Call us now:
Last week I published the enclosed, pointing to why the United States Department of War won’t be getting rid of CMMC any time soon. The week the DoW published an update placing Phase 2 of its CMMC program on hold pending a review. There have been many column inches this week about the announcement, so of which is snake oil, some not.
But as I presented at the ADS Group Ltd Export Control Workshop this week with Karen Harbaugh Partner at law firm Squire Patton Boggs, CMMC is not going away.
However, you have to consider that the DoW is stuck between a rock and a hard place with cybersecurity risk management. On one hand, the DoW needs to deliver weapon systems quickly from an efficient supply chain; on the other hand, it needs to protect national security, which requires the protection of the IP that it is funding to create. All with the backdrop of cybersecurity risks increasing at a rate that the DoW and DIB cannot control, as it is driven by AI.
The CMMC phase II program seems to have been a step too far for the DoW and the defence industry. Requiring a rethink as to how to protect national security (various GAO reports), while enabling efficient delivery of weapon systems. At a time when cyber risk is increasing and industry has invariably not put the effort into managing.
It is a reason we wrote the Augusta Plan 5 years ago, presenting the DoD, Cyberspace Solarium Commission, and ONCD with a solution to manage cybersecurity across the DIB. Looks like we will be dusting it off.
@Parava Security Solutions
@Thaddeus Dziekanowski
#dfars #cybersecurity #nationalsecurity
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7483810109438111744