In accordance with GDELS procedures and in order to comply with the applicable regulations, including the data breach notification duty under Article 33.2 of the General Data Protection Regulation (“GDPR”), subcontractors, including vendors and consultants, (collectively, “Suppliers”) are required to rapidly report cyber incidents within 72 hours of discovery to:

  • The GDELS SCM point of contact, and
  • The Computer Security Incident Response Team (CSIRT) at [email protected]
  • Cyber incident reporting process

  • English version. Download
  • German version. Download
  • Spanish version. Download