Source: https://www.law.cornell.edu/cfr/text/32/236.3?qt-cfr_tabs=2
Timestamp: 2016-02-09 14:34:01
Document Index: 438544704

Matched Legal Cases: ['art 236', '§ 236', '§ 2224', '§ 3506', '§ 3544', 'art 236', 'art 236']

32 CFR 236.3 - Policy. | US Law | LII / Legal Information Institute
CFR › Title 32 › Subtitle A › Chapter I › Subchapter M › Part 236 › Section 236.3 32 CFR 236.3 - Policy.
§ 236.3
Establish a comprehensive approach for enhancing and supplementing DIB information assurance capabilities to safeguard covered defense information on covered DIB systems.
Increase the Government and DIB situational awareness of the extent and severity of cyber threats to DOD information.
(a) Establish a comprehensive approach to require safeguarding of covered defense information on covered contractor
information systems and to require contractor
cyber incident reporting.
(b) Increase Government stakeholder and DIB situational awareness of the extent and severity of cyber threats to DoD information by implementing a streamlined approval process that enables the contractor to elect, in conjunction with the cyber incident reporting and sharing, the extent to which DoD may share cyber threat
information obtained from a contractor (or derived from information obtained from the company) under this part that is not information created by or for DoD with:
contractors participating in the DoD-DIB CS information sharing program to enhance their cybersecurity posture to better protect covered defense information on covered contractor
information systems, or a contractor's ability to provide operationally critical support; and
(2) Other Government stakeholders for lawful Government activities, including cybersecurity for the protection of Government information or information systems, law enforcement and counterintelligence (LE/CI), and other lawful national security activities directed against the cyber threat (e.g., those attempting to infiltrate and compromise
information on the contractor
(c) Modify eligibility criteria to permit greater participation in the voluntary DoD-DIB CS information sharing program.
This is a list of United States Code sections, Statutes at Large, Public Laws, and Presidential Documents, which provide rulemaking authority for this CFR Part.This list is taken from the Parallel Table of Authorities and Rules provided by GPO [Government Printing Office].It is not guaranteed to be accurate or up-to-date, though we do refresh the database weekly. More limitations on accuracy are described at the GPO site.United States CodeU.S. Code: Title 10 - ARMED FORCES§ 2224 - Defense Information Assurance Program
U.S. Code: Title 44 - PUBLIC PRINTING AND DOCUMENTS§ 3506 - Federal agency responsibilities§ 3544 - Federal agency responsibilities
Title 32 published on 2015-07-01The following are ALL rules, proposed rules, and notices (chronologically) published in the Federal Register relating to 32 CFR Part 236 after this date.2015-10-02; vol. 80 # 191 - Friday, October 2, 201580 FR 59581 - Department of Defense (DoD)-Defense Industrial Base (DIB) Cybersecurity (CS) Activities
typeregulations.gov FR Doc.2015-24296 RIN0790-AJ29 DOD-2014-OS-0097 DEPARTMENT OF DEFENSE, Office of the Secretary Interim final rule. Effective Date: This rule if effective October 2, 2015. Comments must be received by December 1, 2015. 32 CFR Part 236 SummaryDoD is revising its DoD-DIB Cybersecurity (CS) Activities regulation to mandate reporting of cyber incidents that result in an actual or potentially adverse effect on a covered contractor information system or covered defense information residing therein, or on a contractor&apos;s ability to provide operationally critical support, and modify eligibility criteria to permit greater participation in the voluntary DoD-Defense Industrial Base (DIB) Cybersecurity (CS) information sharing program.