A great read, a balanced view of CMMC over the past 3 years, and the challenges ahead for defense contractors if the DoD continues with CMMC 2.0.

← Back to Blog

A great read, a balanced view of CMMC over the past 3 years, and the challenges ahead for defense contractors if the DoD continues with CMMC 2.0. The DIBCAC assessments point to the obstacles the DIB is going to face over the coming years in cybersecurity compliance. NIST SP 800-171 has been assessed for the past 4 years irrespective of CMMC with generally poor results. A compliance challenge that the defence industry will have to face whether it is under CMMC or not. The DoJ civil fraud initiative is not solely focused on CMMC, it’s focused on compliance to regulated standards that happen to include DFARS 252.204-7012, but equally FISMA.

At a time when cybersecurity is an increasing problem for many industry sectors. For CMMC, it is difficult to argue that the the past 3 years could have been more productively spent. When there is an increasing need to manage cyber-risk for front line fighting forces, both those of the US and its allies.

Ted Dziekanowski Jason Spezzano Brian McCarthy

#theaugustaplan‚ #cybersecurity‚ #cyberriskmanagement‚ #regulatorycompliance‚ #regulatoryoversight‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #sec‚ #cyberriskgovernance‚ #ransomeware‚ #csfprofiles‚ #governance‚ #nist‚ #cyberinsurance‚ #insurance

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6896358453686988800