DoD Meets Contractors Half-Way at Industry Information Day
Client Alert | 1 min read | 06.28.17
On June 23, the Department of Defense hosted its highly anticipated Industry Information Day to respond to feedback received from the contracting community regarding last year’s finalization of DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting. Top of mind for many in attendance was the looming end-of-year deadline to implement NIST SP 800-171, including its requirements regarding multifactor authentication. By the end of the session, however, DoD representatives repeatedly stated that contractors may use system security plans (SSPs) and plans of action and milestones (POAMs) to document their anticipated implementation of the required controls and thus comply with the Clause – even if the actual implementation of those controls extends beyond 2017. A revised set of FAQs is expected next month, which should provide additional details regarding this new guidance.
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 4 min read | 10.30.26
Recent sustain decisions by the U.S. Government Accountability Office (GAO) in Fluor Federal Solutions, LLC and Reliance Test & Technology send a clear message: when an agency tries to fix a Procurement Integrity Act (PIA) violation by committing a second one, the cure can be just as fatal as the disease. The cases involved the U.S. Air Force’s $1.8 billion procurement for O&M services at Elgin Air Force Base. During discussions, the Air Force inadvertently released a pricing overview slide with all offerors’ bottom-line evaluated costs to Reliance Test & Technology, which immediately notified the agency of the error. In response, the Air Force decided to level the playing field by providing the same information to all the other offerors in the procurement, stating, “[o]fferors may consider this disclosure in their [final proposal revision].”
Client Alert | 3 min read | 10.29.26
What University Licensors Should Learn From TexasLDPC v. Broadcom
Client Alert | 2 min read | 10.28.26
Debriefing to Dead Briefing: How to Avoid Dismissal by Identifying “Required” Debriefings
