By Mikala Vidal on Jul 24, 2018 4:18:00 PM
The Washington Post reported last month that Chinese military hackers had stolen over 600 GB of sensitive information from a contractor working for the US Navy’s Naval Undersea Warfare Center. The data in question was stored, apparently improperly, on an unclassified network. This storage method made the data more vulnerable to breach than it might have been if it had been managed in accordance with the Defense Federal Acquisition Regulation Supplement (DFARS) cybersecurity standards which govern American defense contractors. DFARS is based on the National Institute of Standards (NIST) 800-171 publication and its framework of controls.