The government requires contractors and subcontractors to protect the systems upon which government-related data reside or through which such data pass. Failure to comply with current Federal Acquisition Regulation (FAR) rules and soon-to-be effective Defense Federal Acquisition Regulation Supplement (DFARS) rules exposes companies to significant consequences. Fortunately, for other than classified information, the standards are similar to prudent commercial business practices.