Cybersecurity incident disclosure
Defense and government contractors face overlapping cybersecurity incident disclosure obligations from the Department of Defense, the Cybersecurity and Infrastructure Security Agency, and the National Institute of Standards and Technology, with the DoD's updated DFARS 252.204-7012 clause and the proposed Cyber Incident Reporting for Critical Infrastructure Act framework creating real tension over timelines, scope, and who gets notified first. Contractors holding Controlled Unclassified Information are currently mapping their vendor and subcontractor chains against these standards before new CMMC assessment cycles begin. The window between detection and required reporting is tightening.
Watch
- DFARS 252.204-7012 72-hour reporting clock: does your subcontractor chain comply?
- CIRCIA proposed rulemaking: how the final rule may override existing DoD timelines
- CMMC Level 2 third-party assessments beginning to scrutinize incident response documentation
- DoD memo on software bill of materials requirements tied to disclosure obligations
Recent material activity in Defense & Government Contracting
-
UK Ministry of Defence awards up to £400 million drone contract to Tekever, replacing Watchkeeper with AR5 systems by 2029
The UK Ministry of Defence has selected Tekever's AR5 surveillance drone to replace the Watchkeeper system under a contract worth up to £400 million over ten years. An initial order of six AR5 units will scale to up to 2…
Read a full sample brief → -
ASPI analysis flags absence of federal regulatory framework governing data collection by Chinese-manufactured drones in Australian airspace
Australia has no binding domestic regulation governing data collected by Chinese-manufactured drones operating on Australian soil. The Australian Strategic Policy Institute identified this gap in analysis published on Ju…
Read a full sample brief → -
State Department imposes ITAR statutory debarment on persons convicted of Arms Export Control Act violations
The Department of State's Bureau of Political-Military Affairs published a notice on July 24, 2026 imposing statutory debarment under the International Traffic in Arms Regulations on persons convicted of violating, or co…
Read a full sample brief → -
ASPI strategic commentary frames Australian sovereign defence-industrial and autonomous-systems capability as a near-term procurement and policy priority
The Australian Strategic Policy Institute published commentary on July 24, 2026 drawing on Defence Minister Richard Marles's remarks at the May 2026 Shangri-La Dialogue. The piece identifies subsea cable security, autono…
Read a full sample brief → -
UK Ministry of Defence publishes FCAS Digital Strategy setting nine strategic ends for next-generation combat air digital architecture
The UK Ministry of Defence published the Future Combat Air System Digital Strategy on July 23, 2026. The document establishes nine strategic ends governing digital engineering, data architecture, interoperability, and th…
Read a full sample brief → -
NATO North Atlantic Council approves 2027–2031 Common Funding Resource Plan and Fuel Supply Chain Plan
On July 22, 2026, the North Atlantic Council approved NATO's 2027–2031 Common Funding Resource Plan, setting Alliance investment priorities for the next five years. The Council also approved a Fuel Supply Chain Plan, com…
Read a full sample brief → -
ASPI strategic analysis calls for northern Australia data centre dispersal on national security grounds
The Australian Strategic Policy Institute published analysis on July 23, 2026 arguing that AI data centre infrastructure constitutes a critical national security asset and should be geographically dispersed. The analysis…
Read a full sample brief → -
Australia publicly commits strategic support and funding to the Philippines amid South China Sea tensions
Australian Foreign Minister Penny Wong issued a public statement on July 22, 2026 affirming Australia's strategic, financial, and capability support for the Philippines amid sustained Chinese maritime pressure. The state…
Read a full sample brief → -
MOD awards £20 million contract to Lockheed Martin UK for hypersonic target development under Project Bowline
The Ministry of Defence awarded a £20 million contract to Lockheed Martin UK on July 22, 2026 to deliver Project Bowline, a hypersonic target programme supporting missile defence testing. The contract marks the MOD's ret…
Read a full sample brief → -
UK Ministry of Defence awards BAE Systems a £708 million contract extension for Future Combat Air System technology development
The UK Ministry of Defence has extended its contract with BAE Systems and Team Tempest partners by £708 million to accelerate Future Combat Air System technology development. Announced on 22 July 2026 at Farnborough Inte…
Read a full sample brief →