Data breach notification
Defense and government contractors face a layered data breach notification regime that most commercial sectors do not: obligations flow simultaneously from the Defense Contract Management Agency, the Department of Defense Cyber Crime Center's reporting infrastructure under DFARS 252.204-7012, and the Cybersecurity and Infrastructure Security Agency under its 2024 CIRCIA reporting rules. The federal contractor population is not waiting for final rulemaking. Compliance teams are auditing incident response playbooks now to reconcile the 72-hour CIRCIA window against the 72-hour DoD contractor reporting clock, since the two clocks start from different triggers.
Watch
- CIRCIA final rule timeline: CISA's proposed 72-hour reporting requirement still pending OMB review
- DFARS 252.204-7012 subcontractor flow-down: prime contractors remain liable for sub-tier reporting failures
- DoD Cyber Crime Center (DC3) portal: technical submission requirements updated for incident report formatting
- FedRAMP authorized systems breached: notification duties differ from non-authorized cloud environments
Recent material activity in Defense & Government Contracting
-
UK Ministry of Defence awards up to £400 million drone contract to Tekever, replacing Watchkeeper with AR5 systems by 2029
The UK Ministry of Defence has selected Tekever's AR5 surveillance drone to replace the Watchkeeper system under a contract worth up to £400 million over ten years. An initial order of six AR5 units will scale to up to 2…
Read a full sample brief → -
ASPI analysis flags absence of federal regulatory framework governing data collection by Chinese-manufactured drones in Australian airspace
Australia has no binding domestic regulation governing data collected by Chinese-manufactured drones operating on Australian soil. The Australian Strategic Policy Institute identified this gap in analysis published on Ju…
Read a full sample brief → -
State Department imposes ITAR statutory debarment on persons convicted of Arms Export Control Act violations
The Department of State's Bureau of Political-Military Affairs published a notice on July 24, 2026 imposing statutory debarment under the International Traffic in Arms Regulations on persons convicted of violating, or co…
Read a full sample brief → -
ASPI strategic commentary frames Australian sovereign defence-industrial and autonomous-systems capability as a near-term procurement and policy priority
The Australian Strategic Policy Institute published commentary on July 24, 2026 drawing on Defence Minister Richard Marles's remarks at the May 2026 Shangri-La Dialogue. The piece identifies subsea cable security, autono…
Read a full sample brief → -
UK Ministry of Defence publishes FCAS Digital Strategy setting nine strategic ends for next-generation combat air digital architecture
The UK Ministry of Defence published the Future Combat Air System Digital Strategy on July 23, 2026. The document establishes nine strategic ends governing digital engineering, data architecture, interoperability, and th…
Read a full sample brief → -
NATO North Atlantic Council approves 2027–2031 Common Funding Resource Plan and Fuel Supply Chain Plan
On July 22, 2026, the North Atlantic Council approved NATO's 2027–2031 Common Funding Resource Plan, setting Alliance investment priorities for the next five years. The Council also approved a Fuel Supply Chain Plan, com…
Read a full sample brief → -
ASPI strategic analysis calls for northern Australia data centre dispersal on national security grounds
The Australian Strategic Policy Institute published analysis on July 23, 2026 arguing that AI data centre infrastructure constitutes a critical national security asset and should be geographically dispersed. The analysis…
Read a full sample brief → -
Australia publicly commits strategic support and funding to the Philippines amid South China Sea tensions
Australian Foreign Minister Penny Wong issued a public statement on July 22, 2026 affirming Australia's strategic, financial, and capability support for the Philippines amid sustained Chinese maritime pressure. The state…
Read a full sample brief → -
MOD awards £20 million contract to Lockheed Martin UK for hypersonic target development under Project Bowline
The Ministry of Defence awarded a £20 million contract to Lockheed Martin UK on July 22, 2026 to deliver Project Bowline, a hypersonic target programme supporting missile defence testing. The contract marks the MOD's ret…
Read a full sample brief → -
UK Ministry of Defence awards BAE Systems a £708 million contract extension for Future Combat Air System technology development
The UK Ministry of Defence has extended its contract with BAE Systems and Team Tempest partners by £708 million to accelerate Future Combat Air System technology development. Announced on 22 July 2026 at Farnborough Inte…
Read a full sample brief →