Call us now:
For those interested in cybersecurity specifically the U.S DoD DFARS/ CMMC program, it maybe time to consider what to do about it. Given NIST SP 800-171 has been a requirement since 2017 (www.cmmc-eu.org).
There are a few issues that the DoD needs to clarify however. The principle one is how will the DoD ensure that international defence contractors comply to DFARS and get a certificate of CMMC compliance? The second is how will the +95% of SMBs that operate across DoD supply chains comply to 110 cybersecurity practices, when most don’t implement basic cyber hygiene practices.
The DoD and Prime contractors are dependent upon the international DIB for the manufacture, service and support of weapon systems. DFARS are U.S contractual requirements and should be in DoD contracts and flowed down DIB supply chains. Without the CMMC program how will the U.S affirm the cybersecurity of its weapon systems, secure defence IP and inpart national security?
As a founding member of the CMMC we understand how difficult compliance to U.S DFARS standards is. Compliance that the DoD has to affirm for national security, and suppliers are required to achieve under DFARS.
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #governance #cmmc #dfars #dib
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6998196250432962560