The wheels of government may turn slowly, but they are turning and in the last few months we have a lot of movement to report concerning DIB primes and subcontractors. First, last week the Department of Defense cleared up some potential confusion with the class deviation to DFARS 252.204-7012. This DFAR was updated to specifically require DIB contractors to meet “revision 2” of NIST SP 800-171. The previous DFAR wording stated that contractors must meet the version "in effe

The Department of Defense (DoD) published the CMMC 2.0 Proposed Rule on December 26th. This kicked off a 60 day “public commenting...

Cybersecurity risk assessments assist organizations in understanding the cyber risks to their operations (e.g., mission, functions,...