DoD's New Year's Gift: More Time to Meet Cyber Safeguarding Requirements
Client Alert | less than 1 min read | 12.30.15
On December 30, DoD issued an interim rule amending the DFARS Safeguarding Rule in several respects, including to provide contractors up to December 31, 2017, to comply with the security control requirements identified in DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, and detailed in NIST Special Publication 800-171, Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations. Despite the additional time to comply, within 30 days of contract award, contractors must still notify the DoD Chief Information Officer of any NIST SP 800-171 security requirements not yet implemented.
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 3 min read | 09.15.26
Until recently, Belgian law did not have a general regulatory framework for internal investigations. Companies wishing to conduct an investigation had to navigate a fragmented set of rules that covered general principles and, to a limited extent, privacy and employee rights. The application of these rules to internal investigations was not clear, and it was therefore often difficult to put the rules into practice. This legal vacuum created significant risks, both for the integrity of the investigation itself and for the admissibility of any evidence gathered.
Client Alert | 7 min read | 09.14.26
AI in Life Sciences: Ten Legal Considerations and Risks of AI Use in Drug Discovery and Development
Client Alert | 6 min read | 09.14.26
Mental Health Parity Bulletin Restates Best Practices for Evaluating Compliance
Client Alert | 6 min read | 09.11.26
It’s LIVE: The Cyber Resilience Act Reporting Is Mandatory as of Today - 11 September 2026
