DFARS Final Rule Requires Contractor Reporting of Network Penetrations, Amends Definitions of Covered Defense Information and Covered Contractor Information System

The Department of Defense has published a final rule amending the Defense Federal Acquisition Regulation Supplement to require contractor reporting on network penetrations and to implement DoD policy on the purchase of cloud computing software.