Small to medium Department of Defense contractors are challenged by the new DFARS 252.204-7008 and 252.204-7012. These now require the companies to implement NIST SP 800-171 cybersecurity requirements to secure the Government supplied ÒControlled Unclassified InformationÓ (CUI). However, the requirements for the small company are exactly the same as the requirements for the huge companies.
This book goes through every requirement of the NIST SP 800-171, making suggestions of how to implement the standard with minimal cost. The implementation suggestions in this book assume that the company networks are Windows-based and so the suggestions utilize tools built into Windows whenever possible. This book makes sense out of the requirements and how they can be approached. Using this book, a contractor can take this gigantic project of implementation and cut it down to a reasonable size.