Defense Department, General Services Administration, and National Aeronautics and Space Administration, Basic Safeguarding of Contractor Information Systems, 81 Fed. Reg. 30439 (May 16, 2016) (full-text).
DoD, GSA, and NASA issued a final rule amending the Federal Acquisition Regulation (FAR) to add a new subpart and contract clause for the basic safeguarding of contractor information systems that process, store or transmit Federal contract information. The clause does not relieve the contractor of any other specific safeguarding requirement specified by Federal agencies and departments as it relates to covered contractor information systems generally or other Federal requirements for safeguarding Controlled Unclassified Information (CUI) as established by Executive Order (E.O.). Systems that contain classified information, or CUI such as personally identifiable information, require more than the basic level of protection.