Department of Defense Revises Landmark Cybersecurity Rule, Extends Deadline for Some Compliance Requirements

Department of Defense Revises Landmark Cybersecurity Rule, Extends Deadline for Some Compliance Requirements

Publication

Related Documents

Related Solutions

Bringing significant depth and critical experience to government contracting matters.
Advising clients on changing priorities, new regulations, emerging threats and untapped opportunities.
When legal, public policy and media challenges converge and an institution's reputation and business are at stake, no firm rivals WilmerHale’s ability to navigate fast-moving events and craft lasting solutions.
A global team handling highly complex and sensitive matters in all aspects of litigation.
Drawing on years of experience in the public and private sectors, our lawyers handle a range of litigation involving the federal government, state and foreign governments, and complex regulatory regimes.
We help companies protect data, comply with evolving regulations, and respond to investigations and litigation.
Providing a strategic, multidisciplinary approach to help clients develop and use AI and to navigate the landscape of Big Data.

An article by Benjamin A. Powell, Barry J. Hurewitz, Jonathan G. Cedarbaum, Jason C. Chipman and Leah Schloss, published in the May 2016 issue of Privacy & Cybersecurity Law Report, explores the new, amended Department of Defense interim cybersecurity rule that prescribes cybersecurity requirements, including mandatory cybersecurity-related contract clauses in all DoD contracts subject to the Defense Federal Acquisition Regulations Supplement. The authors of this article discuss the amended interim rule, which will affect both Defense Industrial Base and other cases, indicating that even as the DOJ has renewed its focus on individuals, it continues to pursue large cases with corporations—and that the SEC continues to broadly define a "thing of value" under the FCPA.

In December 2015, the Department of Defense (''DoD'') issued a second interim rule on Network Penetration Reporting and Contracting for Cloud Services, amending an earlier version issued on August 26, 2015. The new, amended DoD interim rule prescribes cybersecurity requirements, including mandatory cybersecurity-related contract clauses in all DoD contracts subject to the Defense Federal Acquisition Regulations Supplement (''DFARS''). Despite its narrow title, the rule remains expansive in scope and prescriptive in application, mandating specific data security controls for sensitive unclassified information throughout the DoD supply chain. As such, the rule, even as revised, will affect both Defense Industrial Base (''DIB'') and other companies. Read the full article

Authors

Notice

We appreciate your interest in WilmerHale. While we are pleased to have you contact us, please keep in mind that merely contacting WilmerHale does not create an attorney-client relationship. Such a relationship will not arise until the Firm agrees in writing to represent you in connection with a particular matter. Importantly, unless and until this has occurred, you should not provide us with any confidential information, and we have no duty to keep confidential any information that we may receive from you. Thank you for your understanding.

I Accept Cancel