CMMC Meets NISPOM: How DIB Contractors Can Operationalize Both Without Breaking Their Security Programs (W02b)
Defense contractors face a convergence of compliance obligations: NISPOM-driven industrial security requirements and CUI safeguarding requirements (i.e. DFARS 252.204-7012). For FSOs and security managers, these frameworks can feel like parallel universes. This session explores how cleared facilities are operationalizing CUI protection within an existing NISPOM-compliant program, where the frameworks align, where they conflict, and what practical steps organizations can take to avoid duplicating effort or missing critical gaps.