A proposed DFARS 252.204-7021 or CMMC as its become known rule, has been published on the Federal Register. Meaning covered defense contractors globally must 1. Have a current CMMC certificate or self-assessment at the requisite CMMC level, or higher. 2.…
Cybersecurity risk management is a global problem. @Thaddeus Dziekanowski Brian D. McCarthy Rachel V. Rose, JD, MBA Veritas GRC #cybersecurity #cyberriskmanagement #cyberinsurance #defense View Original Post
The legal risks associated with cybersecurity risk management. In this case Mastagni Holstedt a California law firm is suing its MSP and its owners following a cyber attack. That effected the law firm in February 2023, forcing it to pay…
Last week the U.S DoD issued its Defense Industry Base (DIB) cybersecurity strategy. It makes for an interesting read and raises many questions for defense contactors and highlights the complexity of cybersecurity risk management between the DoD and DIB. The…
Last week the DoD released its cyber strategy for the Defense Industry base (DIB). The strategy days little that is not already known, but raises many questions namely why now? The DoD has been covered by Federal Cybersecurity requirements under…
Is the DoD just skirting around the edges of cybersecurity risk management? The DoD has all the tools it needs to enforce cybersecurity risk management across the DIB, its just chosen not to enforce them. DFARS 252.204-7012 has been in…
An article that raises the issues the DoD continues to have with cybersecurity, while being required to manage and report cyber through successive NDAAs and successive governments. The U.S DoD and other security agencies have reported significant issues with cybersecurity…
The UK Government has £880k (excluding VAT) to spend on proposals to help reduce cyber risk across defense. I have a proposal for the MoD to manage cyber risk. 1. Oversight and implement DFARS 252.204-7012. The DoD cybersecurity standard that…
Security is a global, regional and national challenge. One where being apart of the ‘club’ is important and where collaboration, information sharing and strategic alignment is without a doubt a top priority. As demonstrated with the enclosed, the EU is…
Export controls are no doubt a strength for a country like the UK trading with the U.S. But one has to ask about cybersecurity and the role of U.S DFARS cyber regulation for the Defense Industry. Cybersecurity that is considered…
