Call us now:
One wonders what strategy the DoW and DoJ will adopt to enforce contract compliance with the US DoW DFARS over the coming weeks and months? As defence contractors start to see DFARS 252.204-7021 clauses added to contracts that require them to demonstrate CMMC level 1, 2, and 3 compliance.
One thing is clear: the foundation for CMMC compliance, that is DFARS 252.204-7012, has been required for nearly 10 years. Covered contractors cannot avoid the fact that they have had to self-assess compliance from the time they sign a contract with a covered supplier. As covered, suppliers are required to flow down DFARS 7012 with CUI. This includes the international DIB.
As was recently put by law firm Holland & Knight LLP, the affirmation trap is waiting for companies that should have complied with DFARS, and are now required to comply with CMMC, or lose the opportunity to be awarded a DoW contract.
The US DoJ has been waiting in the wings to challenge companies’ compliance with DFARS. Some companies have to contend with nearly 10 years of self-assessment, and now face the prospect of requiring a certificate of compliance with NIST SP 800-171.
https://lnkd.in/em_H_NFv
@Thaddeus Dziekanowski Brian D. McCarthy
@Parava Security Solutions
#cybersecurity #cyberriskmanagement
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7425450971733864449