Enjoy lunch while networking prior to our afternoon speakers.  

Contractors to the Department of Defense (DoD) must show compliance with DFARS 252.204-7012 Safeguarding Covered Defense Information (CDI) and Cyber Incident Reporting clause by 31 December 2017. What does this really mean and what are the minimum necessary security controls to demonstrate compliance? What happens if the contractor can’t comply by the deadline? DFARS 252.204-7012 specifies the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 as the security standard for protecting both controlled unclassified information (CUI) and CDI. The Director of Defense Industrial Base Cybersecurity Program, and AT&L/ and Defense Procurement and Acquisition Policy will discuss with attendees the DoD perspective on what is required implementation of the DFARS and NIST 800-17.  

The co-chairs of the Cybersecurity Division Legal Committee will discuss the implications and impacts of complying with the requirements of DFARS 252.204-7012 and NIST SP 800-171.  

Networking Break  

Rolando Sanchez and Susan Warshaw Ebner, Moderators; Robert Metzger, Rogers Joseph O’Donnell; Steve Gleason, Micro Craft, Inc.; Michael Carpenter, Leidos -- The panel will discuss DFARS 252.204-7012 in the context of practical application of NIST standards and other requirements under the rule by prime contractors and subcontractors, including the downflow of safeguards, continuing compliance and breach response. The panel will discuss DoD’s expectations with respect to implementation of the rule, by small and large contractors, and members of key compliance support businesses will share how they are implementing or supporting the implementation of the rule.