Cyber is a national security problem, even if its hard, there needs to be solution to address cybersecurity risk management across the DIB. Hiding behind non compliance is not a solution for the war fighter or tax payer. View Original…
The DoW CMMC program only added a layer of compliance assurance over cybersecurity compliance under DFARS 7012 and NIST 171, and all the recent announcements by the DoW on CMMC Phase II does is remove certification. It does nothing to…
The US United States Department of War CMMC program was always going to be a complex initiative to design and deploy. But no more complex than other global cyber regulations that include the SEC Final cyber rule, the Basel Accords…
There’s a lot of discussion taking place about cybersecurity and the defence industry. This week, the United States Department of War announced it was pausing Phase II of the CMMC program, and the UK Ministry of Defence asked all industry…
Last week I published the enclosed, pointing to why the United States Department of War won’t be getting rid of CMMC any time soon. The week the DoW published an update placing Phase 2 of its CMMC program on hold…
The United States Department of War is between a rock and a hardplace as it has to balance weapon system delivery, innovation, economics and the very real threat of cybersecurity and IP theft. The next steps will be interesting to…
I wrote about the UK’s Cyber Resilience Bill earlier this year, discussing some of the gaps that need to be closed if it is to align with international cyber regs such as the EU NIS2. The House of Lords is…
The pausing of Phase 2 is a response to several challenges that the United States Department of War faces. 1. The DoW cannot afford to impact the supply chain’s ability to deliver products and services. 2. The DoW has no…
The latest challenge to beset the CMMC program came from the United States Department of War and the suspension of Phase II of the CMMC program. But not the program’s suspension. The DoW has made a decision to pause the…
The DoW is rethinking cybersecurity implementation. DFARS 7012 remains, the method for compliance and assurance will change. The Augusta Plan. @Thaddeus Dziekanowski #dfars #theaugustaplan View Original Post
