NIST SP 800-171
No Good Deed Goes Unpunished: Why Voluntary Disclosure of Cybersecurity Violations Doesn’t Mean You Won’t Be Punished for Bad Security
Mark Rasch | | Aero Turbine case, cisa, compliance programs, CUI, CYBERSECURITY COMPLIANCE, cybersecurity contracting, cybersecurity law, cybersecurity liability, Data Security, defense contractors, DFARS 252.204-7012, disclosure penalties, DoD Voluntary Disclosure Program, DOJ Corporate Enforcement Policy, DOJ policy, false certification, False Claims Act, federal contracts, fedramp compliance, Gallant Capital Partners, government enforcement, legal risk management, NIST SP 800-171, self-reporting, Universal Health Services v. Escobar, voluntary disclosure
Voluntary cybersecurity disclosure reduces penalties but not liability. In compliance, honesty helps—but it’s no safe harbor ...
Security Boulevard
Why SPRS Matters and 4 Steps to Improve Your Security Posture
Chris Petersen | | Compliance, Cybersecurity, DFARS (Defense Federal Acquisition Regulation Supplement), NIST SP 800-171, Supplier Performance Risk System
The primary purpose of SPRS is to ensure that suppliers meet the necessary performance standards and comply with regulatory requirements, thereby maintaining the reliability and security of the defense supply chain.   ...
Security Boulevard

