Code of Federal Regulations · Section
§ 1252.239-83 — 1252.239-83 Incident Reporting Timeframes
48 C.F.R. § 1252.239-83
View:
As prescribed in 1239.7204(h), insert the following clause:
(a) The Contractor shall report all computer security incidents to the DOT Security Operations Center (SOC) in accordance with Subpart 1239.70—Information Security and Incident Response Reporting.
(b) Contractors and subcontractors are required to report cyber incidents directly to DOT via the DOT SOC 24 hours-a-day, 7 days-a-week, 365 days a year (24x7x365) at phone number: 571-209-3080 (Toll Free: 866-580-1852) within 2 hours of discovery, regardless of the incident category. See 1252.239-74, Safeguarding DOT Sensitive Data and Cyber Incident Reporting.
Authorizing Statute
-
General authority41 U.S.C. § 1121
-
Chief Acquisition Officers and senior procurement executives41 U.S.C. § 1702
-
Departmental regulations5 U.S.C. § 301