What the Heck is an ODP?

07/04/24 • 50 min

Now that SP 800-171 revision 3 is official, organizationally defined parameters (ODPs) are officially a part of our the rest of our lives. Like most things in SP 800-171 there are great details in SP 800-53 that help explain what's going on. In this episode we take a deep dive in requirement 3.1.8 through the lens of ODPs.

Episode Links:

SP 800-53: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final

FedRAMP baselines: https://www.fedramp.gov/baselines/

Episode Links:

SP 800-53: https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final

FedRAMP baselines: https://www.fedramp.gov/baselines/

Previous Episode

What is an “NFO Control”?

The good news about NIST SP 800-171 revision 2 being the standard for the next few years is it's a smaller standard compared to revision 3. However, there are some confusing aspects to NIST SP 800-171 revision 2 that defense contractors can't afford to overlook. The most important? NFO Controls.

Episode Links:

NIST SP 800-171r2: https://csrc.nist.gov/pubs/sp/800/171/r3/final

DFARS 7012 Class Deviation: https://youtu.be/voziZRAMvv4?si=yPaUuHLnHIQsfGQu

Policy and Procedure Deep Dive: https://youtu.be/TXsKdH3hC6E?si=GoAlpEuMqQWAsOzr

Next Episode

Live, Laugh, Rulemaking

The 32 CFR CMMC final rule has officially left the DoD and is currently undergoing final regulatory review. This is the last step before publication in the Federal Register. Based on what we know, CMMC should be a reality before the end of 2024.

Episode Links: Proposed Rule Webinar: https://www.summit7.us/webinars/proposed-cmmc-rule