DFARS 252.204-7012: What It Requires and How to Meet It
DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, requires contractors of the Department of War (DoW, also DoD) that handle covered defense information to implement NIST SP 800-171

