DFARS rule changes and CMMC cyber standards are leaving the starting gate.

← Back to Blog

DFARS rule changes and CMMC cyber standards are leaving the starting gate. Now that it is moving forward and is likely over the next 4 years to be embedded into the US defence supply chain. Questions are being asked about its use as a cyber security standard across other sectors and agencies.

The buying power of the US DoD enables it to leverage its own change agenda. In this case, the projection of DoD IP using NIST SP 800 – 171, for the protection of CUI. One outcome is that it could result in 2 or more tiers of cyber security standard within DIB suppliers, one for the DoD another for other customers. The economics of cyber security management will drive a rethink of security practices to keep cyber costs down.

Given the breadth and depth of the application of the recent rulings. Noises have been made within other Federal Agencies to adopt CMMC (STARS III), and agencies outside of the US are keeping a close eye on what is happening with CMMC and DFARS. The direction of travel for CMMC could see it as the de-facto cyber security model underpinned by NIST.
#cmmc #supplychain #defenceindustry #asdeurope #cyberrisk #cyberinsurance #cyber #cybersecurity #nist #ciso #cio #nsa #cisa #dod #cloudsecurity #fedramp #cyberspace #cmmccoe #enisa

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6716961835511238656

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags