Here’s an issue many will not have considered with CMMC or ITAR compliance: the relationship between ITAR, CUI, and CMMC compliance. ITAR contains CUI, as CUI includes Controlled Technical Information, which is required to be protected under DFARS 252.204-7012. ITAR-controlled…
A reminder to the international DIB that the security of CUI has been laid out by the DoD for many years and that education and training for the identification and security of CUI is a responsibility of all covered contractors.…
Here’s an interesting observation about cybersecurity regulatory compliance that applies to Public DIB contractors. Do investors price in regulatory compliance to share prices? We know that cyber regulatory compliance affects downside risk as cyber maturity increasingly signals management quality, and…
Thank you for posting Rachel V. Rose, JD, MBA, a timely demonstration that US Federal Government, in this case, the Department of Health and Human Services, takes cybersecurity risk management seriously. With HHS reaching settlements across several HIPAA enforcement actions.…
I do not know how accurate the costs for CMMC compliance are; that depends on maturity, resources, efficiency, and quality. But I do know two things: that the cost of cyber compliance will vary, probably from the £100,000s to $1.000,000s,…
One wonders how the Australian DIB (and international DIB for that matter) that contracts with the US DoD has and will comply with their obligations under DFARS 252.204-7012 and DFARS 252.204-7021. For all suppliers across all tiers of the Aukus…
and it doesn’t include the international DIB. @Parava Security Solutions #cmmc #dib #cybersecurity View Original Post
David Koran, thank you for posting your observations of CMMC Frequently Asked Questions and F-Q5. Covered entities must understand the basics of CMMC compliance, while keeping abreast with the continuous updates, feedback, and changes in CMMC compliance provided by the…
It’s taken some time for me to catch up on things CMMC. But here’s an interesting solicitation published mid-April 2026 for a sole-sourced contract between the US Naval Air Warfare Center Weapons Division and Raytheon What is interesting is the…
The more we hear about CMMC from official United States Department of War Channels, the harder it is to deny the deyment of CMMC. The international DIB is clearly in the firing line for CMMC compliance. With a planned defense…
