Contractors and other organizations that do business with the federal government now have clearer, more straightforward guidance for protecting sensitive data.