The US Defence industry is starting to feel the effects of the United States Department of War (DoW) CMMC cyber requirements as they started their deployment, from November 10th 2025. Now the GSA (General Services Administration) is getting in on…
It’s not the first of its kind AI regulation, which came from the EU with its AI Act. But it is AI regulation, as South Korea proposes its AI Act, which is a comprehensive regulation aimed at addressing governance, oversight,…
The state of EU cybersecurity is laid bare by its head. As Juhan Lepessaar, the Executive Director of ENISA, makes it clear that the EU needs to urgently rethink its cyber defences in light of the unprecedented cyber threat faced…
Just wait until you have to comply with CMMC if you are a defense contractor. It makes a SoC II program look like child’s play……………..put CUI into the cloud, the vendor has to be FEDRamp moderate. Best of all, the…
And here is a cybersecurity and governance problem that stands in front of the UK defence industry, specifically contractors that supply products and services to the United States Department of War. The DoW CMMC program requires compliance with cybersecurity practices…
I do struggle with this. It raises so many red flags about cybersecurity, national security, and governance. We live in a polarized world, one where cybersecurity is a direct threat to national security, and we still believe that cyber threat…
This article from law firm Holland & Knight LLP is a useful read for my EU and UK defence colleagues, required to comply with the DoW CMMC program. It’s a rendition of CMMC affirmation, compliance, and what it means for…
What are the implications of US National and state Insurance regulators setting out requirements for insurers to adopt a Model AI Bulletin, providing guidelines for insurers on the responsible use of artificial intelligence (AI) within the industry? @Thaddeus Dziekanowski Brian…
A topical paper on the weaponization of CNI by nation-state threat actors by Saman Zonouz, Associate Professor of Cybersecurity and Privacy Georgia Institute of Technology. Demonstrated by the reported use of cyber attacks on Venezuela’s power network ahead of an…
The US Army has added CMMC requirements to a range of engagements, in this case, to establish a dual engagement between the army and industry partners. So the Army can articulate its operational needs and future priorities for S/VTOL unmanned…
