Author: Adam

Totem Tech editor’s note: Joe Lariz is the creator of PermitUSB and the Director of Information Technology at an electronics manufacturing company in the defense supply

You’ve implemented your small business cybersecurity protection program to meet all the FAR 52.204-21 (aka FAR 52.240-93) basic protections for Federal Contract Information (FCI). You’ve

Government contractors handling technical or mission-related information during the performance of their contracts need to be cognizant of the National Institute of Standards and Technology

US Department of Defense (DoD) contractors that handle Controlled Unclassified Information (CUI) are subject to the DoD’s Cybersecurity Maturity Model Certification (CMMC) Level 2 assessments.

Federal government contractors that handle Controlled Unclassified Information (CUI) must implement the National Institutes of Standards and Technology (NIST) Special Publication 800-171.  NIST 800-171 lists

All federal government contractors handle Federal Contract Information (FCI) in some form or another.  We cover the definition of FCI in a previous post, but

Government contractors that handle –store, process, or transmit– Controlled Unclassified Information (CUI) must implement the National Institutes of Standards and Technology (NIST) 800-171 standard to

As we’ve stated previously, all federal government contractors, even subcontractors, suppliers, and vendors, handle Federal Contract Information (FCI) and must implement the FAR 52.204-21 clause