US CMMC compliance figures won’t include the International DIB, whose compliance is likely to be far worse. Someone somewhere may have the unenviable task of carrying the risk of compliance and mission security. @Thaddeus Dziekanowski, there aren’t enough resources globally…
It is a pleasure to have an article published in the International Security Journal (ISJ) on such an important subject as CMMC and its impact on the UK (international) Defense Industry. As the article points out, No Compliance, No Contract.…
Seller beware: No Compliance, No Contract It’s a pleasure to publish an article in the International Security Journal (ISJ) with Georgios Alevras on the introduction of the Cybersecurity Maturity Model Certification (CMMC) by the US Department of War. That takes…
It’s an observation, but when both sides of Congress make similar recommendations in the National Defence Authorisation Act (2026 NDAA), there may be changes afoot to defence procurement. Recommendations have been put forward by the House of Representatives and the…
An article from the insurance industry on the insurability of cyber risk, more importantly, its un-insurability. Cyber insurance is an important component of corporate risk transfer. Waiting for a catastrophic loss is likely not the right approach to take; recent…
One wonders the impact of the overhaul on the International Defence Industry, and in the short term CMMC compliance. View Original Post
Insurers are starting to realise they have to go left of bang to support their clients in managing cyber risk and reduce claims risk. But going left of bang requires careful consideration. As we see with the development of cyber…
With EU NIST 2 and DORA requiring board and staff education, the Federal Office for Information Security (BSI) is taking a strong position. @Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan Veritas GRC #cyberriskmanagement #nis2 View Original Post
On the 10th November 2025, the United States Department of War (DoW) starts enforcing global Defence Industry (DIB) compliance with CMMC. CMMC is the DoW’s cybersecurity program that requires compliance with its 2016/ 2017 Acquisition Regulation DFARS 252.204-7012 and the…
The challenge many organisations face with cybersecurity is that cyber threats can go unnoticed for a long time. As is the case with Ribbon Communications in the US, which recently filed a report with the SEC and highlighted that threat…
