{"id":463,"date":"2016-05-21T21:39:00","date_gmt":"2016-05-21T21:39:00","guid":{"rendered":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/2016\/05\/21\/trend-government-contracts-data-security-new-federal-contracting-data-security-rule\/"},"modified":"2016-05-21T21:39:00","modified_gmt":"2016-05-21T21:39:00","slug":"trend-government-contracts-data-security-new-federal-contracting-data-security-rule","status":"publish","type":"post","link":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/trend-government-contracts-data-security-new-federal-contracting-data-security-rule\/","title":{"rendered":"TREND: Government Contracts + Data Security = New Federal Contracting Data Security Rule"},"content":{"rendered":"<p><strong>Which entity promulgated the new federal contracting rule?<\/strong>\u00a0Federal Acquisition Regulations (\u201cFAR\u201d) Council<\/p>\n<p><strong>Which data security rule for contractors are we talking about?<\/strong>\u00a0Basic Safeguarding of Contractor Information Systems<\/p>\n<p><strong>Which contracts will be hit by the new rule?<\/strong><\/p>\n<ul>\n<li>all acquisitions by any federal executive agency<\/li>\n<li>beginning June 15, 2016<\/li>\n<li>If a contractor&#8217;s information system may contain \u201cFederal contract information,\u201d\u00a0<\/li>\n<li>Applies to all subcontractors too<\/li>\n<\/ul>\n<p><strong>All contractors, and affected subcontractors will be required to meet 15 safeguards:<\/strong><\/p>\n<p>\u00a0<\/p>\n<ul>\n<li>Limit information system access to authorized users, processes acting on behalf of authorized users, or devices (including other information systems);<\/li>\n<li>Limit information system access to the types of transactions and functions that authorized users are permitted to execute;<\/li>\n<li>Verify and control\/limit connections to and use of external information systems;<\/li>\n<li>Control information posted or processed on publicly accessible information systems;<\/li>\n<li>Identify information system users, processes acting on behalf of users, or devices;<\/li>\n<li>Authenticate (or verify) the identities of those users, processes, or devices, as a prerequisite to allowing access to organizational information systems;<\/li>\n<li>Sanitize or destroy information system media containing Federal Contract Information before disposal or release for reuse;<\/li>\n<li>Limit physical access to organizational information systems, equipment, and the respective operating environments to authorized individuals;<\/li>\n<li>Escort visitors and monitor visitor activity; maintain audit logs of physical access; and control and manage physical access devices;\u00a0<\/li>\n<li>Monitor, control, and protect organizational communications (i.e., information transmitted or received by organizational information systems) at the external boundaries and key internal boundaries of the information systems;\u00a0<\/li>\n<li>Implement subnetworks for publicly accessible system components that are physically or logically separated from internal networks;<\/li>\n<li>Identify, report, and correct information and information system flaws in a timely manner;\u00a0<\/li>\n<li>Provide protection from malicious code at appropriate locations within organizational information systems;<\/li>\n<li>Update malicious code protection mechanisms when new releases are available; and<\/li>\n<li>Perform periodic scans of the information system and real-time scans of files from external sources as files are downloaded, opened, or executed<\/li>\n<\/ul>\n<p><a href=\"http:\/\/www.lexology.com\/library\/detail.aspx?g=214573c5-ab07-4ddd-b99e-3c69c4196a73\">Lexology |\u00a0<\/a><a href=\"http:\/\/www.lexology.com\/contributors\/1291\/\" style=\"color:rgb(38,102,115);text-decoration:none;font-size:17px;font-weight:700;font-family:Roboto, sans-serif;\">Wilmer Cutler Pickering Hale and Dorr LLP<\/a><a href=\"http:\/\/www.lexology.com\/library\/detail.aspx?g=214573c5-ab07-4ddd-b99e-3c69c4196a73\">\u00a0|\u00a0Final Government Contractor Basic Data Security Rule Issued<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p><strong>Which entity promulgated the new federal contracting rule?<\/strong>\u00a0Federal Acquisition Regulations (\u201cFAR\u201d) Council<\/p>\n<p><strong>Which data security rule for contractors are we talking about?<\/strong>\u00a0Basic Safeguarding of Contractor Information Systems<\/p>\n<p><strong>Which contracts will be hit by the new rule?<\/strong><\/p>\n<ul>\n<li>all acquisitions by any federal executive agency<\/li>\n<li>beginning June 15, 2016<\/li>\n<li>If a contractor&#8217;s information system may contain \u201cFederal contract information,\u201d\u00a0<\/li>\n<li>Applies to all subcontractors too<\/li>\n<\/ul>\n<p><strong>All contractors, and&#8230;<\/strong><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-463","post","type-post","status-publish","format-standard","hentry","category-contracting-procurement","entry"],"_links":{"self":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/463","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/comments?post=463"}],"version-history":[{"count":0,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/posts\/463\/revisions"}],"wp:attachment":[{"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/media?parent=463"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/categories?post=463"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/informedintel.com\/account\/datasecurity\/wp-datasecurity\/wp-json\/wp\/v2\/tags?post=463"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}