The CISA website has plenty of CSF profiles and an implementation guide for CSF profiles for the Defence Industry Base (DIB). CSF profiles are required by FISMA (and the DoD – DoDi 8510.01) and implemented by the SEC. I wonder…
Ted Dziekanowski DFARS 252.204-7012 says that organisations that use cloud must be equivalent to FEDRAMP moderate and those that use cloud computing services that are part of an Information Technology service or system operated on behalf of the Government must…
In my view the DoD is laying the ground work for the CMMC program. Reaffirming DFARS clause 252.204-7012, the implementation of NIST SP 800-171 at a minimum, and the penalties for non compliance. Penalties that Include withholding progress payments; foregoing…
One step at a time for U.S. DoD DIB contractors. As the DoD publishes a memo reminding contracting officers to enforce penalties for contractors that fail to comply with DFARS clause 252.204-7012 Ted Dziekanowski. That alongside DFARS 252.204-7019 and DFARS…
For those National and International DIB contractors this report is an interesting read. The DoD is undergoing its own assessment of cybersecurity compliance, for the oversight and assurance of Controlled Unclassified Information (CUI). Making progress in complying with FISMA (DoDi…
Complex products such as the F35 lend themselves to buy Allied and it makes complete sense to work with Allied nations on the design. manufacture and sales of weapon systems. As the current Ukraine crisis is demonstrating. BUT, what do…
This week the U.K. MoD released its cyber resilience strategy, a vision outlining its cyber plans for defence. It comes at a time when cyber regulation and plans of partner nations are more advanced than those of the U.K. The…
The right models will be key to cybersecurity risk management, if the SEC moves ahead with its proposals for cybersecurity, the US DoD CMMC program is deployed, defence contractors continue with their DFARS compliance and the DoJ continues with their…
An interesting question Ted Dziekanowski. If the SEC presses ahead with cybersecurity risk management proposals as indicated, what will be the impact on public defense contractors in the case of DoD DFARS regulations? With the potential of having to report…
