Procedure must include:
1) Established reporting chain, including notifying GE if any potential security issue or breach involves GE shipments
2) Time limits for making reports (no more than 24 hours)
3) Reporting requirement applicable to any sub-contractors that handle freight."