While US regulation may move slowly, it moves in the right direction.

← Back to Blog

While US regulation may move slowly, it moves in the right direction. In this case, there is little doubt that cybersecurity is going to become a critical component of the US Federal Acquisition Regulation (FAR). Likely affecting all companies that trade with the Federal Government.

The Federal Procurement Policy Office, the Defense Department, the General Services Administration, and the National Aeronautics and Space Administration have proposed rules to overhaul Federal Acquisition. This includes the harmonisation requirements for security prohibitions in Federal Contracts. The protection of CUI, requirements to comply with NIST cyber standards, and incident reporting are being proposed.

What does this tell us about Federal Cyber policy? Cyber is making its way into the Federal Procurement system and into most Federal Procurement contracts. Likely following the example of the United States Department of War and its CMMC program. If, like the DoWs program, most organisations will find it hard to comply, and like the DoW program, the DoJ will leverage its Civil Cyber Fraud Initiative to facilitate regulatory compliance through a penalty regime.

https://lnkd.in/e5k6UZ7j

@Thaddeus Dziekanowski

@Parava Security Solutions

#cybersecurity #federalacqusitionregulation

https://lnkd.in/eM4YFJnY

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7475855039320948737