Vendor Flow Downs: What Contractors Must Require from Their Vendors
Vendor Flow Downs: What Contractors Must Require from Their Vendors Many contractors focus heavily on their own cybersecurity requirements when preparing for CMMC or DFARS compliance. However, a major part of compliance often sits outside the organization. It sits in the vendor and subcontractor network. If a vendor handles Federal Contract Information (FCI) or Controlled…