Question: Hello, I am suppose to write about the contract and derivative requirements in regards to a fictitious company that completely failed at every turn. I
Hello,
I am suppose to write about the contract and derivative requirements in regards to a fictitious company that completely failed at every turn. I was trying to research about them and found some of the basic info from NIST and DFARS , but I am having a hard time understanding why exactly it is so important other than "keeping your data and network safe". Prior to this red team exercise the company recently won a government contract which meant they were required to be in compliance with additional requirements. In case they are needed I will put requirements below in case they are needed. Thank you in advance for your help in getting me to understand this.
Contractual Requirements
DFARS 252.204-7008, 252.204-7009, 252.204-7012
NIST SP-800-61, SP 800-82, SP 800-64, SP 800-128
Derivative Requirements
NIST SP 800-71
DFARS 252.239-7009
Step by Step Solution
There are 3 Steps involved in it
Get step-by-step solutions from verified subject matter experts
