If your organization is a service provider to the U.S. federal government – whether to civilian agencies or the Department of Defense (DoD) your information systems must meet requirements as specified in the Federal Acquisition Regulation (FAR) or the Defense Federal Acquisition Regulation Supplement (DFARS). You may also need to comply with the requirements of the International Traffic in Arms Regulations (ITAR) or the Export Administration Regulations (EAR). These regulations impact your organization if you meet any of the following criteria:

 

• You handle Controlled Unclassified Information (CUI)

• You produce, maintain and/or export items on the United States Munitions List (USML)

• You provide defense articles and services

• You produce items or “know-how” on the Commerce Control List (CCL)

 

The objective of a DFARS Assessment is to determine the gaps in compliance with critical cybersecurity requirements for protected information. Your CampusGuard team will provide strategic advice on regulatory applicability, questions of program implementation, assistance in the application of specific security documentation, and detailed assessment and validation of implemented security controls to ensure appropriate protections are in place.