DFARS 72-Hour Incident Reporting Timer
DFARS 252.204-7012(c) requires contractors to rapidly report a cyber incident affecting covered defense information to DoD at dibnet.dod.mil within 72 hours of discovery. Enter when you discovered the incident to start the clock.
The 72-hour clock starts at discovery of a cyber incident affecting covered defense information (DFARS 252.204-7012(c)).
Track incidents alongside your assessment, POA&M, and evidence.
Sign in to log this incident in your assessment →This timer is an informational aid based on DFARS 252.204-7012. It does not file a report, notify DoD, or constitute legal advice. Confirm your specific contractual reporting obligations with your contracting officer.