This is well worth a read, from the lawyers.

← Back to Blog

This is well worth a read, from the lawyers.

The US Department of Defense requirements for cyber security compliance, under the proposed CMMC programme. Will require ‘A change of culture, take time, be painful, and it’s cost money’, according to chief information security officer of the Pentagon’s acquisition policy office. At a briefing with defense contractors this week.

In my view it sets the tone and direction for third party supplier cyber risk management in general. It explicitly set a minimum standard of NIST SP 800-171 compliance for securing critical data, information systems, incident management and reporting.

In my view it’s not unreasonable and defines a starting point for best practice, across supply chain cyber security.

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6593427288593887232