As promised, the public comment period on NIST SP 800-171 r3 closed on January 26, 2024. As a reminder, the most current edition of NIST 800-171 is r2. Revision 3 has been in process for about a year.
There has been a lot of discussion about how the publication of r3, which is due in the next few months, will impact the CMMC rule once it is published. Currently, the proposed CMMC rule points specifically to r2, and DFARS 252.204-7012 simply says contractors must comply with the latest version of NIST SP 800-171. We will keep you posted on the latest as this process rolls out throughout this year.
If your business is not yet compliant with r2, complete that before beginning work on the new revision.
If you have any questions about this, please feel free to schedule a meeting with us
As you may have heard, CMMC was published as a proposed rule on December 26, 2023. That date began a sixty-day public comment period. Once that public comment period is over, the comments will have to be reviewed and addressed by the U.S. Department of Defense. We will keep you posted as the situation develops.
If you registered for our webinar scheduled on February 21, please note that presentation has now been moved to April 10. Our March webinar is still scheduled for Wednesday, March 20. That presentation will cover "What You Need to Know About CMMC" and attendees will receive an informative companion guide. You can register here.
Forbes Magazine published an article about CMMC this week. There are some interesting insights in the article, particularly from the business perspective. Let us know what you think about the author's summary.