Defense Acquisition Regulation Supplement (DFARS) 252.204-7012

Overview
Defense Acquisition Regulation Supplement (DFARS) 252.204-7012 requires defense contractors to protect the security of controlled unclassified information (CUI''}, and specifically, "[[covered defense information residing on or transiting contractor or subcontractor information systems by adopting adequate cybersecurity measures for each of 110 security requirements in 14 security families and to report security incidents, mitigate incidents, and preserve data for the Department of Defense.