@Thaddeus Dziekanowski, AI has always been a risk to CMMC. Anyone using AI must ensure they can secure their systems and that CUI is not consumed by any AI models outside the firewall. @Parava Security Solutions #artificalintelligence #cmmc #cui View…
Here’s an issue many will not have considered with CMMC or ITAR compliance: the relationship between ITAR, CUI, and CMMC compliance. ITAR contains CUI, as CUI includes Controlled Technical Information, which is required to be protected under DFARS 252.204-7012. ITAR-controlled…
A reminder to the international DIB that the security of CUI has been laid out by the DoD for many years and that education and training for the identification and security of CUI is a responsibility of all covered contractors.…
One cannot underestimate the importance of the enclosed final ruling issued by the Department of Homeland Security (DHS), for the Safeguarding of Controlled Unclassified Information (CUI). The ruling defines the requirements that DHS agencies will adopt to secure CUI, similar…
On wonders if Rheinmetall has contracts covered under DoD DFARS. Would it have to report any cyber breach to the DoD, and has it implemented NIST SP 800-171, to secure DoD CUI? Ted Dziekanowski #dfars #nist800171 #cui #defense View Original…
Another interesting story from Australia that relates to cyber. The latest drone to roll of the production line at Chinas Aerospace Science and Technology Corporation (CASC) called the FH-97A looks remarkably similar to Boeings MQ-28 Ghost bat. The Ghost Bat…
The US is moving towards bringing a global, common, understanding and perspective of cyber. As the US has had a year of unprecedented change in cyber, following several attacks on Critical National Infrastructure. 2 Executive Orders focusing on Supply Chain…
If the US is playing catch-up, forging ahead with a robust legislative and regulatory enforcement regime in 2021 and 2022 to close gaps. How far behind are other Western governments? #theaugustagroup‚Â #theaugustaplan‚Â #cybersecurity‚Â #supplychainriskmanagement‚Â #cyberriskmanagement‚Â #compliance‚Â #regulatorycompliance‚Â #regulatoryoversight‚Â #esg‚Â #scrm‚Â #cscrm‚Â #cybercompliance‚Â #cyberregulation‚Â #cybergovernance‚Â #digitalcurrency‚Â #sec‚Â #cyberriskgovernance‚Â #dhs‚Â #securitiesandexchangecommission‚Â #ransomeware‚Â #csfprofiles‚Â #dhs‚Â #cisa‚Â #governance‚Â #nist‚Â #nist800171‚Â #nist80053‚Â #cui‚Â #fedramp View Original Post
For those DoD DIB contactors and subcontractors the DoD DFARS Q&A updates are worth a read. DFARS 252.204-7012 addresses ‘Safeguarding covered defense information and cyber incident reporting’ and has been a regulatory requirement since December 2017. Including the protection of…
Thanks for sharing this Regan Edens and to all the other members of the CMMC Standards working group. As a Brit getting recognised in the delivery of this is a privilege. I’ve worked with some great people and we all…
