Skip to main content
Right of Boom

Our Speakers

An Uncompromising Roster of Experts.
Our speakers bring unfiltered, tactical insights forged in the crucible of real-world incident response.

Back to all speakers
Scott Edwards

Scott Edwards

CEO

Summit 7

Sessions

MSPs are still wrapping their heads around the CMMC Program requirements and helping their customers align with NIST 800-171 Rev 2. Don't look now, but there’s a new sheriff in town: The FAR CUI Rule, and this is much broader reaching than CMMC.

The DoW initiated third-party assessments for NIST 800-171 Rev 2 controls as the first of many Federal agencies required to protect CUI. What are the other agencies up to?

The FAR CUI Rule (clauses FAR 52.240-6 and FAR 52.240-7) is expected to be published by the end of 2026, so this working session will focus on NIST 800-171 Rev 3 and corresponding requirements and how they will impact contractors working with both DoW and other federal agencies.

This workshop will cover:

  • What organizations will NIST 800-171 Rev 3 apply to?
  • What would you look for in their contracts?
  • What does the transition from Rev 2 to Rev 3 entail, especially focused on MSP
  • implementation and support?
  • What reporting requirements are MSPs needing to track?
  • What opportunity does this represent to MSPs that have been focusing on CMMC?