Respond to the following in a minimum of 175 words:
Option 1
The Department of Defense Directive (DoDD) 8140 (formerly 8570) provides guidance and procedures for training, certification, and management of all government employees who conduct information assurance functions in assigned duty positions. In some career positions, DoDD 8140 impacts those with access to DoD information systems performing assurance (security) functions.
As an independent contractor considering a move into the DoD contract arena, discuss additional considerations you would add to your compliance plan to meet DoD requirements. Assess the pros and cons of adding DoD contracts to your portfolio.
Option 2
Research the NIST Special Publications website and provide a list of 800-series publications that address the following regulatory and compliance requirements:
PCI DSS Compliance
HIPAA Compliance
Cloud Security Compliance
Note: There may be more than one 800-series publication associated with each.
From the perspective of a CISO, provide a strategy you would use to ensure your company complies with all three regulations.
