Here si a weird one I am wondering if this is a GCC-High-ism...
We have two users who had a second OneDrive company shared folders pop-uo and sync'ing issues have started propagating.
One got so bad, we wiped the device and started over. Uninstalling OneDrive and cleaning out the settings didn't help.
Anyone else see this?
BLUF: DIBCAC is filling in their non-voluntary assessment dance card since they won't be doing CMMC Level 3 Assessments.
Just had a call with a client. They just received an "Assessment Notification" from the Defense Contract Management Agency (DCMA)'s Defense Industrial Base Cybersecurity Asseurance Center (DIBCAC).
The assessment in to be in January. Of note in the letter is:
Thanks to Eric Crucius' diligence, he spotted, like always, the Department of War (DoW) announced a revision to 32 CFR Part 170 for the migration to NIST SP 800-171 Rev 3.
Here are the key Links:
Here is the abstract from the rule:
>This amendment defines a deadline and period for transition from the requirement to comply with NIST SP 800-171 Revision 2, to a requirement to comply with NIST SP 800-171 Revision 3. Significant changes between these two documents include added specificity in the security requirements and introduction of organization-defined parameters (ODP) in select security requirements. In addition to revising the NIST documents that are incorporated by reference in 32 CFR part 170, this amendment adds administrative edits and clarifying content in multiple areas as necessary to effect the transition.
Here is the Summary of Need:
>With this amendment, DoD amends the Cybersecurity Maturity Model Certification (CMMC) Program to define a period for transition from the requirement to comply with NIST SP 800-171 Revision 2, to a requirement to comply with NIST SP 800-171 Revision 3. As described by NIST, the significant changes between these two documents include added specificity in the security requirements and introduction of organization-defined parameters (ODPs) in select security requirements. In addition to revising documents incorporated by reference in this rule, this amendment adds administrative edits and clarifying content in multiple areas.
And the laughable part, DoW thinks 20% less companies will be impacted by 32 CFR Part 170:
>In addition to the change from NIST SP 800-171 revision 2 to revision 3, which impacted CMMC Level 2 and LEvel 3 assessment objectives, this rule amendment is based on a more current estimate of the size of the Defense Industrial Base. Overall, we estimate approximately 20% fewer total companies will be impacted by 32 CFR Part 170.