There are a couple of pointers from the Federal Government that indicate the United States Department of War CMMC program is not going away. This is one of them. The DoW is updating its policies and updating Section 32 of…
On the 16th of July, I am going to address some of the issues UK DIB contractors face with CMMC compliance that include. 1. Location-Blind Scope — same CMMC rules apply to any organisation handling CUI/FCI in the US DoD…
I do not know how accurate the costs for CMMC compliance are; that depends on maturity, resources, efficiency, and quality. But I do know two things: that the cost of cyber compliance will vary, probably from the £100,000s to $1.000,000s,…
The more we hear about CMMC from official United States Department of War Channels, the harder it is to deny the deyment of CMMC. The international DIB is clearly in the firing line for CMMC compliance. With a planned defense…
Here’s a thought for the international contractors that either support, or wish to support the DoD on their national territory. If the DoD, specifically the Army Corps of Engineers, or Defense Logistics Agency issue the contract. You may wish to…
A great opportunity for the UK defence industry and the UK defence supply chain. Those that support the Apache will undoubtedly be required to demonstrate CMMC Level 2 and maybe Level 3, and in the case of the MoD under…
If correct, then L3 Harris joins the list of Defense Primes that have set out their expectations of supply chains to address CMMC compliance. A bit like an old record, I will raise the question of how the international DIB…
Where does the United States Department of Wars CMMC program sit within the international trade conversation? It’s widely reported that there aren’t enough qualified CMMC assessors to evaluate and issue a Level 2 compliance certificate. That the DoW will start…
Thank you Rachel V. Rose, JD, MBA, one wonders the impact of whistleblower programs on the United States Department of War DFARS programs and their global reach? #cmmc #dfars #cybersecurity View Original Post
A perspective on CMMC compliance that highlights why CMMC and cybersecurity compliance require organisational discipline, it requires leadership, and it requires governance. As with all compliance programs, CMMC compliance is not a point-in-time. In fact, for many covered companies, compliance…
