Contractors will need to prove their cybersecurity measures are good enough for Pentagon