-

NIST 800-171 Co-Author Dr. Ron Ross to Discuss New Revision at CMMC CON 2023

RESTON, Va.--(BUSINESS WIRE)--Federal contractors in the Defense Industrial Base (DIB) got a key piece of information in May that will drive their compliance efforts with the Cybersecurity Maturity Model Certification (CMMC) 2.0 program. The National Institute of Standards and Technology (NIST) updated guidance for protecting controlled unclassified information (CUI) via Special Publication 800-171, Revision 3, the backbone of CMMC 2.0.

Contractors can get historical insight into NIST's evolution and answers on the new draft at CyberSheath’s fourth-annual CMMC CON. Dr. Ron Ross, Co-Author of NIST 800-171, will be interviewed by CyberSheath CEO Eric Noonan during the free, one-day virtual conference on Sept. 27, 2023, at 9:00 a.m. EDT. Registration for the event is still open.

“Many of the newly added requirements specifically address threats to CUI, which recently has been a target of state-level espionage,” Dr. Ross said via the NIST website. “We want to implement and maintain state-of-the-practice defenses because the threat space is changing constantly. We tried to express those requirements in a way that shows contractors what we do and why in federal cybersecurity. There’s more useful detail now with less ambiguity.”

Dr. Ross has served as a Computer Scientist and Fellow at NIST for more than 25 years. He leads the Joint Task Force Transformation Initiative, an interagency working group that develops the unified information security framework for the federal government and its contractors. He was inducted into the Information Systems Security Association (ISSA) Hall of Fame in 2009 and the National Cyber Security Hall of Fame in 2015. He holds a master’s degree and Ph.D. in Computer Science from the U.S. Naval Postgraduate School.

Dr. Ross joins a list of other established industry leaders speaking at CMMC CON 2023, including Microsoft Chief Architect Richard Wakeman and keynote speaker Robert O’Neill, a highly-decorated combat veteran who embodies this year’s CMMC CON theme, “Strive to Thrive.”

Learn more about CMMC CON 2023 and register today.

About CyberSheath

Established in 2012, CyberSheath is one of the most experienced and trusted IT security services partners for the U.S. defense industrial base. From CMMC compliance to strategic security planning to managed security services, CyberSheath offers a comprehensive suite of offerings tailored to clients’ information security and regulatory compliance needs. Learn more at www.cybersheath.com.

Contacts

CyberSheath
Kristen Morales at Kristen.Morales@cybersheath.com

CyberSheath


Release Versions

Contacts

CyberSheath
Kristen Morales at Kristen.Morales@cybersheath.com

Social Media Profiles
More News From CyberSheath

Pentagon’s James Mismash to Keynote CMMC CON 2026

RESTON, Va.--(BUSINESS WIRE)--On July 13, the Pentagon suspended CMMC Phase 2, pausing mandatory third-party certification requirements while the Department conducts a 60-day review of the program. The announcement created immediate questions across the defense industrial base (DIB) about what changed, what did not, and what contractors should expect next. To explain the government’s perspective, CyberSheath, one of the most experienced and trusted IT security services partners for the U.S. DIB...

New Report Shows Defense Contractors’ Self-Reported Cybersecurity Scores Are Rising as Confidence in Their Accuracy Plunges 24 Points

RESTON, Va.--(BUSINESS WIRE)--The Cybersecurity Maturity Model Certification (CMMC) program is a Pentagon framework that became federal defense contract law last November, requiring defense contractors to prove their cybersecurity practices meet federal standards. In July, the Pentagon paused the requirement for third-party verification, leaving the defense industrial base (DIB) to rely on self-attestation. A study conducted by Merrill Research and commissioned by CyberSheath found that contrac...

CyberSheath Guides Woman-Owned Small Business Gemini Industries Forward with CMMC Level 2 Certification Despite Phase 2 Pause

RESTON, Va.--(BUSINESS WIRE)--The Pentagon suspended CMMC Phase 2 requirements on July 13, pausing the mandatory third-party assessment requirement that had been set to take effect Nov. 10. For some defense contractors, the announcement was a reason to wait. For Gemini Industries, a technology solutions provider specializing in mission-critical support for U.S. government agencies and national security customers, it reaffirmed a decision the company had already made: invest in cybersecurity and...
Back to Newsroom