Thanks for sharing this Kris Carter, it is interesting that the review request for the 17.09 release was an emergency one.

← Back to Blog

Thanks for sharing this Kris Carter, it is interesting that the review request for the 17.09 release was an emergency one. Maybe adding a little speed to its release? With clarity around its release, putting pressure on the DoD supply chain.

For me it feels like an incremental step forward, from self attestation to an evidence based programme. Warming up the supply chain to collect the data to outline compliance to the full NIST 800 – 171 ahead of a maturity based programme.

I like you see it as a warning, for public record as is the amount of time and cost spent on this so far by OIRA. It then becomes a conversation for the supply chain to decide how it wishes to proceed ahead of any changes.

#cmmc #supplychain #defenceindustry #asdeurope #cyberrisk #cyberinsurance #cyber #cybersecurity #nist #ciso #cio #nsa #cisa #dod #cloudsecurity #fedramp #cyberspace #cmmccoe #enisa

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6714423781944766464