From: Corporate Counsel
By Marlisse Silver Sweeney, Corporate Counsel, @MarlisseSS
Attention government contractors: you have 72 hours to notify customers of a corporate hack. Writing in Nextgov, Aliya Sternstein says firms doing business with the Feds should expect the entire government “to take a page from the Pentagon and require that firms notify their agency customers of hacks into company-owned systems within three days of detection.”
Currently, government vendors are only required to disclose when classified information or trade secrets related to the defense industry are compromised, says Sternstein. She notes civilian agencies don’t have comparable breach mandates. “Until there is a uniform rule, there will be unrest within the contracting community over why, for instance, the departments of Defense and Homeland Security have different reporting requirements,” she says.
Leave a Reply