Due to the increasingly sophisticated data breaches and aggressive cybersecurity threats our nation facing, it has become very important recently on reinforcing the nation’s cybersecurity. These efforts have revolved around strengthening the Department of Defense (DoD) supply chain. The Defense Federal Acquisition Regulation Supplement also is known as DFARS has been working to encourage DoD contractors to proactively comply with pattern frameworks and to achieve this goal successfully. 252.204-7012 clause safeguarding cyber incident reporting and covered defense information is the new mandatory addition. Under the DFARS clause 252.204-7012, all the DoD contractors must comply with the National Institute of Standards and Technology's Special Publication 800-171 or (NIST 800-171), a framework that layout and make sure that DoD contractors must protect sensitive defense information and also report cybersecurity incidents.
As a defense contractor, NIST Framework requires you to document how you have met the following particular requirements which include,
Security requirements 3.12.4 requires the defense contractor to develop, document and update system security plans (SSPs) that describe system environments of operation, and system boundaries and also how security requirements are implemented or connected to other systems.
Security requirements 3.12.2 requires the defense contractor to develop and implement security plans of action designed to reduce or eliminate vulnerabilities and correct deficiencies in their systems.
The main aim of DFARS clause 252.204-7012 is to encourage you as a contractor and to take the necessary proactive role in the protection of CDI. If you want to strengthen the entire supply chain then as a contractor you need to take necessary steps to demonstrate compliance within your own business and ensure that your subcontractors comply too. It is your subcontractor’s responsibility to inform you if their practices deviate in any way from the guidelines of DFARS and it is your responsibility to demonstrate equally secure and alternative practice before you share CDI with the subcontractor.
With all the above mentioned extensive regulations, it is truly a daunting task to bring your business into lines especially when the stakes are so high. That’s where a managed services professional like ARIENTO comes in. ARIENTO is the most reputable company that have more than 30 plus years of National Security Cyber & IT experience and expertise that is applied to your technology needs. Our team of highly trained professional experts has done it at the highest levels of the Federal Government and US military. No matter whether you are a small or large defense contractor, we have helped everyone to achieve comprehensive DFARS compliance.
AREINTO's main aim and passion are to relieve and rid you of the burdens that come with technology so that you can focus on what's truly important. To know more information and other details about DFARS 252.204-7012, please visit our website here: https://www.ariento.com/
In October of 2016, the Department of Defense (DoD) issued the DFARS 252.204-7012.
The Defense Federal Acquisition Regulation Supplement, or DFARS, has been working to encourage DoD contractors to proactively comply with certain frameworks to achieve this goal.
Clause 252.204-7012, refers to Safeguarding Covered Defense Information and Cyber Incident Reporting, is the latest mandatory addition to this clause.Under the Clause, all contractors must comply with the National Institute of Standards and Technology’s Special Publication 800-171 (NIST SP 800-171), a framework that lays out how contractors must protect sensitive defense information and report cybersecurity incidents.
The DFARS consists of the requirements of the law including DoD-wide policies, delegations of FAR authorities, deviations from FAR requirements, and policies/procedures that have a significant effect on the public.The DFARS should be read in conjunction with the primary set of rules covered in the FAR.
These regulations require contractors and their suppliers to provide adequate security on all covered defense information that is processed, stored, or transmitted on the contractor’s internal information or data.DFARS Clause 252.204-7012 requires contractors/subcontractors to:1) Safeguard Covered Defense Information: that resides on or is transiting through a contractor’s internal information system or network2) Report Cyber Incidents: that affects a covered contractor data system ,the covered defense information, and the contractor’s ability to perform requirements designated as operationally critical support.3) Submit Malicious Software: discovered and isolated about a reported cyber incident to the DoD Cyber Crime Center4) Facilitate Damage Assessment: and additional information to support damage assessment if requestedAriento an ultimate option to choose to give a start.
Ariento has more than 30 years of National Security Cyber & IT expertise (Military & Federal Govt.)
