DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting
In effectDoD · Contract clause · November 18, 2013
Summary
Contractors must protect covered defense information on their systems using NIST Special Publication 800-171, report cyber incidents to DoD within 72 hours, preserve system images and submit malicious software to DoD, and pass the clause down to subcontractors.
Replaces
What FedXchange has recorded
No changes recorded. The watch records a new document and any change in its status.
- Issuer
- Department of Defense (DoD), including the Defense Federal Acquisition Regulation Supplement (DFARS) and the Cybersecurity Maturity Model Certification (CMMC)
- Type
- Contract clause
- Number
- DFARS 252.204-7012
- Issued
- November 18, 2013
- Status
- In effect
Still in force, possibly with amendments.
Created November 18, 2013 as "Safeguarding of Unclassified Controlled Technical Information"; renamed and expanded by interim rules of August 26 and December 30, 2015, finalized October 21, 2016; the current version is dated May 2024.
Get new governance by email
A weekly email on Fridays, an alert on the day the watch finds something new, or both. Free.