GroundRules
← Search the law
Federal regulations · Through 2026-08-25 · Newer source version available

48 CFR 1252.239-83: 1252.239-83 Incident Reporting Timeframes.

Read at publisher ↗
Where this section sits in the code
  1. Title 48—Federal Acquisition Regulations System
  2. CHAPTER 12—DEPARTMENT OF TRANSPORTATION
  3. SUBCHAPTER H—CLAUSES AND FORMS
  4. PART 1252—SOLICITATION PROVISIONS AND C ONTRACT CLAUSES
  5. Subpart 1252.2—Text of Provisions and Clauses

As prescribed in 1239.7204(h), insert the following clause:

Incident Reporting Timeframes (NOV 2022)

(a) The Contractor shall report all computer security incidents to the DOT Security Operations Center (SOC) in accordance with Subpart 1239.70—Information Security and Incident Response Reporting.

(b) Contractors and subcontractors are required to report cyber incidents directly to DOT via the DOT SOC 24 hours-a-day, 7 days-a-week, 365 days a year (24x7x365) at phone number: 571-209-3080 (Toll Free: 866-580-1852) within 2 hours of discovery, regardless of the incident category. See 1252.239-74, Safeguarding DOT Sensitive Data and Cyber Incident Reporting.

(End of clause)

Collected 2026-08-27T02:26:29Z. Source file · JSON

Browse this collection