Can someone help please? All defence contractors need to comply and flow down NIST SP 800-171 if they have DFARS 252.204 – 7012 in their contracts.

← Back to Blog

Can someone help please?

All defence contractors need to comply and flow down NIST SP 800-171 if they have DFARS 252.204 – 7012 in their contracts. Requiring them to implement 110 cyber practices, submit compliance scores to SPRS and prepare for a DoD assessment under 7019 and 7020 to get a contract today. But for CMMC 2.0 only 40,000 contractors will have to abide by CMMC and only 500 will require level 3.

1. How will this address the GAO and DoD inspector general reports that criticised DIB security and the protection of DoD IP.
2. Do I have to comply with DFARS 252.204-7012 and NIST SP 800-171 today if I may not be required to present a CMMC certificate in 2 years?
3. How does this impact DoDI 5000.90? That relies on the RMF (FISMA) and CMMC?

Thoughts?

Ted Dziekanowski Jason Spezzano Brian McCarthy

#ransomware‚ #fisma‚ #ofac‚ #theaugustagroup‚ #theaugustaplan‚ #cybersecurity‚ #supplychainriskmanagement‚ #cyberriskmanagement‚ #compliance‚ #regulatorycompliance‚ #regulatoryoversight‚ #esg‚ #scrm‚ #cscrm‚ #fca‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #falseclaimsact‚ #afcea‚ #afceacyber‚ #aws‚ #dhs‚ #cisa

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6864654704308195328