DFARS Cyber Safeguarding
Three pieces on DFARS subpart 204.73 and the clauses at 252.204-7012, 7019 and 7020: safeguarding, incident reporting and assessments.
Three pieces in this topic
Covered defense information and adequate security
What the subpart covers, covered defense information, systems operated for the government, NIST SP 800-171, cloud providers, and flowdown.
02Reporting a cyber incident under DFARS
What counts as an incident, the review and 72-hour report, subcontractors, malicious software and images, and how reports are used.
03NIST SP 800-171 DoD assessments
A current assessment before award, three assessment levels, posting scores in SPRS, rebuttal, access to scores, and subcontracts.
Key terms in this topic
Covered defense informationCovered contractor information systemAdequate securityVarianceFedRAMP Moderate equivalenceCyber incidentRapidly reportMedium assurance certificateMedia preservationDC3Basic AssessmentMedium AssessmentHigh AssessmentSummary level scoreRebuttal window
Other topics in controlling what transfers
- Technology Transfer and Export Control 5 pieces
- End Use Monitoring 5 pieces
- Excess Defense Articles 3 pieces
- Offsets 3 pieces
- Sensitive Systems and Export Compliance 3 pieces
- Classifying Defense Articles 3 pieces
- Commercial Export Licenses 3 pieces
- Defense Services Agreements 3 pieces
- Licensing Exemptions 3 pieces
- Brokering Controls 3 pieces
- Violations and Penalties 4 pieces
- Registration and Reporting 2 pieces
- Assistance Program Controls 2 pieces
- Munitions List: Weapons 6 pieces
- Munitions List: Platforms 4 pieces
- Munitions List: Electronics 5 pieces
- Munitions List: Training and Protection 3 pieces
- Release Gates for Sensitive Systems 2 pieces
- Country Policy and the Treaties 5 pieces
- Licenses From Application to Revocation 5 pieces
- ITAR Definitions and Technical Data 5 pieces
- Terrorism and Missile Controls 4 pieces
- Chemical, Biological and Nuclear Sanctions 3 pieces
- CMMC Program Basics 3 pieces
- CMMC Assessment Levels 3 pieces
- CMMC Assessment Ecosystem 3 pieces
- Controlled Unclassified Information 3 pieces
- 600 Series Framework 3 pieces
- Licensing 600 Series Items 3 pieces
- Guns, Vehicles and Vessels 3 pieces
- Aircraft, Engines and Electronics 3 pieces
- Protective, Training and Other Items 3 pieces