@SkrzSecurity @IAMERICAbooted Yes, technically it is now, as any contractor has meet 171 requirements since 2013 but DOE for example, as yu may know,

@SkrzSecurity @IAMERICAbooted Yes, technically it is now, as any contractor has meet 171 requirements since 2013

but DOE for example, as yu may know, uses C2E2, has more CMMI vibes, each Dept or Agency can change

CUI in FAR will come, this is the FCI in FAR rule, it is a doozy for access control ans IAM