CMMC continues to move ahead, but not likely before 2024. However DFAS 2012, 7019 and 7020 are here and now and 171A compliance is a formal requirement under 7012. The big issue that I come across time and time again…
2022 was the second highest year on record for False Claims Act (FCA) recoveries according to the DoJs annual report issued last week. The report makes for an interesting read. $2.2 Billion was recovered in false Claims Settlements and judgements…
The U.S DoD CMMC program has had a bumpy ride ahead of the proposed rule change next year and implementation of CMMC into the contracting process. A significant issue for CMMC and DFARS compliance has always been creating enough assessors…
For those interested in cybersecurity specifically the U.S DoD DFARS/ CMMC program, it maybe time to consider what to do about it. Given NIST SP 800-171 has been a requirement since 2017 (www.cmmc-eu.org). There are a few issues that the…
Another interesting story from Australia that relates to cyber. The latest drone to roll of the production line at Chinas Aerospace Science and Technology Corporation (CASC) called the FH-97A looks remarkably similar to Boeings MQ-28 Ghost bat. The Ghost Bat…
One to watch as the French Defence contractor Thales reports a cyber breech. Thales is a contractor to the U.S DoD, so their defense data and controlled unclassified information (CUI) will be secure. The company will be required to comply…
Global Defense contractors have been a target for years, it’s the reason the DoD updated DFARS regulations back in 2017 following several GAO audits. But more recently NATO hacks and the public disclosure by MBDA highlight the growing problem. A…
The theft of MBDA hacked data is being investigated by NATO. NATO confidential data seems to have been stolen. One wonders if they had adhered to DFARs requirements for the protection of CUI they may have been better prepared. It’s…
Thank you for posting Chris Hughes ðŸ’ðŸ”. The House Armed Services Committee approved its version of the National Defense Authorization Act (NDAA) in June for the Fiscal Year 2023. Reading the 2023 NDAA, The House Armed Services Committee has highlighted concerns relating…
There’s talk of the DoD looking at NIST CSF profiles for the DIB. The enclosed paper helps explain why the DoD should be thinking about CSF profiles, as an appropriate step forward. FISMA is required under OMB circular A130 across…
