@dianesbaker1 @LongAsUCan2 @RickPetree But again... In terms of FISMA OMB has determined that contractors only responsible for the confidentiality of

@dianesbaker1 @LongAsUCan2 @RickPetree But again... In terms of FISMA OMB has determined that contractors only responsible for the confidentiality of the assets.

NIST-SP-800-171 is subset of controls selected from NIST-SP-800-53 catalog.

But hard to be compliant without full security and Risk management program