Federal Register #2026-22639

HUD seeks comment on proposed cyber incident reporting requirements for public housing agencies

HUD is seeking public comment on proposed cyber incident reporting requirements for public housing agencies, not procuring products or services. - Government buyer: U.S. Department of Housing and Urban Development (HUD), Office of the Assistant Secretary for Public and Indian Housing. - Purpose: Seek Office of Management and Budget approval for a new information collection on cyber incident reporting by public housing agencies (PHAs). - Proposed requirement: PHAs would report cyber incidents to HUD and law enforcement within 36 hours of becoming aware of an incident. - Reports would include the PHA’s name and code, follow-up contact information, incident details and known impacts, and response status, including law-enforcement notifications. - Estimated reporting burden: 150 annual responses, 300 annual burden hours, and $20,688 in annual respondent costs. - Procurement scope: No products, services, part numbers, quantities, OEMs, or vendors are identified.

Description

HUD is seeking OMB approval for a new information collection concerning cyber incident reporting by public housing agencies (PHAs). PHAs are required to report cyber incidents to HUD and law enforcement within 36 hours of awareness, with reports including agency identification, contact details, incident description, impacts, and response status. The notice invites public comments on the proposed collection; comments are due January 4, 2027.

View original listing