米国国防省がCMMCの暫定規則(DFARS Case 2019-D041)を公表し、意見募集を行っています

こんにちは、丸山満彦です。

米国国防省がCMMCの暫定規則を公表し、意見募集を行っていますね。色々と批判があったためかコスト分析等やっていますね。。。

複雑になってしまってますね。。。

● Federal Register

・2020.09.29 Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)

---

AGENCY: Defense Acquisition Regulations System, Department of Defense (DoD).

ACTION: Interim rule.

SUMMARY:
DoD is issuing an interim rule to amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement a DoD Assessment Metho

dology and Cybersecurity Maturity Model Certification framework in order to assess contractor implementation of cybersecurity requirements and enhance the protection of unclassified information within the DoD supply chain.

DATES: Effective November 30, 2020.

---

---

■ 参考（政府,系）

● Defense Contracting and Pricing - Cyber
・Strategically Assessing Contractor Implementation of NIST SP 800-171

● Office of the Under Secretary of Defense for Acquisition & Sustainment
・Cybersecurity Maturity Model Certification

・2020.03.18 [PDF] Cybersecurity Maturity Moder Certification (CMMC) Version 1.02

■ 参考（ニュース等）

● まるちゃんの情報セキュリティ気まぐれ日記

・2020.05.01 Cybersecurity成熟度モデル認証制度は普及するか、しないか・・・
・2020.04.19 COVID-19によりDODのサイバーセキュリティ認証(CMMC)の開始が遅れる？
・2020.03.31 CMMC概要 An Introduction to the Cybersecurity Maturity Model Certification (CMMC)
・2020.03.09 Cybersecurity Maturity Model Certification (CMMC) Version 1.0

● CMMC Audit Preparation
・2020.10.01 DFARS 252.204-7012 or 252.204-7021 enforces NIST 800-171

● MeriTalk
・2020.09.30 DoD Publishes Interim Rule for CMMC, Opens Public Comment Period bY Dwight Weingarten
・2020.09.28 Interim CMMC Rule Set to be Published Tomorrow by Dwight Weingarten

● GOVERNMENT CONTRACTS INSIGHTS
・2020.09.30 DEPARTMENT OF DEFENSE ISSUES CMMC INTERIM RULE, SETTING UP A TWO-PART PROCESS FOR REVIEW OF CONTRACTOR IT SYSTEMS by Tina Reynolds

● Feral News Network
・2020.09.30  DoD’s interim rule adds a new twist to implementing cyber maturity model by Jason Miller

● CyberSheath
・2020.09.28 DoD Released a New Interim Final DFARS Rule Covering CMMC and NIST 800-171 by Eric Noonan

● NextGov - cybersecurity
・2020.09.28 Defense Department Certification Body Could Itself Conduct Audits Under Interim Rule by Mariam Baksh