Is the DoD just skirting around the edges of cybersecurity risk management?

← Back to Blog

Is the DoD just skirting around the edges of cybersecurity risk management? The DoD has all the tools it needs to enforce cybersecurity risk management across the DIB, its just chosen not to enforce them. DFARS 252.204-7012 has been in place since 2017, forming part of Prime contractors obligations and those of their supply chains for 7 years to implement cybersecurity for Controlled Unclassified Information.

The DoD has itself had to comply in part to FISMA and adopt NIST SP 800-37, and the NIST CSF. It has itself implemented DoDi 8510.01, Risk Management Framework For DoD Systems, since July 2022. The DoD has all the tools at its disposal to require the defense industry to implement and manage cybersecurity. To develop and implement a cybersecurity strategy to oversea and assure the management of its budget and the delivery of cybersecurity across all the weapon systems it acquires.

The DoD can influence the defensive cybersecurity risk management of 100,000s of companies globally and protect the Intellectual Property it creates.

@Thaddeus Dziekanowski Brian D. McCarthy

Veritas GRC

Office of the National Cyber Director, The White House, Federal Bar Association, United States Department of Defense

#cybersecurity #cyberriskmanagement #cyberinsurance #defense

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7180526885410353152