The theft of MBDA hacked data is being investigated by NATO. NATO confidential data seems to have been stolen. One wonders if they had adhered to DFARs requirements for the protection of CUI they may have been better prepared. It’s…
The U.S. DoD CMMC program continues on its course for implementation, expected to be formalized into DoD contracts by the middle of 2023. The organisation charged with developing the assessment program for the DoD, the Cyber (formally CMMC) Accreditation Body…
The DoDs CMMC timeline is starting to firm up. The recent memo to DoD procurement officers has reaffirmed the need to assess SPRS submissions ahead of existing contracture obligations under DFARS 252.204-7012, 7019 and 7020 and the penalties for non-conformance.…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
Ted Dziekanowski DFARS 252.204-7012 says that organisations that use cloud must be equivalent to FEDRAMP moderate and those that use cloud computing services that are part of an Information Technology service or system operated on behalf of the Government must…
In my view the DoD is laying the ground work for the CMMC program. Reaffirming DFARS clause 252.204-7012, the implementation of NIST SP 800-171 at a minimum, and the penalties for non compliance. Penalties that Include withholding progress payments; foregoing…
One step at a time for U.S. DoD DIB contractors. As the DoD publishes a memo reminding contracting officers to enforce penalties for contractors that fail to comply with DFARS clause 252.204-7012 Ted Dziekanowski. That alongside DFARS 252.204-7019 and DFARS…
An important read. Federal Cybersecurity oversight of the U.S. DoD DIB makes a broader comeback in the latest draft of the 2023 NDAA. As the House Armed Services Subcommittee on Cyber, Innovative Technologies, and Information Systems voted to approve its…
The CMMC AB has rebranded itself at the ‘Cyber Accreditation Body’. A move that may get some cybersecurity accreditation bodies in the industry interested, especially if it plans to spin out its cybersecurity training. One wonders what will happen when…
Complex products such as the F35 lend themselves to buy Allied and it makes complete sense to work with Allied nations on the design. manufacture and sales of weapon systems. As the current Ukraine crisis is demonstrating. BUT, what do…
