Announced and effective today, August 26, 2015, DoD has issued an interim rule that significantly expands existing DFARS provisions and clauses requiring contractors and subcontractors to report cyber incidents.  The interim rule will apply “to all contractors with covered defense information transiting their information systems,” an estimated 10,000 contractors.  Additionally, in an effort to ensure acquisition uniformity across the Department, the interim rule implements DoD policies and procedures to be used when contracting for or utilizing cloud computing services.  Due to “urgent and compelling reasons,” the rule was issued without an opportunity for public comment.
Continue Reading DoD Addresses Cybersecurity Preparedness, Incident Reporting, and Cloud Computing Acquisitions with new DFARS interim rule

On November 18, 2014, the General Services Administration (“GSA”) hosted an Industry Day seeking feedback on its proposal to add a Cloud Computing Special Item Number (“SIN”) on  its IT Multiple Award Schedule 70 (“MAS IT-70”).  A SIN is GSA’s categorization method that groups similar products, services, and solutions together to make the acquisition process easier.  This move is not surprising in light of the Government’s “Cloud First” policy (announced in 2011), which requires agencies to evaluate cloud computing options “whenever a secure, reliable, and cost-effective option exists.”  Further, GSA’s latest proposal noted that a cloud SIN “would … enabl[e] agencies to take full advantage of cloud computing benefits to maximize capacity utilization, improve IT flexibility and responsiveness, and minimize cost.”  In the end, by offering a cloud-specific SIN, GSA hopes to drive more value into the schedules program by providing cloud-based options more rapidly and easily than before.  This article will give you a brief overview of the new, proposed SIN.
Continue Reading Shopping for the Cloud Made Easy – GSA’s Special Item Number Project for Cloud Computing and Request for Comments