Contractors are often responsible for data breaches, including defense contractors. How do you enforce data security standards in contracts and in practice?

That's above my pay grade to solve, but is obviously needed.