eCFR :: 2 CFR 200. 303 -- Internal controls. (e) Take reasonable cybersecurity and other measures to safeguard information including protected personally identifiable information (PII) and other types of information
2 CFR § 200. 303 Internal controls - Code of Federal Regulations (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award
PART 6 - INTERNAL CONTROL - bidenwhitehouse. archives. gov Appendix 2 provides illustrative specific controls for control activities, the remaining component of internal control, for each type of compliance requirement For this purpose, specific controls are considered operational-level controls that apply to individual types of compliance requirements
2 CFR 200. 303 Internal Controls - NCDA As soon as the subrecipient agreement is fully executed, the subrecipient becomes a non-federal entity subject to the same stipulations of 2 CFR 200 as the grantee
Understanding Reasonable Cybersecurity Measures under New Federal . . . In a nutshell, federal agencies want assurances that their award recipients are safeguarding data Section 200 303 of 2 CFR introduces “reasonable” cybersecurity internal control stipulations alongside existing information protection measures outlined in section 200 303 (e)
§ 200. 303 - Internal controls. , Subpart D - Post Federal Award . . . Code of Federal Regulations (CFR) is the codification of the general and permanent rules published in the Federal Register by the executive departments and agencies of the Federal Government The unofficial compilation of CFR based on the official version