Revised Cybersecurity Requirements Mean More Compliance Measures for Defense Contractors

On Dec. 30, 2015, the Defense Department (DOD) issued a second interim rule allowing defense contractors an extension until Dec. 31, 2017, to implement the National Institute of Standards and Technology (NIST) cybersecurity controls required by DOD’s recently revised DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, and DFARS 252.204-7008, Compliance with Safeguarding and Covered Defense Information Controls. The revised DFARS contract clauses were issued effective immediately on Aug. 23, 2015. Many were concerned that, absent the extension, defense contractors would be unable to comply with the new requirements, that the rules lacked clarity, and that the cost ...