Defense primes, specifically those on U.S Capital markets face a much bigger problem than CMMC when it comes to stakeholders, that is the SEC final cyber rule. There is no doubt that the DoD is a critical customer to defense…
Ted Dziekanowski, this is why there’s so much confusion about CMMC…… CMMC vs. NIST 800-171? (one builds the other, 171 is the foundation standard)………NIST 800-171 is a framework? (nope its a standard)………… How do you determine which you need?(its not…
The Canadian government is one of the first national governments to move ahead a program to safeguard the Government of Canada’s unclassified contractual information held on defence suppliers’ networks, systems, and applications. In line with the existing and proposed U.S…
NIST is moving forward with its assessment of public comments for NIST SP 800-171 and revision to R3. A document that is influential for covered defense contractor compliance to DFARS 252.204-7012. It also provides one foundation for what could be…
One cannot underestimate the degree of change that has been proposed by the U.S Executive Office through the March release of its ONCD cyber strategy and the subsequent implementation plan (July 2023) Ted Dziekanowski. The implementation plan pulls together many…
Export controls are no doubt a strength for a country like the UK trading with the U.S. But one has to ask about cybersecurity and the role of U.S DFARS cyber regulation for the Defense Industry. Cybersecurity that is considered…
A very interesting update on a recent U.S Supreme Court Ruling ‘whether and to what extent does a defendant⬢s subjective understanding or beliefs about the lawfulness of its conduct establish â¬Åknowledge⬠sufficient to impose FCA liability’ If correct and one…
It catches on quick, does cyber regulation. Especially when you understand that it’s a national security problem. With the Canadians move ahead and implement an equivalent program to the U.S DoD DFARS/ CMMC. Setting aside $25m CND to develop the…
There is convergence of maritime and DoD cyber compliance. While the Marinette Marine Shipyard falls under CISA for CNI, it also likely falls under the DoD as a defense covered entity under DFARS 252.204-7012, 7019 and 7020. Requiring the implementation…
An interesting situation for the DoD following the recent publication of sensitive information, and a request from the defense secretary to evaluate DoD data security. With all the cybersecurity and information security regulations and programs Federal agencies and the DoD…
