@JBronson@ggreenwald@ChrisCJackson Successful satire... You pretend to be an insincere opportunist with no genuine convictions and instead of laughing everyone just believes you.
@WeldPond (2/2) like the CUI debacle, you have frameworks and controls for SSDF & SCRM which assume mature cyber program as a baseline due to FISMA and RMF particulars. So the big dogs can comply and implement, others, good luck.
@WeldPond (1/1) Now you have NIST SP 800-218 in draft, Appendix F added to NIST SP 800-161 (also now in draft) for r1. You have a commitment to add self-attestation to FAR... But like DFARS 7012 in 2015 you have no verification mechanism or funds to implement. FCA lawyers are loving it.
1/5 Have you read the deal agreed between the US and the Taliban?
It explains why the Taliban now rule Afghanistan again; the US just surrendered it, even promising financial support.
A quick thread follows but 1st a pic of Big Mike Pompeo doing the deal in Doha in Feb 2020...