Call us now:
This week the U.K. MoD released its cyber resilience strategy, a vision outlining its cyber plans for defence. It comes at a time when cyber regulation and plans of partner nations are more advanced than those of the U.K. The U.S. DoD DFARS program to secure the U.S. DIB includes UK and EU defence contractors, enforced through NIST SP 800-171 compliance since 2017 and soon to be CMMC 2.0. FISMA is being deployed by all branches of the DoD and has just gone through a 2022 update. It requires the implementation of a comprehensive risk management framework by Federal government, impacting the DoD DIB. Another 5 Eyes partner Australia released a comprehensive information security manual, updated in 2022, setting out a cybersecurity framework in line with NIST CSF principles.
The SEC released cybersecurity proposals to regulate public firms requiring access to capital markets, closing for comments in May 2022. In late April 2022 the Aerojet Rocketdyne case was settled in court, seen as a test case for the DoJ civil cyber fraud initiative and compliance to cybersecurity standards, such as DFARS within the DoD supply chain.
All of these activities impact the U.K. DIB, as international partners move ahead with legislation and regulatory enforcement programs for cybersecurity and risk management. High standards of cybersecurity and risk compliance are commercial considerations, that U.K. defence contractors and the MoD will consider. The legal and commercial realities of cybersecurity and risk management compliance are a national defense and commercial consideration for the UK defence industry. As cybersecurity and compliance is becoming a competitive differentiator.
The difficulty for the MoD is balancing up the needs of U.K. defence and national security with the commercial reality that UK defence contractors are part of global supply chains and have to remain competitive. Requiring access to capital from international markets and complying with cyber regulations and standards set outside of the U.K, that it has no control over. Standards that are significantly greater than Cyber Essentials or Def Stan.
Some of the challenges were discussed with the APPG on cyber, with Rear Admiral William Chase in 2020 (https://lnkd.in/erza6be7) and with the APPG on AI in 2021. Albeit the DoD 2021 CMMC 2.0 program and alignment with DFARS 252.204 – 7012, 7019 and 7020 and the application of NIST SP 800-171 clarifies and simplifies the DoDs cyber program.
One wonders about the impact of the new weapon systems being acquired from the by former Eastern block countries and its impact on cybersecurity compliance. Given statements in 2021 for common cybersecurity standards for NATO, and the Quad 4.
Ted Dziekanowski
#ministryofdefence #dod #cmmc #dfars #cybersecurity #cybersecurityrisk #theaugustagroup
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A6930052092946477057