Simplify Your Compliance

Rackspace Government Solutions and DFARS Compliance

In 2015, the Department of Defense (DoD) passed a set of safeguarding rules and clauses, under the existing Defense Federal Acquisition Regulation Supplement (DFARS). These standards specify security controls for contractor information systems that handle Controlled Defense Information (CDI) — at both the contractor and subcontractor levels.

These security controls are based on National Institute for Standards and Technology (NIST) standards, detailed in NIST publication 800-171.

DFARS requires non-federal organizations who render services to the DoD or host DoD applications to complete a CDI assessment and report findings to the DoD Chief Information Officer within 30 days of any DoD contract.

DFARS Compliant

Guidance for Your Compliance Journey

Our experience with Federal security requirements spans almost two decades, with dedicated specialists available to help your organization comply with the NIST 800-171 framework and address DFARS compliance.

Additionally, our Joint Authorization Board-accredited FedRAMP Cloud is equipped with a Systems Security Plan (SSP) that addresses security for all control families across NIST 800-171 and DFARS.

Let Our Specialists Help You Achieve Compliance

DFARS

Depending on the nature of your DoD contract, you will be expected to self-certify compliance with one or more of the following clauses. Our specialists are here to help.

  • DFARS 252.204-7008: Compliance with Safeguarding Covered Defense Information Controls
  • DFARS 252.204-7009: Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information
  • DFARS 252.204-7012: Safeguarding Covered Defense Information and Cyber Incident Reporting
Support for the eCommerce and Retail Industry

NIST

NIST publication 800-171 is a body of government requirements for protecting Controlled Unclassified Information (CUI). NIST 800-171 is applicable to organizations in the public and private sector, including: government contractors; manufacturers; state, local, and tribal governments; and colleges and universities. Effective as of 2015, NIST 800-171 is a sub-set of NIST 800-53, and covers 14 different control families:

  • Access Control
  • Awareness and Training
  • Audit and Accountability
  • Configuration Management
  • Identification and Authentication
  • Incident Response
  • Maintenance
  • Media Protection
  • Personal Security
  • Physical Protection
  • Risk Assessment
  • Security Assessment
  • System and Communication Protection
  • System and Information Integrity
Racker Behind Computer

Start the Conversation

Request FREE Quote

or Chat Now

Consulting & Advisory Services
Professional Services
Managed Services
Quick Links
© 2021 Rackspace Technology
×

You are using an outdated browser and are receiving a degraded experience. Please switch to the latest version of Microsoft Edge, Mozilla Firefox, Safari or Google Chrome. [Dismiss]