The window for Department of Defense (DOD) contractors to bring themselves into compliance with cybersecurity requirements is closing. Specifically, changes to the Defense Federal Acquisition Regulation Supplement (DFARS) published in late 2016 require that DOD contractors and subcontractors provide “adequate security” on “covered information systems.” The new rule also imposes reporting requirements for cyber incidents. Failure to comply with these requirements could result in loss of government contracting opportunities and civil and criminal liability for responsible companies and individuals.

The amended DFARS clause imposes a critical and fast approaching deadline for DOD contractors, including manufacturers, to implement specific security measures on their covered information systems by December 31, 2017.

Contact Manex for details at 925-807-5100 or email bizdev@manexconsulting.com.