Common use of Security Incident Reporting Clause in Contracts

Security Incident Reporting. A security incident occurs when CDA information assets are accessed without proper identification, modified, destroyed, disclosed, lost, or stolen. Contractors must report all security incidents to the AAA Program Manager immediately upon occurrence or detection. A Security Incident Report form (CDA 1025) must be submitted to the CDA Information Security Officer within five (5) business days of the date the incident occurred or was detected. Contractor, subcontractors, and their employees should be aware that security incidents and failure to report these incidents may lead to administrative sanctions (e.g., contraction termination, personnel action), criminal prosecution, or civil liability.