Under DFARS 252.204-7012, contractors working with the Department of Defense are required to report cyber incidents within 72 hours of discovery. But understanding the process—and the options—can be overwhelming.
We’ve created a simple infographic to help you quickly understand:
✅ The preferred method for secure reporting using a DoD-Approved Certificate
⚠️ Alternative options like One-Time Tokens and DoD SAFE
⏱️ Key timing requirements for reporting, support, and evidence retention
Use this visual guide to stay compliant, respond confidently, and protect your contracts.
📌 Bookmark this page or download the infographic as a quick reference for your compliance team.
