Over 1,000 pages on FAR overhaul heads to formal rulemaking process
Public comment will open on Tuesday on four proposed rules to update the federal acquisition process.
Advertisement
controlled unclassified information
CMMC compliance made practical: A data-first path forward
Contractors chasing certification often risk overspending or over-securing. Virtru’s Trevor Foskett explains why data-focused strategies help meet requirements and keep small businesses in the game.
NIST issues final guidance update for protecting sensitive information
The publications are aimed at providing clearer and unambiguous guidance to private-sector partners, according to the agency.
NIST issues new draft guidance on handling sensitive information
The Commerce bureau is seeking public comments on the draft guidelines by July 14.
New rule could impose CMMC-like cyber requirements for civilian agency contractors
The DOD is working with civilian agencies on a new FAR rule that would apply new requirements for vendors that handle controlled unclassified information.
DOD not meeting same standards it plans to hold contractors to under CMMC
In a new report, GAO found that the DOD only met 78% of the 110 CMMC 2.0 requirements for systems that manage controlled unclassified information.
Advertisement
NIST releases more guidance on protecting unclassified information
The new procedures for agencies and vendors won't apply to national security systems without the relevant approvals.
New guidelines from NIST on how to avoid cyberattacks from a nation-state
The new Special Publication 800-172 builds upon the oft-cited SP 800-171.
GSA considering more CMMC-like cyber requirements in its governmentwide contracts
A top GSA IT acquisition official said the agency will continue to bake new controls for how contractors handle sensitive government information into its largest acquisition vehicles.