Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)
DoD final rule amending DFARS to incorporate cybersecurity requirements for contractors, including NIST SP 800-171 and CMMC. Effective immediately for new contracts.
Aforeworn detected this change in the Government Contracting (SAM/FAR) space on July 14, 2026 and published this briefing so affected operators are forewarned rather than caught off guard. It is rated High urgency. All DoD contractors, including small business set-asides, defense contractors, GSA schedule holders, and federal grant recipients. should confirm how it applies to their specific situation before acting. There is a time constraint attached: Immediate for new contracts; existing contracts may have transition periods (check contract clauses).. Acting after that point can mean penalties, a lapsed licence, or lost eligibility — exactly the kind of surprise Aforeworn exists to prevent. Aforeworn monitors Government Contracting (SAM/FAR) continuously and turns every detected change into a plain-English briefing like this one, so you always know first. Forewarned is forearmed.
What changed
Contractors must now implement NIST SP 800-171 security requirements and undergo CMMC assessments as a condition of contract award.
Who it affects
All DoD contractors, including small business set-asides, defense contractors, GSA schedule holders, and federal grant recipients.
What you must do
Assess current cybersecurity posture against NIST SP 800-171, achieve CMMC certification at required level, and update System Security Plan (SSP).
Deadline
Immediate for new contracts; existing contracts may have transition periods (check contract clauses).
Never miss a change like this again
Aforeworn watches Government Contracting (SAM/FAR) around the clock and alerts you the moment a rule moves — with a plain-English brief on what to do.
Start your free trialRelated changes in Government Contracting (SAM/FAR)
- Defense Federal Acquisition Regulation Supplement: Inflation Adjustment of Acquisition-Related Thresholds (DFARS Case 2024-D002)
- Defense Federal Acquisition Regulation Supplement: Preventing Conflicts of Interest for Certain Consulting Services (DFARS Case 2024-D007)
- Defense Federal Acquisition Regulation Supplement: Disclosure of DoD Funding in Technical Publications (DFARS Case 2024-D003)
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023); Correction
- Defense Federal Acquisition Regulation Supplement: Disclosure of Greenhouse Gas Emissions (DFARS Case 2024-D021)