RegDOX Position on Cyber Incident Reporting

DFARS clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident ReportingIf and when RegDOX (or any client) discovers a cyber incident that affects client information, our protocols dictate that we do the following:

Reporting: Coordinate with the client to rapidly report cyber incidents to DoD at https://dibnet.dod.mil, abiding at all times by any government or client Non-Disclosure Agreements.

Notification of Third-Party Access Requests: To the extent permitted under law, RegDOX will notify a customer promptly of any requests from a third party not licensed by that customer for access to the customer’s account, including any warrants, seizures, or subpoenas it receives, including those from another Federal, State, or local agency. RegDOX shall cooperate with the customer to take all measures to protect the customer’s data from any unauthorized disclosure.

Review and Analysis: Conduct a review for evidence of compromise of information, including, but not limited to, identifying compromised computers, servers, specific data, and user accounts in accordance with applicable laws and regulations on the interception, monitoring, access, use, and disclosure of electronic communications and data.

This review shall include analyzing all information system(s) that were part of the cyber incident. The cyber incident report shall be treated as information created by or for DoD and shall include, at a minimum, the required elements at https://dibnet.dod.mil.

Preservation: We will preserve and protect images of all known affected information systems identified and all relevant monitoring/packet capture data for at least 90 days from the submission of the cyber incident report to allow DoD to request the media or decline interest.

Remedial Actions: If and when we (or any client) discover malicious software in connection with a reported cyber incident, we shall immediately isolate the malware, and coordinate with the client to submit the malicious software to DoD Cyber Crime Center (DC3) in accordance with instructions provided by the client and DoD SOP. We will provide permission and access to additional information or equipment that is necessary to conduct a forensic analysis.

Cooperation: If the client or the DoD elects to conduct a damage assessment or any other information needed, we will provide all of the information we can. Upon notification by the Government of spillage, or upon a customer’s discovery of a spillage, RegDOX shall cooperate with the Government and the customer to address the spillage in compliance with agency procedures.