IT) systems that store or process sensitive information, institute incident notification and response procedures, and identify post-incident credit monitoring requirements.