us-federal · 2016

Defense Federal Acquisition Regulation Supplement (Cybersecurity Requirements)

DFARS clause 252.204-7012 requires defense contractors to implement cybersecurity controls from NIST SP 800-171 and report cyber incidents to DoD within 72 hours. This regulation applies to all defense contracts involving Covered Defense Information (CDI). It flows down to subcontractors at all tiers in the defense supply chain.

Resumo editorial. Para o texto oficial, consulte a fonte oficial.

A DecipherU não oferece consultoria jurídica. Consulte um advogado na sua jurisdição para decisões de compliance.