DFARS Clause 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting
DFARS Clause 252.204-7012 is required in all contracts except for contracts solely for the acquisition of COTS items. In addition the Contractor shall include the clause in subcontracts for which performance will involve covered defense information or operationally critical support.