DoD tightens enforcement of cyber regulations on contractors to protect data

Susan Cassidy is quoted in Federal News Network regarding the Department of Defense’s tightening of cybersecurity enforcement regulations on contractors.

Ms. Cassidy says, “DoD wants to get everyone to a certain cybersecurity level. Now they are tightening up and they are going to make it a performance and award differentiator.” She said before an award, DoD’s policy requires companies attest that they implemented the minimum standards of special publication 800-171. She adds, “DoD is going to evaluate our compliance with 800-171 as part of an award decision. The system security plans, which are probably for the most part put together by your IT team, are also something that should be read by your business development team and your legal team because they are going to become part of the evaluation factors potentially and that means it’s going to impact your competitive landscape.”