72-Hour DoD Breach Notification: DFARS Reporting Requirements

When a cyber incident affects systems containing Controlled Unclassified Information, defense contractors have exactly 72 hours to report to the Department of Defense. This requirement, established in DFARS 252.204-7012, is…