BIS Delays Effective Date of Information Security Controls IFR

The DOC’s Bureau of Industry and Security (BIS) published a notice in today’s Federal Register (87 FR 1670-1671) establishing a delay of the effective date of their interim final rule IFR, “Information Security Controls: Cybersecurity Items”, that was published in October 2021. The new effective date will be March 7^th, 2022.

Today’s notice reports that public comments on the IFR indicated that many organizations would require additional time to set up compliance procedures to bring their export operations inline with the new requirements. BIS is providing that time in the notice as well as providing notice that they will be issuing additional guidance on implementing the IFR.