Section 1252.239-83 - Incident Reporting TimeframesAs prescribed in 1239.7204(h), insert the following clause:
Incident Reporting Timeframes (NOV 2022)
(a) The Contractor shall report all computer security incidents to the DOT Security Operations Center (SOC) in accordance with Subpart 1239.70-Information Security and Incident Response Reporting.(b) Contractors and subcontractors are required to report cyber incidents directly to DOT via the DOT SOC 24 hours-a-day, 7 days-a-week, 365 days a year (24x7x365) at phone number: 571-209-3080 (Toll Free: 866-580-1852) within 2 hours of discovery, regardless of the incident category. See 1252.239-74, Safeguarding DOT Sensitive Data and Cyber Incident Reporting.(End of clause)