Tag: 800-171
Requirements POA&M’able Under 32 CFR 170 (CMMC v. 2.13)
We've created a simple table that shows the NIST SP 800-171 / CMMC Level 2 requirements that can be POA&M'ed while still…
READ MORE
CUI Monsters Invade CUI-CON!
CUI Monsters Invade CUI-CON!! Click through for raffle and other details.
READ MORE
Comments on FAR CUI Rule
The CUI Institute is proud to have offered comments on the FAR CUI Rule to the FAR Council. Our suggestions include changes…
READ MORE
What’s in a name (of a CMMC assessment)?
What is an “assessment” when it comes to CMMC? It turns out that there are several different types of assessments. In this…
READ MORE
CMMC Regulations Move Closer to “Final”
DoD submitted 32 CFR 170 to OIRA for review on June 27, 2024, meaning the Final Rule could be published before the…
READ MORE
Dissemination of CUI
Deciding whether someone can receive CUI isn't as confusing as some make it out to be. Our flowchart illustrates just how straightforward…
READ MORE
Subcontractor Questionnaire – Discussion Draft
We are excited to release a discussion draft of our new CUI Recipient Preparedness questionnaire. The questionnaire helps organizations who want to…
READ MORE
Leveraging NIST SP 800-171 Attestation Letters from FedRAMP 3PAOs and CyberAB C3PAOs
Some DoD contractors are making significant investments to enhance their cybersecurity. This article discusses an approach those contractors can use to help…
READ MORE
The Impact of the NIST SP 800-171 Rev. 3 Discussion Draft on CMMC and Related Programs
NIST released a discussion draft of SP 800-171 Rev 3 late last week. This article describes the impact that discussion draft will…
READ MORE
Under the Microscope: The -7024 Clause
The recently published DFARS 252.204-7024 clause allows DoD contracting officers to consider a LOT of attributes when awarding contracts. But, as explored…
READ MORE