Cyber Thursday: Federal Cybersecurity Reporting Requirements for Small Business

Small businesses carry more federal reporting obligations than most realize, and they are scattered across different rules with different clocks. This session walks through the ones that actually apply to you. We cover DFARS 252.204-7012 incident reporting to DIBNet within 72 hours, the medium assurance certificate you need before you can file, SPRS score posting, and annual affirmations. We will also cover CISA’s CIRCIA rule and whether your business falls inside its scope. You will leave knowing what triggers a report, who receives it, how fast the clock runs, and what to have ready before an incident happens.

Speaker: Matt Frost, Government Contract Specialist, Wisconsin Procurement Institute – WI APEX Accelerator