NIST 800-171 rev. 3 is Coming ... But Not How You Think
カートのアイテムが多すぎます
カートに追加できませんでした。
ウィッシュリストに追加できませんでした。
ほしい物リストの削除に失敗しました。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
-
ナレーター:
-
著者:
概要
NIST SP 800-171 Revision 3 has been out for two years.
DFARS 252.204-7012 says to use the most current version.
So why are defense contractors still using Revision 2?
Because they're supposed to.
In this episode, we break down the temporary rule that overrides the DFARS clause and keeps the entire ecosystem aligned on Revision 2.
We cover:
• What a class deviation actually is and why it matters
• Why DoD had to pause the shift to Revision 3
• How CMMC rulemaking controls the transition
• And when Revision 3 will realistically start showing up in contracts
Bottom line: contractors aren't behind. The rules haven't changed yet.
.......
Register for Summit 7 Live: https://www.summit7.us/s7live
171r3: https://csrc.nist.gov/pubs/sp/800/171/r3/final
DFARS 7012 deviation (PDF): https://www.acq.osd.mil/dpap/policy/policyvault/USA001074-24-DPC.pdf
32 CFR 170: https://www.ecfr.gov/current/title-32/subtitle-A/chapter-I/subchapter-G/part-170
Class deviation podcast: https://youtu.be/voziZRAMvv4?si=3xHm7I_gIeQTQxLf
Class deviation press release: https://www.war.gov/News/Releases/Release/Article/3763953/department-of-defense-issues-class-deviation-on-cybersecurity-standards-for-cov/