The Department of Defense (DoD) Inspector General recently issued a report summarizing the findings of an audit into the protection of Controlled Unclassified Information (CUI) on contractor networks. Based on an in-depth review into nine contractors, the audit uncovered some common practices that fall short of meeting the standards set forth in NIST SP 800-171, which contractors are obligated to follow under DFARS 252.204-7012.
Shortcomings Discovered in DoD Audit
These common lapses include the following, among others:
- Inconsistent tracking of cybersecurity threats
- Failure to consistently mitigate network vulnerabilities
- Uneven use of strong passwords
- Inconsistent use of multifactor identification


I am proud to have been named a top author in JDSupra’s 2019 Readers’ Choice Awards for my thought leadership in the government contracting space.
Taylor Hillman and I recently discussed how small Alabama businesses can enter the world of federal contracts. The All Small Mentor-Protégé Program (ASMPP) was established by the Small Business Administration (SBA) to extend business development assistance to all small businesses and help them achieve success in competing for federal government contracts. Only 20 of the 511 approved Mentor-Protégé Agreements had Alabama addresses as of May 5, 2018, despite one of the ASMPP’s top 10 district offices being located in Alabama, showing the potential for growth of the program within the state.
What are the recent changes in rules that could impact your small business and teaming partners in federal contracting in 2019? The Small Business Administration (SBA) and Federal Acquisition Regulatory (FAR) Council have recently finalized and issued proposed rules implementing provisions of past NDAAs that could alter how you team and ensure compliance with set-aside requirements on future procurements.