DoD Meets Contractors Half-Way at Industry Information Day
Client Alert | 1 min read | 06.28.17
On June 23, the Department of Defense hosted its highly anticipated Industry Information Day to respond to feedback received from the contracting community regarding last year’s finalization of DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting. Top of mind for many in attendance was the looming end-of-year deadline to implement NIST SP 800-171, including its requirements regarding multifactor authentication. By the end of the session, however, DoD representatives repeatedly stated that contractors may use system security plans (SSPs) and plans of action and milestones (POAMs) to document their anticipated implementation of the required controls and thus comply with the Clause – even if the actual implementation of those controls extends beyond 2017. A revised set of FAQs is expected next month, which should provide additional details regarding this new guidance.
Contacts
Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 7 min read | 11.05.26
2026 State Attorney General Elections: What Businesses Should Expect
As of November 4, 2026, the state attorney general elections point to increased enforcement in 2027, particularly in consumer protection, antitrust, AI, health care, and data centers.[1] Businesses should prepare for more investigations under existing laws and proposals for new legislation or rules. Campaign commitments indicate priorities, but their timing and implementation remain uncertain.[2]
Client Alert | 3 min read | 11.05.26
Federal, State, and Local Regulators Sue Toast Over B2B Advertising and Subscriptions
Client Alert | 3 min read | 11.04.26
CMS Proposal Would Overhaul Eligibility Rules for ACA Exchanges
Client Alert | 7 min read | 11.04.26
FDA Issues Guidance on Prescription Drug Use-Related Software
