The U.S is moving towards the standardization of Federal Procurement language and contractual requirements for the security of Unclassified Federal

← Back to Blog

The U.S is moving towards the standardization of Federal Procurement language and contractual requirements for the security of Unclassified Federal Information Systems. As the DoD, GSA and NSA propose standardizing a set of minimum cybersecurity standards, to be applied consistently to Unclassified Federal Information Systems (FIS).

The result of which will be to add contractual requirements for cybersecuirty applicable for services to develop, implement, operate, or maintain a FIS, including cloud services. Ted Dziekanowski the proposed rule adopts NIST SP 800-30, NIST SP 800-39 and NIST SP 800-37 and a continuous monitoring strategy (CDM) amongst others. Aligning an agency and contractors procurement program with FISMA and setting an adequate level of cyber risk management.

Brian D. McCarthy Bob Dix Rachel V. Rose, JD, MBA

#cybersecurity #cyberriskmanagement #cyberregulation

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7115220930930302977

Categories

Cyber Risk Management, Cybersecurity, Regulation & Compliance

Tags