“Adequate security” means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or ...

(b) The security requirements required by contract clause 252.204-7012 , shall be implemented for all covered defense information on all covered contractor ...