Extract to table

VPI's compliance with NIST SP 800-171 must be documented thoroughly, and the proposed IT segregation plan must be detailed, technically credible, and demonstrably robust

• Governance Structure and FOCI Mitigation: Treasury's questions made clear that the governance framework and FOCI mitigation approach must be well-developed, specific, and operationally detailed before the formal notice is filed

Confirm with Stefan Lohse: (a) whether HSAG has ever been party to any prior CFIUS notice, declaration, or review (believed to be no, but must be confirmed in writing); (b) whether HSAG has any other pending U