The best advice is to use a FedRAMP certified cloud service provider. The FedRAMP Moderate baseline is well established and understood by Cloud...
READ MORECan I use a cloud service provider for information storage?
by Charles Fike | Nov 3, 2021
Cloud Services can be used. However, there are two conditions to consider; the first, the storage of non-government-controlled information in...
READ MORECan you clarify when DFARS Clause 252.239-7010 and Clause 252.204-7012 apply to cloud computing services?
by Charles Fike | Nov 3, 2021
FARS Clause 252.239-7010, Cloud Computing Services, applies when a cloud solution is being used to process data on the DoD’s behalf, or...
READ MORECan primes/higher tiered subcontractors include the cost associated with regulatory compliance of their next lower-tiered covered defense information suppliers in proposals on solicitations, including the 252.204-7008 provision and 252.204-7012 clause? Is the cost chargeable to specific contracts where there is an expectation for this level of regulatory compliance oversight?
by Charles Fike | Nov 3, 2021
Unless prohibited by the FAR/DFARS, all costs associated with DFARS clause 252.204-7012 are allowable. Source: Frequently Asked Questions...
READ MOREWhat are the cost recovery options for complying with DFARS clause 252.204- 7012?
by Charles Fike | Nov 3, 2021
DoD does not develop ”cost recovery models” for compliance with DFARS rules. The requirements levied by this rule should be treated...
READ MORE