Request Demo

DFARS

DFARS Update: Defense Under Secretary for Acquisition, Technology, and Logistics Talks NIST 800-171 Compliance

down-arrow

Hon Ellen Lord clarified with regards to the DFARS cyber regulation specifically for subconctractors and suppliers, "the only requirement for this year is to lay out what you plan is" but that compliance was inevitably required to those documents to continue business with the DoD. The importance of the DFARS 252.204-7012 requirements and generating a suffiient SSP (System Security Plan) and POAM (Plan of Actions and Milestones) is at its peak. 

[Comply Now, Pay Later: Automated SSP & POAM; Effective, Simple DFARS Compliance & FASTEST Time-To-Value Available on CyberStrong for DFARS/NIST SP 800-171]

"The Defense Federal Acquisition Regulation Supplement requires that all DoD contractors - including small businesses - comply with a complex series of cybersecurity requirements by December 31st of this year... I certainly think it's important for us to address cyber concerns" - Senator Jeanne Shaheen

The New Hampshire Senator further stated that coming from a small business state, she has heard the concerns of small businesses - which tend to be subcontractors and suppliers - regarding complying by the deadline.

Hon. Defense Under Secretary for Aquisiton, Technology, and Logistics Ellen Lord stated that the plan of action for DFARS compliance is required by December 31, 2017 for businesses in this position - as well as "report(ing) your compliance to it". 

CyberStrong for DFARS and NIST SP 800-171 simplifies a complex set of requirements that can be otherwise daunting at the least for smaller defense-related businesses. With low cost and continuous compliance, you can streamline compliance and get up and running in just hours. An automated SSP and POAM export will be formatted to your company's specifications, ready for submission.

C-SPAN Video is available here.

 

 

 

 

You may also like

Contextualize Quantified Cyber ...
on April 11, 2019

Now more than ever, CISO’s are being tasked with delivering hard metrics around an enterprise’s technology and digital risk. While this is nothing new for seasoned IT ...

NYDFS Implementation Grace Period ...
on April 9, 2019

Following the Equifax breach and growing concerns about the posture of the financial industry, New York State Department of Financial Services (NYDFS) released the initial ...

CEO's - Do You Know Where That ...
on April 5, 2019

It is no secret that cybersecurity has mystified many members of the C-suite since the function was introduced. With headlines dominated by breaches and hearings of information ...

Jerry Layden
Carbon Black Report Indicates ...
on April 2, 2019

In their third Global Incident Response Threat Report our Massachusetts neighbor, Carbon Black, illustrates not only the top industries for cyber attack but a deeply concerning ...

Legacy GRC And The Sunk Cost ...
on March 28, 2019

Last month, we covered how legacy GRC products and new integrated risk management (IRM) solutions can co-exist and in fact compliment each other. That said, in order for them to ...

Alison Furneaux
What To Expect From The Imminent ...
on April 6, 2019

While the NIST Privacy Framework may be the headliner for the most anticipated new publication from the National Institute of Standards and Technology, there are two imminent ...