For those looking to understand the history of DFARS, NIST SP 800-171 and CMMC.

← Back to Blog

For those looking to understand the history of DFARS, NIST SP 800-171 and CMMC. As it has been applied by the DoD then the enclosed GAO report is a must read document.

Published in December 2021 by the US Governments Accountability Office (GAO) the report describes the reasoning for improving cyber security across the DoDs DIB. The history of DFARs and NIST in the oversight and assurance of cybersecurity across the DIB. The history of the CMMC AB and its relationship with the DoD and Defence Contract Management Agency(DCMA), for the delivery of the CMMC program.

The reports conclusions are timely, the‚ success‚ of‚ CMMC‚ relies on DIB‚ companies‚ implementing and maintaining key‚ cybersecurity practices‚ and‚ processes,‚ as‚ well‚ as‚ DODs‚ ability‚ to effectively‚ design and execute the CMMC‚ verification process. Clearer communications between the DoD and DIB are required to ensure program success and enable the DIB for compliance. Supporting the DoD in assessing the success of the CMMC program in its early stages in managing risk to its strategic goals of improving DIB cybersecurity.

#theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #digitalcurrency‚ #sec‚ #cyberriskgovernance‚ #securitiesandexchangecommission‚ #ransomeware‚ #csfprofiles‚ #dhs‚ #governance‚ #nist‚ #cyberinsurance #theaugustagroup

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6884820411058528256