Proposed contractor cyber reporting rule sets a 'significantly problematic' bar, industry groups say

The proposed rule from the Pentagon, GSA and NASA - the agency trio that jointly issues policy measures tied to the Federal Acquisition Regulation - would, among other things, require contractors to develop a Software Bill of Materials - or SBOM - for all software used when performing contracting tasks, as well as notify the Department of Homeland Security of a security incident within eight hours of its discovery.

Read at Databreaches