Seller beware: No Compliance, No Contract It’s a pleasure to publish an article in the International Security Journal (ISJ) with Georgios Alevras on…

← Back to Blog

Seller beware: No Compliance, No Contract

It’s a pleasure to publish an article in the International Security Journal (ISJ) with Georgios Alevras on the introduction of the Cybersecurity Maturity Model Certification (CMMC) by the US Department of War. That takes effect on the 10th of November 2025.

The introduction of CMMC is the latest step in a long process that the DoW has followed, requiring Global Defense Contractors to demonstrate their management of cybersecurity of US DoD contracts. Starting with the introduction of DFARS 252.204-7012 in 2016.

With CMMC being phased in over the next 3 years, it requires covered contractors to demonstrate to the DoW their cybersecurity compliance for new contract awards and options, which can include an independent certificate of compliance.

It further opens the door to DoW and Department of Justice scrutiny of DoD contractors, based upon acceptance of DFARS 7012 and NIST SP 800-171 compliance dating back as far as 2016.

@Thaddeus Dziekanowski Brian D. McCarthy Faisal Khan

Veritas GRC

#cmmc #cybersecurity #nist

https://lnkd.in/eGPTy3XE

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7392135417254498304