Safeguarding Covered Defense Information, Cyber Incident Reporting, and Cloud Computing

This collection implements mandatory tracking and reporting of intrusions on unclassified networks or contractor information technology systems that process DoD information or those contractors designated as providing operationally critical support. DoD is required by statute to establish programs and activities to protect DoD information and DoD information systems, including information and information systems operated and maintained by contractors or others in support of DoD activities. Offerors and contractors must report cyber incidents on unclassified networks or information systems, within cloud computing services, and when they affect contractors designated as providing operationally critical support, as required by statute.

The latest form for Safeguarding Covered Defense Information, Cyber Incident Reporting, and Cloud Computing expires 2029-05-31 and is listed under ICR 202509-0704-003.