With modular defense prototyping and production being the way forward, cybersecurity compliance becomes an increasingly important capability. Albeit for those contractors wanting to deal with the United States Department of War they have to deal with CMMC first, before they…
US Defence contractors are moving onshore as tariffs, regulations, and made in America is driving the onshore decision. One wonders what happens as CMMC starts to bite into the Global DIB. Small contractors are reporting that they are finding it…
The US DoD CMMC program is starting to come home to roost for both the DoW and SMEs, putting both between a rock and a hard place. On one hand, the DoW’s mission to protect national security is put at…
For those in the know, @Thaddeus Dziekanowski, the US already has the power to affect the EU defence industry and suppliers to the Dow and US DIB. The DoW only has to audit EU DIB compliance to DFARS 252.204-7012 under…
CMMC is a legal minefield for both assessors and those being assessed. The U.S. Department of Justice and the United States Department of War are committed to robust oversight of compliance. Those offering advice and guidance to the DIB have…
It has been said for some time that there is little understanding of how the DIB, specifically the international DIB will comply with DFARS and CMMC. The DoW doesn’t know how many contractors are affected by DFARS cyber requirements globally,…
I lead a boring life. A life that seems to identify the challenges and opportunities the DoWs global Defence Industry Base faces with cybersecurity compliance. The enclosed document is a ‘very’ important read If you are a US defence contractor.…
The US DoW CMMC program is gradually making its way into DIB contracts, and as long as the DoW stays on mission to require its contractors manage cybersecurity risk, it will continue to do so. I say ‘as long as’,…
The regulatory regime developing around the United States Department of War CMMC program is taking shape. The DoW and U.S. Department of Justice has built a framework of enforcement that has national and international reach, and is setting precedence. With…
Just wait until you have to comply with CMMC if you are a defense contractor. It makes a SoC II program look like child’s play……………..put CUI into the cloud, the vendor has to be FEDRamp moderate. Best of all, the…
