No Post-Thanksgiving Break for Cyber – DoD and NIST Publish New Guidance
Client Alert | 1 min read | 12.01.17
Both the Department of Defense and National Institute of Standards & Technology (NIST) have put pen to paper and provided new information for contractors looking to comply with DFARS 252.204-7012 and its accompanying cybersecurity requirements under NIST Special Publication (SP) 800-171. Earlier this week, the DoD posted guidance explaining that contractors can still use system security plans (SSPs) under the original version of NIST SP 800-171 to “document implementation” under the DFARS Clause, despite that version not including SSPs as a security control requirement. Separately, NIST published a draft of NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information, providing guidance to both contractors and their customers regarding how to conduct assessments under NIST SP 800-171. Importantly, the draft is open to comment through December 27, 2017, providing contractors with a unique opportunity to weigh in on how their customers may ultimately judge compliance with the DFARS Clause’s security requirements.
Contacts

Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 3 min read | 10.23.25
Are You Ready for the Economic Crime and Corporate Transparency Act? Key Changes for Businesses
The Economic Crime and Corporate Transparency Act 2023 (ECCTA) brings major changes to UK company law and the operation of Companies House. Whether you are a UK business, an LLP, or an international organisation with UK operations, these reforms will affect your compliance obligations and the way you manage company records. The ECCTA aims to strengthen the UK’s response to corporate and economic crime by improving transparency and accountability across all entities registered or operating in the UK.
Client Alert | 10 min read | 10.23.25
The EU’s Defense Readiness Roadmap and Omnibus: What are the Implications for Defense Procurement?
Client Alert | 5 min read | 10.22.25
Sixth Circuit Reaffirms Privilege Protections During Internal Investigations
Client Alert | 4 min read | 10.21.25
Pivot Point for 340B: HRSA Rebate Model Pilot Program Approaches Launch

