DFARS Cyber Rule – What Questions Should Contractors Ask Themselves in the New Year?

Since August 2015, defense contractors have been on notice that they were required to implement on covered contractor information systems the security controls in National Institute of Standards and Technology Special Publication 800-171, no later than December 31, 2017. Although the focus has been on meeting this deadline, contractors should add to their New Year resolutions compliance with other areas of DFARS 252.204-7012, and confirm that their existing processes and procedures anticipate how the DoD will measure compliance with the Rule in the year to come.