With the False Claims Act (FCA) in mind, MSSPs & government contractors should review data privacy & cybersecurity requirements in their customer contracts.
DHS, CISA & NIST identify nine control system cybersecurity performance goals for critical infrastructure involving energy, communications, transportation & water.