"Much like #CMMC, the new #GSA requirements would require many contractors who work with #CUI to obtain an independent assessment of their cybersecurity controls. But GSA’s updated requirements are based on revision three of .. NIST 800-171." federalnewsnetwork.com/acquisition-...