Future Outlook on Cybersecurity Compliance Requirements
The December 31, 2017 deadline for Department of Defense contractors to implement NIST SP 800-171 has passed however, Federal contracting cyber oversight is still heating up. With proposed GSA and FAR rules coming this spring, industry can anticipate continued guidance and regulation while simultaneously working to maintain compliance with existing DFARS cyber requirements. While many contractors may have viewed the initial deadline as something that’s come and gone, industry should be careful to view it as a starting point and not the finish line. Contractor’s cybersecurity frameworks are living environments that must be continually assessed, updated and reported on to protect against evolving threats and maintain compliance with Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012. It can be expected that as further insight into the capabilities of contractors to protect data is obtained, the government will continue to require more stringent controls over information it feels is critical to national security.
Please join the Coalition for Government Procurement as we welcome two presenters from EY, Andrew Artz, and Michael Tomaselli. Andrew and Michael will focus on both immediate and ongoing compliance requirements as well as a future outlook on Cybersecurity requirements in Federal contracting.
Demonstrating Compliance
- System security plans
- Remediation plans (POAMs)
- Subcontractor flowdown
- Incident reporting
Ongoing Compliance and Future Outlook
1. Control validation/testing
2. Reporting considerations and communication
3. Subcontractor monitoring
4. Enforcement actions
5. Training
6. Future state considerations
Andrew Artz is a Principal in EY’s Government Contract Services (GCS) with over 15 years of experience in government contracting. As the GCS cybersecurity lead, he’s assisted numerous clients with interpreting regulatory requirements and assessing internal controls for contractual compliance efforts.
Michael Tomaselli is a Manager with EY’s GCS practice with over 10 years of experience working with contractors and their internal and external legal counsel on a wide range of compliance matters. Over the past 18 months, Michael has been focused on assisting clients with developing tailored approaches to compliance with DFARS 252.204-7012.
Pricing:
Keystone Member: Complimentary
Executive Member/Strategic Partner: Complimentary
Premier Member: Complimentary
Standard/Affiliate Member: $50
Non-Member: $95
Government (with ID): Complimentary
Registration not available.