CyberNINES®’s Post

The most stringent requirements in the CMMC Program will belong to Level 3. These 24 security controls come from NIST SP 800-172 and will be required for any DIB company that has a Level 3 requirement in their DOD contract. The estimated cost of implementation has been provided by the DOD and the numbers behind the costs can be found in the proposed rule. We have linked you to a primer for what is in store when the CMMC proposed rule is finalized. CyberEye CMMC Level 3 Key Takeaways -https://lnkd.in/e524BSpj CMMC Proposed Rule - Federal Register - https://lnkd.in/ejr9_hY3

Read this before your next scoping discussion

You don't know what to do at the weekend? 😎 The NIST SP800-82r3 is a superb guide to a holistic OT-Security approach. The revised version was published in September 2023 and contains a lot of perspectives about OT in general and OT-Security in detail. https://lnkd.in/eq637aUk

So I've launched a YouTube series to help organizations assess and implement NIST SP 800-53 controls if anybody is interested! The first topic is DNSSEC. https://lnkd.in/g9V4J9EF

NIST CSF v2.0 officially released https://lnkd.in/du9HUw-a It's ten years effort and experience from CSF v1.0 to CSF v2.0

DFARS, NIST 800-171, SPRS and CMMC 2.0 EXPLAINER CHEAT SHEET We've put together a downloadable guide for DIB Contractors that goes over the interplay of DFARS, NIST 800-171, SPRS, and CMMC 2.0.   https://lnkd.in/et_8yUcc Alvarez #ControlCase #dfars #nist #nist800171 #sprs #cmmc #cmmc2

NIST 800-171 Rev 3 was released on 14 May of this year, and it contains significant changes from the NIST 800-171 Rev 2. ComplianceForge has gone ahead updated its NIST Compliance Program (NCP) to include NIST 800-171 Rev 3. What makes the NCP great is that it makes it less painful to upgrade to the latest version of NIST 800-171 and also provides backwards compatibility with NIST 800-171 Rev 2. This is beneficial, since you can demonstrate coverage for the current version of NIST 800-171 Rev 2, while you implement the new controls from NIST 800-171 Rev 3. https://lnkd.in/gsW3W7cR #CMMC #800171 #DFARS

The NIST CSF 2.0 release is finally here. As expected, CSF 2.0 adds a 6th core function: "govern." 20+ years ago we only had Protect, Detect, and Respond. Those sure were the good old days. "Have IDS, will travel." Now you have to plan, test, validate, discover, be proactive, deal with unknown unknowns... Pfft, and they call it progress. Read more: https://lnkd.in/gKW8kH5s CSF intro for the uninitiated: https://lnkd.in/g92gYcQa Or just dive right in - full CSF 2.0: https://lnkd.in/gVuuhESp

Among the new features of the NIST CSF, it introduces the “Govern” function, which I think was much needed.