Cyber DFARS Workshop

Description

Countdown to Compliance

Contractors to the Department of Defense (DoD) must show compliance with DFARS 252.204-7012 Safeguarding Covered Defense Information (CDI) and Cyber Incident Reporting clause by 31 December 2017.

What does this really mean and what are the minimum necessary security controls to demonstrate compliance?  What happens if the contractor can’t comply by the deadline?

DFARS 252.204-7012 specifies the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 as the security standard for protecting both controlled unclassified information (CUI) and CDI.

This workshop presents an overview of NIST 800-171 from the primary author, Dr. Ron Ross.   The Director of Defense Industrial Base Cybersecurity Program, and AT&L/ and Defense Procurement and Acquisition Policy will discuss the DoD perspective on what is required in a panel format with industry to look at the practical application of the DFARS and NIST 800-171.

A second panel will use a generic breach scenario to discuss best practices and corporate interests when law enforcement is involved.

As the deadline approaches, it will become more challenging and costly to implement the controls to meet compliance requirements.  If a contractor hasn’t already started, they run the risk of having to spend a lot of money to get minimally compliant.

This workshop is an opportunity to discuss implementation of these controls and to hear how others are approaching the challenge of complying with DFAR requirements before 31 December 2017.

Download the full agenda here

This event is open to U.S. CITIZENS ONLY. 

There is no press allowed at the Workshop and the workshop is attribution free (Chatham House Rule).

Because there is limited space on-line registration for the workshop is now closed.  If you are interested in attending please contact Ashley Phayme to place your name on a waiting list.