The Wait Is Over: Final DFARS Safeguarding Rule Published Today
Client Alert | 1 min read | 10.21.16
Almost three years after its first iteration was published, DoD has finalized the DFARS Safeguarding Rule and corresponding DFARS clauses regarding the protection of “covered defense information” provided to or generated by defense contractors. Effective today, the Final Rule by and large reflects the same requirements of its interim versions and FAQs but with a few notable exceptions, including the definition of “covered defense information” now encompasses all forms of “controlled unclassified information” and thus aligns with the National Archive’s recent final rule, external cloud services housing covered defense information must comply with certain FedRAMP security requirements, and subcontractors must notify their primes when requesting variances from the security controls of NIST Special Publication 800-171.
Contacts

Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 4 min read | 07.31.26
On July 23, 2026, the U.S. Department of Justice’s Antitrust Division announced that it will again use targeted Second Request investigations and released a revised Model Timing Agreement, another signal that this Antitrust Division continues to take a more business friendly approach toward merger review. The model introduces an optional “Expedited Consideration” process that gives merging parties the option to address discrete competitive concerns identified by the DOJ before undertaking full Second Request compliance.
Client Alert | 5 min read | 07.28.26
Data Centers in the Crosshairs: The Plaintiffs' Bar Has Begun Filing New Claims Using Old Tricks
Client Alert | 2 min read | 07.24.26
GAO Finds That Challenge to Agency’s Failure to Comply With DFARS Requirement Comes Too Late
