Comment The rules are already out (Score 2) 19
You must disclose any breach at least 90 days prior to discovery or 60 days prior to its occurrence, whichever comes first. Any breach occurring without advance notification will be dealt with severely.
You must disclose all breaches on Form 27B/6. The form is secret and you do not have access to it.
Access to your system by any person on the 'no access list' will be considered a breach. The identity of persons on the 'no access list' is secret, and the Government will not inform you of whether any given person is or is not on it.
Knowing of any breach makes a person a 'high risk' individual. 'High risk' individuals shall be added to the 'no access list.'
The Government reserves the right to access your system at any time without notification. Allowing anyone, including the Government, access without advance approval is a security breach.
These rules themselves are secret and you do not have access to them.
Thank you for your cooperation, Citizen.