Weekly CMMC Q&A: 9.11.26
カートのアイテムが多すぎます
カートに追加できませんでした。
ウィッシュリストに追加できませんでした。
ほしい物リストの削除に失敗しました。
ポッドキャストのフォローに失敗しました
ポッドキャストのフォロー解除に失敗しました
Weekly CMMC Q&A: 9.11.26
-
ナレーター：
-
著者：
Between now and the end of the year defense contractors will need to wrestle with at least 3 major cyber regulation updates:CIRCIA: a new cyber incident reporting regime for many defense contractors that is broader than DFARS 252.204-7012, with different triggers, report contents, system scope, ransomware requirements, supplemental reporting, and two-year data preservation.The FAR CUI rule: government-wide contractual requirements for CUI protection including NIST SP 800-171 rev. 3, SP 800-172, cloud, subcontractor flowdowns and more.Post-Review CMMC: the "3.0" rule expected in July contained a transition plan from 171r2 to 171r3 and claimed to affect 20% fewer companies. The DoD has suspended that transition in lieu of a program review and signaled a general desire to increase requirements.If you extend the timeline further, defense contractors will also need to wrestle with DFARS 7012 (3.0) and Post-Quantum Crypto rulemaking.Have questions about any of that? We sit down every Friday at 10am PST to answer them all.