Positive to see the United States Department of War proactively moving ahead with the management of cybersecurity across the weapon systems…

← Back to Blog

Positive to see the United States Department of War proactively moving ahead with the management of cybersecurity across the weapon systems procurement, design, and manufacture. The current approaches to deliver the RMF, in line with the Federal Information Security Modernisation (FISMA) Act, are complex and resource-intensive. A more efficient process is needed to manage weapon system cybersecurity.

One wonders about the scope of applicability of the new construct. One suspects the change will align with DFARS 252.204-7012 and 7021. One notes the alignment of the new construct under the RMF (FISMA), and while NIST SP 800-37r2 is important, much is known about cybersecurity risk and the controls necessary to manage cybersecurity today. The DoW recently implemented CMMC for the assurance of cybersecurity of the Global DIB.

What should not be underestimated are the 5 phases. One suspects they will find their way into the ATO process, which weapon system manufacturers and the AO must address.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC

#cybersecurity #FISMA

https://lnkd.in/eGx4TtZ7

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7376870819571994624