If a U.S. DOT SBIR Phase I or Phase II/IIB awardee is a victim of a cyber-attack, what should the awardee do?

First, awardees must report the cyber incident to the Cybersecurity Infrastructure & Security Information Agency (CISA) in a timely manner. Then, awardees should notify their U.S. DOT SBIR Contracting Officer via email.