The recent NATO hack of data from Portugal and the MBDA hack demonstrates that critical data can be taken from secure sources.

← Back to Blog

The recent NATO hack of data from Portugal and the MBDA hack demonstrates that critical data can be taken from secure sources. The DIB has been criticized several time by the GAO for its lack of cybersecurity, that resulted in the DFARS and CMMC clauses in 2017, 2019 and soon to be implemented under CMMC in 2023.

In my view both the DoD and DIB have cause for concern and Robert Metzger does a good job of bringing some of these concerns together. As the DoD drives towards the 2023 CMMC deadline, there are still gaps in our compliance knowledge. How will international DIB oversight and assurance take place? How will enough certified assessors be put in place in time? How will the CMMC program overcome national data security sovereignty issues? How will nations increase significantly their own cybersecurity standards and compliance across their defense industries? All of which need to be addressed for CMMC compliance and more importantly for national security.

The challenges for Capital Hill are clear, the NDAA 2023 highlighted the concern faced with international defense cybersecurity compliance. The recent NATO Portugal and MBDA hacks demonstrate the complexities with securing the most sensitive defence data from cyber attack.

But should the defense industry be more concerned by other legislation making its way from the U.S and EU. The SEC proposal and EU NIS 2.0 will have an effect on Public defense firms that they will not be able to manage so easily. The SEC proposal if it goes ahead will require cybersecurity risk management, governance, oversight and attestation for companies wanting access to capital markets and by extension the management of supply chain risks and security. The DoJ is gearing up its own programs to enforce cybersecurity regulation as are the DoT.

Cybersecurity is fast becoming a national security issue, afterall is it a domain of operation.

Ted Dziekanowski

#cybersecurity #cyberriskmanagement #cyberlegal

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6974659109031702528

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags