Has anyone dealt with DFARS requirements and data in Galaxy?

Similar themes across other requirement sets might be: encryption of data at rest, DoD 32-pass secure deletion of data, providing access logs for datasets/histories/intermediate steps, providing logs of changes to access control policies for histories/datasets.

Just wondering before we come under these regs and need to be doing all of this.

Cheers, Eric