Call us now:
A great interview. The US cyber regulatory environment is moving at pace. From my time dealing with NYDFS, which only impacted Covered Financial Services firms in New York state. We have CMMC, which is a huge programme and incidentally one where the DIB should already be NIST 800 – 171 compliant through current DFARs rules. We have CMMC appearing in other Federal tenders for example in the form of Stars III. NDAAF 2019 889B will arrive in August 2020 and put in place stringent controls over the products and services Federal Agencies can procure and from whom, and California’s CCPA is underway. All of this along side other state cyber security and data legislation.
As this article points out there is so much going on with a backdrop of cyber security and supply chain risk management, European companies should start to prepare for what is coming. They may deliver products and services to US Federal agencies and there will be closer scrutiny of supply chain risks from US Primes through European subs. From European subs through their supply chains for cyber security and to clarify the sourcing of their raw materials. The foundations for CMMC are already here in the form of NIST 800 – 171 and provisional assessment guides. The train has left the station.
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6691614906032132096