Additional information
by Mark a. Russo Cissp-Issap Ceh (Author)
THE SYSTEM SECURITY PLAN IS A CRITICAL DOCUMENT FOR NIST 800-171, AND WE HAVE RELEASED A MORE EXPANSIVE AND UP TO DATE SECOND EDITION FOR 2019A major 2019 NIST 800-171 development is the expected move by the Department of Justice (DOJ) against any company being held to either FAR Clause 52.204-21, DFARS Clause 252.204-7012, or both; if DOJ can show the company has violated its contract it will be subject to federal prosecution if they fail to meet NIST 800-171. Discussions of the author with key personnel working with NIST and DOJ on this matter raises the seriousness of not meeting NIST 800-171. Sources to the author are expecting in 2019 and beyond the likelihood of civil and criminal prosecution for those companies who: 1) have a breach of their IT environment, 2) that data, specifically Controlled Unclassified Information (CUI)/Critical Defense Information (CDI), is damaged or stolen, and the 3) DOJ can demonstrate negligence by the company, will result in federal prosecution. This is part of a ongoing series of Cybersecurity Self Help documents being developed to address the recent changes and requirements levied by the Federal Government on contractors wishing to do business with the government. The intent of these supplements is to provide immediate and valuable information so business owners and their Information Technology (IT) staff need. The changes are coming rapidly for cybersecurity contract requirements. Are you ready? We plan to be ahead of the curve with you with high-quality books that can provide immediate support to the ever-growing challenges of cyber-threats to the Government and your business.
