My understanding is that DoDi 8510.01 and DoDi 5000.90 enable the DoD to implement FISMA, the RMF and for a Purchase Officer(PO) to assess risk before an ATO is issued. () That would imply that a PO has the scope…
From June, an interesting article discussing the role of the Defence Industry Base (DIB) in developing U.S national and international Interests. It describes the current challenges faced by the DIB including the declining number of companies, trade controls and loop…
The U.S. DoD CMMC program continues on its course for implementation, expected to be formalized into DoD contracts by the middle of 2023. The organisation charged with developing the assessment program for the DoD, the Cyber (formally CMMC) Accreditation Body…
An important audit from the U.S Government Accountability Office (GAO), ‘Defense Industry Base – DOD Should Take Actions to Strengthen Its Risk Mitigation Approach’. It is one of many recent GAO reports that articulate the risks posed by the DIB…
Ted Dziekanowski DFARS 252.204-7012 says that organisations that use cloud must be equivalent to FEDRAMP moderate and those that use cloud computing services that are part of an Information Technology service or system operated on behalf of the Government must…
An important read. Federal Cybersecurity oversight of the U.S. DoD DIB makes a broader comeback in the latest draft of the 2023 NDAA. As the House Armed Services Subcommittee on Cyber, Innovative Technologies, and Information Systems voted to approve its…
The U.S. has plenty of cybersecurity and risk management standards, that are aligned to FISMA and OMB A-130. FISMA has been adopted by he DoD under DoDI 8510.01 with derivatives across DoD branches and NIST SP 800-30, 800-37 and 800-39…
For those National and International DIB contractors this report is an interesting read. The DoD is undergoing its own assessment of cybersecurity compliance, for the oversight and assurance of Controlled Unclassified Information (CUI). Making progress in complying with FISMA (DoDi…
Complex products such as the F35 lend themselves to buy Allied and it makes complete sense to work with Allied nations on the design. manufacture and sales of weapon systems. As the current Ukraine crisis is demonstrating. BUT, what do…
This week the U.K. MoD released its cyber resilience strategy, a vision outlining its cyber plans for defence. It comes at a time when cyber regulation and plans of partner nations are more advanced than those of the U.K. The…
