NIST Enhances Final Draft of NIST SP 800-172, Enhanced Security Requirements
Client Alert | 1 min read | 07.08.20
The National Institute of Standards and Technology (NIST) recently released the final public draft of NIST Special Publication (SP) 800-172, formerly known as Draft NIST SP 800-171B. Building on the security requirements in NIST SP 800-171, the applicable standard under DFARS 252.204-7012, 800-172 provides 34 enhanced requirements to protect Controlled Unclassified Information (CUI) associated with critical programs or high value assets from the risks posed by advanced persistent threats (APTs).
Unlike prior drafts, 800-172 incorporates the protection strategy and desired effects on the adversary directly into the implementation guidance for each control. The Department of Defense (DoD) expects 800-172 to impact fewer than one percent of defense contractors. However, numerous requirements from Draft 800-171B were incorporated into the Cybersecurity Maturity Model Certification (CMMC) Levels 4 and 5, likely giving commenters the opportunity to affect future CMMC revisions.
Comments for the final public draft are due August 21, 2020.
Insights
Client Alert | 6 min read | 04.16.24
Navigating the AI Intellectual Property Maze - Key Points From Congressional Hearing
On April 10, 2024, the U.S. House of Representatives, Judiciary Committee Subcommittee on Intellectual Property convened Part III to an ongoing discussion and exploration of artificial intelligence (AI) and intellectual property (IP) rights. The session, “Artificial Intelligence and Intellectual Property: Part III - IP Protection for AI-Assisted Inventions and Creative Works,” delved into the nuanced debate over what IP protections should exist for AI-generated or AI-assisted works.
Client Alert | 5 min read | 04.15.24
Making the EU Courts More Efficient for Trade-Related Decisions
Client Alert | 1 min read | 04.15.24
New FAR Part 40 to Address Supply Chain and Information Security Requirements
Client Alert | 1 min read | 04.11.24
U.S. Chamber Submits Comments on the FAR Council’s Proposed Rule Regarding Pay Transparency