Latest / Cybersecurity Maturity Model Certification (CMMC) Unlocked
Eliminating the Line: Rethinking Basic and Derived Security Requirements in NIST SP 800-171 Revision 3
This episode unpacks the elimination of the basic and derived security requirement distinction in NIST SP 800-171 revision 3, the assessment methodologies surrounding them, and the practical effects on DoD contractors, especially primes managing supplier risk. Our hosts dive into how the structure of NIST SP 800-171 assessments has evolved, the rationale for the new approach, and what subcontractors and primes alike can expect under the updated rules.
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.