The case against Georgia Tech is going to be one to watch for organisations covered by DFARS cyber regulations.

← Back to Blog

The case against Georgia Tech is going to be one to watch for organisations covered by DFARS cyber regulations.

DFARS cyber regulation sets out clear requirements for DoD contractors to Implement 110 NIST cyber practices. Self attest compliance and inform the DoD of their compliance. A process that has been in place since 2017.

As the DOD and DOJ investigate compliance across its DIB. One suspects that we will see the interpretation of the DFARS regulation tested, as in this case the use of AV vs compensating controls.

As one has always said. The adoption and compliance to cybersecurity standards will come down to interpretation and be tested in the court room. Not court of public opinion.

@Thaddeus Dziekanowski Brian D. McCarthy Ryan Buckner Rachel V. Rose, JD, MBA

Veritas GRC

#cybersecurity ##cyberriskmanagement #dfars

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7233031017391886336

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags