FISMA 3554(b)(7): 3554(b)(7) Incident detection, reporting and response, with seven-day major incident notice to Congress

The program includes procedures for detecting, reporting and responding to security incidents, consistent with the standards and guidelines the incident center issues, which may use automated tools and which mitigate the risks of an incident before substantial damage is done; notify and consult the federal information security incident center; notify and consult as appropriate law enforcement, the Inspector General and General Counsel, the office the President designates for incidents involving a national security system, and any other agency or office as law or the President directs; and, for a major incident, notify the congressional committees named in subsection (c)(1) within seven days of the date on which there is a reasonable basis to conclude that it occurred, with further notice within a reasonable time as more is learned, including the summary required for the annual report.