If you are a federal contractor with the DoD and you have found evidence of a cybersecurity breach, DFARS regulations require you to notify the Department of Defense within 72 hours of the discovery of the breach. That notification, however, has to include enough details for the DoD to ascertain the level of risk to the agency and to national security. The information that you have to provide is highly technical and must be provided extremely quickly. Many contractors who decide to do DFARS compliance on their own get tripped up at this point. Worse, the failure to adequately notify the DoD of a breach is itself considered a breach of DFARS protocol. If there has been a cybersecurity breach, you are likely to face some scrutiny from the agency as they try to determine if the breach was a result of your oversight. If you fail to adequately notify the DoD of the breach, you will also face repercussions for that DFARS violation, as well.