Common use of Incident Reporting Process Clause in Contracts

Incident Reporting Process. ‌ Any U.S. Federal Government entity discovering a security incident will report it in accordance with the organization’s incident reporting procedures. NCCIC TAXII shall report security incidents to the DHS Security Operations Center (SOC). DHS SOC contact information is: • DHS OneNET Support: 1-877-DHS1NET or ▇-▇▇▇-▇▇▇-▇▇▇▇ o Option 1 = NOC o Option 2 = SOC • DHS SOC Direct Line: (▇▇▇) ▇▇▇-▇▇▇▇ Individual U.S. Federal Government agencies will report incidents in accordance with their individual policies concerning incidents. Timeframes for reporting suspected or confirmed incidents are outlined in the DHS TAXII system incident response procedures and align with DHS 4300A Attachment F, Appendix F3, “Response Guidelines.” Each organization will ensure that the other connecting organization is notified when security incidents may have affected the confidentiality, integrity, or availability of the shared data or systems being accessed. Notification for security incidents will be done, at a minimum, to the appropriate SOC and the security point of contacts (POCs) listed in this Interconnection Security Agreement that companies are required to sign.