David Alexander writes one amendment requires companies to extend their information security standards to include unclassified networks.
The new rules also call on contractors to immediately report incidents where data was lost due to a cyber attack, according to the report.
Contracts covered under the rules include those that use data on defense system requirements, designs, engineering, production and other unclassified yet sensitive technical information.