Client Alerts & Newsletters

Are You Cyber Secure Under the DFARS Rule?


With a revised regulatory regime still rippling through the defense industry, DoD fundamentally reshaped the cybersecurity rules in the DoD Federal Acquisition Regulation Supplement in November 2013 by (1) imposing 51 mandatory security controls for DoD-controlled technical information; (2) requiring the DFARS "Safeguarding" clause in all DoD contracts and solicitations; (3) mandating that contractors flow down the requirements, even to commercial subcontractors; and (4) defining detailed reporting requirements for certain types of security  "incidents" or breaches. In a "View from Crowell & Moring: Getting Ahead of the DFARS Safeguarding Rule" published in Bloomberg BNA’s Federal Contracts Report, David Bodenheimer, Evan Wolff, and Kate Growley discuss the definitional gaps, compliance pitfalls, and practical pointers for determining the reach of the DFARS Safeguarding Rule, the mandate for "adequate security," the scope of the reporting requirements, and the emerging lessons learned in navigating these game-changing cybersecurity safeguards governing DoD procurements.

For more information, please contact the professional(s) listed below, or your regular Crowell & Moring contact.

Evan D. Wolff
Partner – Washington, D.C.
Phone: +1 202.624.2615

Kate M. Growley, CIPP/G, CIPP/US
Partner – Washington, D.C.
Phone: +1 202.624.2698

Crowell & Moring LLP is an international law firm with offices in the United States, Europe, MENA, and Asia that represents clients in litigation and arbitration, regulatory and policy, and transactional and corporate matters. The firm is internationally recognized for its representation of Fortune 500 companies in high-stakes litigation and government-facing matters, as well as its ongoing commitment to pro bono service and diversity, equity, and inclusion.

View Desktop Site | Mobile Sitemap |

Contact | Subscribe | Terms of Use | Privacy Statement | Alumni

© Crowell & Moring LLP 2021
Attorney advertising - prior results do not guarantee a similar outcome.