IT suppliers hacked off with Uncle Sam's demands in aftermath of cyberattacks

The report discusses proposed FAR updates that would mandate rapid cyber incident reporting (within 8 hours), ongoing updates, SBOM maintenance, and post-incident access for federal agencies, prompting significant pushback from cloud providers and industry associations over operational burden and regulatory overlap. It contrasts these rules with existing SEC and FTC reporting requirements and the forthcoming CIRCIA framework, highlighting calls to consolidate incident reporting under CISA to reduce duplication and misalignment across federal policies.