VA Sets 1-Hour Incident Reporting Requirement for Contractors

Under a rule being published by the Department of Veterans Affairs in the Federal Register, contractors handling “sensitive personal information” will be required to report security and privacy incidents within an hour of discovering the problem.

🔒 Members Only · Cyber & AI BriefYou’ve reached the member portion of this brief.Members read the full analysis and the source documents in every Brief, six days a week.