Major IT Compliance Revisions Will Be Proposed In A Notice of Proposed Rulemaking By October 1st Will Your Institution Be Ready To Comment On NIST 800-171 Requirements

Overview
For literally years now, I, along with other individuals like Brandon Sherman, Counsel with Saul Ewing LLC, have been routinely calling our communities’ attention to issues related to IT compliance, including but not limited to the initial Department of Education revisions to the requirements under the Gramm-Leach-Bliley Act, the additional responsibilities of institutions to implement the Federal Trade Commission’s “Safeguard Rules,” and encouraging institutions to prepare for pending proposals from the Department of Education to require all institutions of higher education to comply with the National Institute for Science & Technologies (NIST) 800-171 standards.

Recently, the Department posted new information on their plan to move forward with higher education “contractors” handling and protection of Controlled Unclassified Information (CUI), stating:

“To assure schools properly protect CUI, as required by Executive Order 13556, and the regulations at 32 CFR part 2002 which require non-Federal entities handling CUI to implement NIST 800-171 Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations (NIST 800-171), the Department plans to propose to regulate on information security requirement.”
www.reginfo.gov/public/do/eAgendaViewRule?pubId=202404&RIN=1845-AA25. (www.reginfo.gov/public/do/eAgendaViewRule?pubId=202404&RIN=1845-AA25)

What Can You Be Doing To Prepare
On CSPEN’s Federal Legislative & Regulatory Update webinar we will share information and resources designed to assist your institution in learning more about these cybersecurity standards, the Department’s preparation in developing a Notice of Proposed Rulemaking (NPRM), some of the key issues we will need to be prepared to address in the NPRM, and how some of your peers are already preparing to implement the standards and what they are learning as a result.