Call us now:
As with all things CMMC the U.S is leading the conversation. A conversation the international Defense Industry Base (DIB) should listen to. The DoD and U.S government has struggled to get CMMC this far, but now that it is here the DoD and international DIB is going to have to make some fundamental decisions on harmonisation and collaboration at best, and reciprocity of cybersecurity standards at worst.
In the end, the DoD is the customer and its a customer that many countries collaborate with to develop their industry base or buys weapon systems from. Its also a customer that spends allot of money on R&D. CMMC is only the latest addition to pre-existing regulation, regulation that has been required from 2017. One suspects the sleeping tiger has woken to the fact that the money it’ spent on defense is being lost to its adversaries. A lose in part due to the DIB and IP theft.
While there is much talk of contractors pulling out of the defense industry, here’s a word of caution. Cybersecurity is a major problem today for all industries. It is being regulated to a greater degree outside the DIB with US and EU regulations across CNI, FIs and Capital markets. So better the devil you know than the devil you don’t
While U.S industry has concerns about CMMC, the DoD and International Industry has big concerns to.
1. How to increase the water line of cyber compliance across the international DIB.
2. How to achieve reciprocity of cyber between international partners.
3. How to fund CMMC.
4. How will CMMC certification be delivered across the international DIB.
5. How to address national security concerns over defense audits.
6. How to address the cyber resource gap.
So be careful what you wish for, CMMC is a contractual obligation and the U.S government is increasing its focus on cyber compliance delivered through the legal lens.
@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Rachel V. Rose, JD, MBA
Veritas GRC Senebria United States Department of Defense UK Ministry of Defence Aerospace, Security and Defence Industries Association of Europe (ASD) Team Defence Information
#cybersecurity #cyberriskmanagement #cmmc #dfars
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7253692889451347968