Under the DFARS, the DIBCAC can conduct a virtual or in person cybersecurity audit. This can be done either under pre-CMMC or post-CMMC contracts. If you get a letter from them, this is what you should expect. If you have been doing everything you are supposed to do then you should be able to pull off the assessment with minor pain. If not…well…it won’t be as much fun.
Learn what to expect.
For those of you who are DoD contractors (and even if you are not), here is one thing that you can do that will improve your security program and, if you are a DoD contractor, will add 20 or more points to your NIST SP 800-171 SPRS Score. Audio Video
This week’s news includes:
Okay, that is a bit of alphabet soup. CUI stands for Controlled Unclassified Information. While technically, it only refers to government agencies and government contractors, think of it as information you might prefer that the Russians, Chinese and your competitors don’t have. GPT stands for generative pretrained transformers like ChatGPT, Bard and many others. It…
For those of you who are covered by DoD’s cybersecurity regulations such as 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting, you probably know that it is a bit of a moving target. We expect a flurry of updates later this spring, but in the mean time, you should be working on compliance. Here…
The ban now prohibits having any Bytedance software even installed on any device used in furtherance of a contract, even employee owned devices. Learn more below.
This week’s news includes:
