BIS Publishes Cybersecurity Controls Final Rule

Today, the DOC’s Bureau of Industry and Security (BIS) published a final rule in the Federal Register (87 FR 31948-31954) “Information Security Controls: Cybersecurity Items”. The Interim Final rule for this rulemaking was published on October 21^st, 2021. Changes were made to the regulation based upon public comments filed on the interim final rule.

The BIS made the following, relatively minor, changes:

Added a new end-use restriction {§740.17(f)},

Revised the definition of ‘Government end user’ in §740.22(b)(4),

Revised the format of restrictions of §740.22(c),

Amended the scope of §740.22(c)(2)(i),

Amended the definition of “Less sensitive government end users” and “More sensitive government end users” in §740.22, and

Restores 5D001.e

 

This final rule is effective today.