On August 26, the DOD released an interim rule that implements cloud computing and cyber incident reporting procedures for DOD contractors. The interim rule requires contractors and subcontractors to report cyber incidents that actually or potentially adversely affect covered information, systems, or critical support capabilities. In addition, the rule sets forth cloud computing services policies that require use of U.S. servers for handling covered information. For more information, see Jones Day publication: "New DOD Cybersecurity Rule Continues Onslaught of Federal Regulations for Government Contractors."
The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.
