Tag
NIST-800-171
Safeguard articles tagged "NIST-800-171" — guides, analysis, and best practices for software supply chain and application security.
15 articles
Regulation
FAR CUI Proposed Rule: An 8-Hour Clock and a Government-Wide Standard
The January 15, 2025 FAR CUI rule extends NIST SP 800-171 to every federal contractor and adds an 8-hour incident reporting clock for non-federal facilities.
Apr 8, 20256 min read
Compliance
CMMC Level 2 for Software Vendors: A Practical Roadmap
CMMC Level 2 means all 110 NIST SP 800-171 controls, assessed by a C3PAO for most contractors. Here's the scoping, gap-closing, and evidence roadmap for software vendors.
May 3, 20246 min read
Regulatory Compliance
Defense Industrial Base Supply Chain and CMMC
How the Defense Industrial Base is adapting its software supply chain to CMMC 2.0, NIST SP 800-171, and DFARS flow-down obligations.
Mar 22, 20247 min read