us-federal · 2016

Defense Federal Acquisition Regulation Supplement (Cybersecurity Requirements)

DFARS clause 252.204-7012 requires defense contractors to implement cybersecurity controls from NIST SP 800-171 and report cyber incidents to DoD within 72 hours. This regulation applies to all defense contracts involving Covered Defense Information (CDI). It flows down to subcontractors at all tiers in the defense supply chain.

Resumen editorial. Para el texto oficial, consulta la fuente oficial.

DecipherU no ofrece asesoría jurídica. Consulta abogado en tu jurisdicción para decisiones de cumplimiento.