IT suppliers hacked off with Uncle Sam’s demands in aftermath of cyberattacks

The article reports on proposed changes to the Federal Acquisition Regulation that would require government IT contractors to report detected cybersecurity incidents to CISA within eight hours (with updates every 72 hours), maintain a software bill of materials (SBOM), and provide CISA and federal law enforcement “full access” to contractor systems and personnel after an incident; contractors supplying services to the U.S. government are expressing opposition to these potential requirements.