I have enclosed a document which is well worth a read, specifically Part 252.204.7012 (Safeguarding Covered Defence Information and Cyber Incident

← Back to Blog

I have enclosed a document which is well worth a read, specifically Part 252.204.7012 (Safeguarding Covered Defence Information and Cyber Incident Reporting), page 10, as it forms a foundation for CMMC. There are couple of observations, which I would like to get views on the importance of.
1. Section (b) (2) (ii)(A) – Contractors implementing NIST SP 800-171 (no later than 31.12.2017).
2. Section (m) (1 & 2) – Contractors including clause 252.204.7012 with their subcontractors.

Is it safe to assume that companies have implemented NIST SP 800 – 171 and requirements for the protection of covered defence information have been flowed down global supply chains?

To European Defence industry procurement teams and their company cyber teams. I have the upmost respect for you having to understand and implement DFARS regulations.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6689838655604830208