Audit-ready. Always secure.
DFARS Compliance
We believe in truly understanding our clients risks and pressures before recommending any services. This helps in every stage of the engagement. A high vulnerability in one business may not be relevant to another. Only through understanding your business can we help give management relevant actionable advice.
DoD Contractors Must Meet DFARS Compliance Requirements and OCD Tech Can Help
Department of Defense (DoD) contractors who transmit or store Controlled Unclassified Information (CUI) are subject to requirements put forth in the Defense Federal Acquisition Regulation Supplement (DFARS). If these minimum security standards are not met, these contractors risk losing their DoD contracts. DFARS 225.204-7012 required contractors to implement NIST Special Publication 800-171 standards by December 31, 2017, to protect covered defense information / controlled unclassified information.
If you are subject to DFARS clause 252.204-7012 and you are not compliant with the security requirements in NIST Special Publication 800-171 you are violating the terms of your contract.
OCD Tech can help you to develop a detailed and credible Plan of Action so you can become compliant in as short a time as possible. Want to learn what you can do today to get on the path to compliance? Download our list of the Top 5 Things you can do within your organization to achieve DFARS Compliance.
Achieving DFARS Compliance with OCD Tech
Our staff are experts at assessing organizational compliance against the NIST frameworks, including SP800-171. We help DoD contractors document their existing environments, outline compliance gaps, and help build remediation plans. We have proprietary templates and toolkits designed specifically for DFARS compliance.
What are the requirements of Special Publication 800-171?
Special Publication 800-171 includes 110 controls split among 14 control families. These control families cover all critical aspects of information security:
- Access Control
- Awareness and Training
- Audit and Accountability
- Configuration Management
- Identification and Authentication
- Incident Response
- Maintenance
- Media Protection
- Personnel Security
- Physical Protection
- Risk Assessment
- Security Assessment
- System and Communications Protection
- System and Information Integrity
Ready to turn your security into your greatest competitive advantage?
Navigating a SOC examination can seem complex, but you don't have to do it alone. We help you implement the right controls, prepare for the audit, and partner with you to ensure a smooth and successful examination.
Audit. Security. Assurance.
IT Audit | Cybersecurity | IT Assurance | IT Security Consultants – OCD Tech is a technology consulting firm serving the IT security and consulting needs of businesses in Boston (MA), Braintree (MA) and across New England. We primarily serve Fortune 500 companies including auto dealers, financial institutions, higher education, government contractors, and not-for-profit organizations with SOC 2 reporting, CMMC readiness, IT Security Audits, Penetration Testing and Vulnerability Assessments. We also provide dark web monitoring, DFARS compliance, and IT general controls review.
Contact Info
.svg)
OCD Tech
.svg)
25 BHOP, Suite 407, Braintree MA, 02184
.svg)
844-623-8324
.svg)
https://ocd-tech.com
Follow Us
.svg)
.svg)
.svg)
Videos
Check Out the Latest Videos From OCD Tech!
Services
SOC Reporting Services
– SOC 2 ® Readiness Assessment
– SOC 2 ®
– SOC 3 ®
– SOC for Cybersecurity ®
IT Advisory Services
– IT Vulnerability Assessment
– Penetration Testing
– Privileged Access Management
– Social Engineering
– WISP
– General IT Controls Review
IT Government Compliance Services
– CMMC
– DFARS Compliance
– FTC Safeguards vCISO