Share on LinkedInShare on LinkedIn

ARTICLE · 06 JANUARY 2016

DoD Revises Its Interim Cybersecurity DFARS Clauses Concerning Network Penetrations And Cloud Computing, Giving Contractors Additional Time To Comply With Applicable NIST Requirements

Mayer Brown
Mayer Brown
Contributor
Mayer Brown

Mayer Brown

Mayer Brown is a leading international law firm positioned to represent the world’s major...

View firm profile
Explore more from Mayer Brown

Last week, DoD again revised the rule to give contractors more time to comply with many of the new technical standards.

United StatesGovernment, Public Sector

Keywords: DoD, Interim, Cybersecurity, DFARS, Cloud Computing, NIST

Back in August 2015, DoD issued an interim rule, which was effective immediately (and was previously discussed on this blog), imposing substantial new requirements on government contractors with respect to reporting information system network penetrations—and providing new cloud computing requirements. Six weeks later, DoD issued a class deviation giving contractors more time to comply with one of the technical requirements being applied by the new DFARS clauses included with the new rule. Last week, DoD again revised the rule to give contractors more time to comply with many of the new technical standards. Specifically, the revised DFARS provision makes clear that contractors have until December 31, 2017 to comply with the technical standards set forth in National Institute of Standards and Technology (NIST) Special Publication 800-171.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

See more popular content from