Tip #1 is incorrect. 7012 clause has been around for years, so DoD is looking at the 110 controls there as already factored into existing costs. The allowable costs for CMMC is for delta requirements, so the 20 new to Level 3. This was emphasized again tonight in the CMMC-AB's town hall webinar.
@cbtnuggets
3 жыл бұрын
Thanks for the great catch, Warren. The information provided was based on the official CMMC documentation. It’s interesting this is being put out since NIST 800-171 was only implemented for all DOD contractors as of November 2020. Yes, previous to that if a contractor handled CUI they had to be NIST 8001-171 compliant, but not all DOD contractors did. Thanks again!
@barekbentley9330
3 жыл бұрын
Intrusion.com could be another great resource for upper levels of compliance. Shield killed the sunburst/solarwinds attack, which affected a swath of Federal agencies and private companies.
Пікірлер: 3