Share on LinkedInShare on LinkedIn

ARTICLE · 08 JANUARY 2016

DoD Grants Contractors A Reprieve: Cybersecurity Compliance Is Delayed

Contractors now have until Dec. 31, 2017, to comply with the U.S. Department of Defense's new interim rules regarding information system security requirements, mandatory cyber breach reporting, and cloud computing standards and procedures.

United StatesGovernment, Public Sector

Mary Elizabeth Bosco is a Partner in Holland & Knight's Washington D.C. office

HIGHLIGHTS:

  • Contractors now have until Dec. 31, 2017, to comply with the U.S. Department of Defense's new interim rules regarding information system security requirements, mandatory cyber breach reporting, and cloud computing standards and procedures.
  • Contractors still need to identify noncompliant procedures in current proposals.
  • The scope of affected subcontractors is limited.

The U.S. Department of Defense (DoD) released interim rules on Aug. 26, 2015, setting forth (i) information system security requirements; (ii) mandatory cyber breach reporting; and (iii) cloud computing standards and procedures. The rules were effective immediately. The rules required that the information systems of contractors storing or using "covered defense information" – defined as non-classified information that is either provided by DoD to the contractor or is transmitted, used, or stored

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from