DCMA Revises Cyber Supply Chain Review: Updated Guidebook Modifies Audit Standards
Client Alert | 1 min read | 07.16.19
As anticipated, the Defense Contract Management Agency (DCMA) revised its Contractor Purchasing System Review (CPSR) Guidebook as of June 14, 2019, with the most significant updates to Appendix 24, Supply Chain Management Process, to further address supply chain compliance with DFARS 252.204-7012. As we previously noted, the CPSR Guidebook was revised earlier this year to address DoD guidance related to management and oversight of the supply chain in connection with DFARS 252.204-7012.
While much of the CPSR review criteria remain the same, noteworthy revisions include:
- Asking contractors to “show how they have determined” that their subcontractors have an adequate information system that can handle Covered Defense Information, versus the prior guidance to ask contractors to “validate” the adequacy of subcontractor systems.
- Broadening supply chain requirements by applying the Guidebook’s language to “subcontractors,” rather than just “first tier suppliers” as in the prior version.
- Clarifying that the CPSR review is focused only on the protection of “Covered Defense Information” and not “Controlled Unclassified Information” more broadly.
Contacts
Partner
She/Her/Hers
Senior Counsel
She/Her/Hers
Insights
Client Alert | 3 min read | 05.16.25
On May 14, 2025, the Environmental Protection Agency (“EPA”) announced that it will keep the current National Primary Drinking Water Regulations (“NPDWR”) for perfluorooctanoic acid (“PFOA”) and perfluorooctane sulfonic acid (“PFOS”) under the Safe Drinking Water Act (“SDWA”), while extending the compliance deadline from 2029 to 2031. EPA further announced it plans to rescind requirements in those regulations applicable to other PFAS and mixtures of certain PFAS in drinking water. The NPDWR consists of legally enforceable primary standards and treatment techniques that apply to public water systems and guide EPA’s enforcement of the SDWA. This announcement follows EPA’s April 28, 2025 press release outlining its priorities for PFAS enforcement, which included 21 actions EPA intends to take to address PFAS and “engage with Congress and industry to establish a clear liability framework that ensures the polluter pays and passive receivers are protected.”
Client Alert | 2 min read | 05.16.25
Client Alert | 3 min read | 05.16.25
New SF-328 Released and Embedded Guidance Seeks More Information Up Front
Client Alert | 6 min read | 05.16.25
Recent Antitrust Enforcer Statements Signal New Administration’s Direction and Priorities
