The 72-hour clock starts the moment you discover it. Cincra starts it with you.
DFARS 252.204-7012 gives you 72 hours from discovery to report a cyber incident affecting CUI to DoD via DIBNet. Cincra opens the incident, computes the deadline, counts it down in the open, holds the timeline of what you did and when, and records the DIBNet Incident Report Number when you file — so the whole thing is defensible a year later.
Live 72-hour countdown
Mark the incident as CUI-involved and the reporting deadline is set to discovery + 72 hours. The portal counts down and turns red before it lapses, not after.
Timeline of record
Every status change and action is a timestamped timeline event with an author. This is the narrative an assessor asks for when they test 3.6.1 and 3.6.2.
DIBNet report capture
Record the date you reported and the DoD Incident Report Number. The claim 'we reported it' stops being a memory and becomes an artifact.
Wired to your assessment
Incidents surface directly in the 3.6.x control drawers of the Assessment Wizard, so incident response answers cite real events instead of a policy paragraph.
MSP escalation
If an MSP runs your program, an approaching or lapsed 72-hour deadline lands in their inbox as a task automatically.
In the audit package
Incident reports and their timelines export as CSVs inside the audit ZIP, and an overdue unreported CUI incident is a hard blocker on the C3PAO readiness gate.
Most CMMC tools treat incident response as a policy document you upload once. Assessors don't test the document — they test whether you can produce the record: when it was discovered, who did what, whether it touched CUI, and whether DoD was notified inside 72 hours. Cincra keeps that record as you operate, not the week before the assessment.
Cincra does not submit to DIBNet on your behalf. Reporting to DoD requires a medium assurance certificate and is performed by your organization; Cincra tracks the deadline and stores the proof.
Have the record before you need it.
Incident Response is included on every contractor plan.