DoD Fails to Establish Security Clauses for Outsourcing Ulitilies

It isn't like they don't know better, but the Defense Department seems to have forgotten to include clauses in their contacts that require security for those outsourced utilities.  How Stupid is That? 
It isn't like they don't have these clauses already prepared - they do.  It isn't like there aren't places for security to be included in a contract - there are.  This is our famously lazy contracting officers just leaving these clauses out. 

The report says:  "DOD has taken steps to add a cybersecurity clause to its utilities privatization
contracts that requires contractors take steps to ensure safeguards are put in place to protect covered defense information, which is defined as information that is processed, stored, or transmitted on the contractor’s information system or industrial control systems. To implement the clause, DOD first must identify what, if any, covered defense information is provided to or developed by the contractor in performance of the contract. However, the Defense Logistics Agency (DLA) and military department officials stated that they have not begun to implement the clause because they need DOD to issue procedures concerning how the military departments are to determine what, if any, covered
defense information associated with utilities privatization contracts is provided or developed by the contractor in performance of the contract. Without these procedures, the military departments and DLA will not have assurance that such information is being safeguarded."

Really?  I am astounded by this.  We have had these clauses included in almost every communications contract for the past 20 years.  Now, all of a sudden, it has become too hard to do.  The usual reasons for this are the contractors don't want this clause in the contract and won't bid if they have it.  Yes, that happens.  Defense Logistics needs to get its act together and stop this wishy-washy approach to security.  Now, while they are at it, go back and do an assessment of the contractors who don't have these clauses and see what damage has been done.