A great update on cybersecurity regulations that will likely impact U.S Government contractors in 2023 from DHS, the DoD and NIST. Including updates to CMMC, FAR, NIST SP 800-171 and the potential for DHS to expand the scope of existing…
The U.S DoD CMMC program has had a bumpy ride ahead of the proposed rule change next year and implementation of CMMC into the contracting process. A significant issue for CMMC and DFARS compliance has always been creating enough assessors…
The CMMC has a few challenges in front of it that need resolving. The international DIB as yet is not considered in the figures, 80,000 is a gross understatement of the number of organisations that the DoD relies upon for…
This is worth a read if you are focusing on the U.S DoD CMMC program. I do not remember writing the comment to the OUSD A&S, but it came to my email address, so maybe I did. Comment: Does the…
The U.S DoD cyber program CMMC is one example of cyber programs working their way through to boards of defense contractors that are likely to increase legal risks. The CMMC is 1 of 4 DFARS that originate from 2017 when…
For those interested in cybersecurity specifically the U.S DoD DFARS/ CMMC program, it maybe time to consider what to do about it. Given NIST SP 800-171 has been a requirement since 2017 (www.cmmc-eu.org). There are a few issues that the…
Another interesting story from Australia that relates to cyber. The latest drone to roll of the production line at Chinas Aerospace Science and Technology Corporation (CASC) called the FH-97A looks remarkably similar to Boeings MQ-28 Ghost bat. The Ghost Bat…
One to watch as the French Defence contractor Thales reports a cyber breech. Thales is a contractor to the U.S DoD, so their defense data and controlled unclassified information (CUI) will be secure. The company will be required to comply…
Primes and their smaller tier suppliers have had challenges in complying with U.S DoD DFARS requirements for cyber. Will breaking up contracts make cyber compliance easier or harder? Could this approach enable the Navy to apply direct oversight of tiers…
It gets harder. The U.S pulled the UK and MoD up on its cybersecurity in the 2023 NDAA. So one hopes there is a cyber strategy in place to implement security across digital programs for the protection of data loss,…
