CMMC is the right thing to do for Defense Cybersecurity.

← Back to Blog

CMMC is the right thing to do for Defense Cybersecurity. Cyber regulation across the US. EU and APAC, and is moving across all industry sectors. However, the CMMC program has caused the DoW to lose valuable ground.

The issue with CMMC is not one of regulation; it has always been one of implementation. There was a lack of consideration of how to implement what was, in effect, one of the largest cybersecurity regulatory compliance programs for manufacturers globally. There was no planning to address global DFARS 7012 compliance, and it feels as though there was an expectation that everyone was going to jump in line with CMMC compliance.
If the defense industry in general did not comply with DFARS 7012. Why would it therefore comply with CMMC?  There was a lack of clarity about the global impact of DFARS 7012 compliance, and how defense contractors out of line-of-sight of the DoW would comply. Finally, there was no oversight, assurance, or enforcement regime put in place that worked. With no impact for non-compliance, why would the DIB comply?

All of this has created a dichotomy for the United States Department of War. On one side, companies should have complied with DFARS 7012 since 2016; on the other, there has been no support, oversight, or enforcement program put in place to support or enforce compliance. DFARS and CMMC were simply a big dog without teeth.

All of this has put the DoW in a difficult position. The DoW is having to pick up the compliance pieces at a time when cyber is developing into a significant national security risk; the DoW needs more weapon systems and the DIB is being relied upon more and more. Yet the DOW has paid for DFARS compliance, and the DIB has no money to comply with cybersecurity.

There is a simple way forward, as we wrote in our submission to the DoW last week.

@Thaddeus Dziekanowski

@Parava Security Solutions

#cmmc #dfars #cybersecurity #nationalsecurity

https://lnkd.in/eXZ_jdGM

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7495784307811352576

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags