One suspects that cases being bought under False Claims Act against DoD contracts and DFARs compliance are being held back by resource constraints.

← Back to Blog

One suspects that cases being bought under False Claims Act against DoD contracts and DFARs compliance are being held back by resource constraints. But cases are being unsealed and as one who has paid close attention to the DoDs cybersecurity program for several years. It is clear that most DoD contractors globally will find it difficult to comply with DFARS 252.204-7012, 7019, 7020 and almost certainly would find it difficult to comply with DFARS 252.204-7021.

For example, the lack of compliance by the UK Government and by extension the defense industry to DFARs, was highlighted by the House of Representatives in a 2022 NDAA draft. So what makes one think that most companies outside the U.S will find it difficult to comply.

The DoJ is unsealing cases under the False Claims Act that relate to DFARS. ‘The Georgia Tech case highlights DOJ’s increased efforts under the Civil Cyber-Fraud Initiative. The Government’s intervention in this case shows that time is almost up for DOD contractors, and that they need to comply with DFARS 252.204-7012 and implement NIST SP 800-171 controls as soon as practicable.’

@Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA

Veritas GRC United States Department of Defense

#dfars #cmmc #cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7189178870938390528