Here lies the problem for the UK. Who is responsible for UK Defense and security when one considers the need for kinetic and logical defense? To quote Chris Inglis on cyber, it is a ‘Whole of society imperative’. You require…
There is a reason the DoD did not adopt a risk-based approach to CMMC. For full organisation compliance to over 101 controls takes well over 18 months and is a significant cost when applied to all data types. On the…
The United States Department of War is overhauling its acquisition process to promote competition, reduce bureaucracy, and speed up delivery of capabilities to warfighters. The overhaul will replace the current program executive office structure with a new portfolio acquisition executive,…
Thank you for the post Bryan Foss. The bigger threat to the UK by Russia is cyber, not direct kinetic warfare. A threat that has been demonstrated over the past 6 months alone to be vulnerable to. The challenge the…
It is a pleasure to have an article published in the International Security Journal (ISJ) on such an important subject as CMMC and its impact on the UK (international) Defense Industry. As the article points out, No Compliance, No Contract.…
Seller beware: No Compliance, No Contract It’s a pleasure to publish an article in the International Security Journal (ISJ) with Georgios Alevras on the introduction of the Cybersecurity Maturity Model Certification (CMMC) by the US Department of War. That takes…
It’s an observation, but when both sides of Congress make similar recommendations in the National Defence Authorisation Act (2026 NDAA), there may be changes afoot to defence procurement. Recommendations have been put forward by the House of Representatives and the…
One wonders the impact of the overhaul on the International Defence Industry, and in the short term CMMC compliance. View Original Post
Insurers are starting to realise they have to go left of bang to support their clients in managing cyber risk and reduce claims risk. But going left of bang requires careful consideration. As we see with the development of cyber…
On the 10th November 2025, the United States Department of War (DoW) starts enforcing global Defence Industry (DIB) compliance with CMMC. CMMC is the DoW’s cybersecurity program that requires compliance with its 2016/ 2017 Acquisition Regulation DFARS 252.204-7012 and the…
