@Thaddeus Dziekanowski, when we wrote the Augusta plan in 2021 we raised several concerns that would inhibit the deployment of the program.

← Back to Blog

@Thaddeus Dziekanowski, when we wrote the Augusta plan in 2021 we raised several concerns that would inhibit the deployment of the program. Presenting these the the DoD, Cyberspace Commission and ONCD, thanks to Bob Dix.1. There’s not enough assessors to evaluate compliance across DIB companies. The DoD could use CPAs and other audit firms to close the short fall nationally and internationally (see SoX)2. U.S defense data is consumed by the international DIB. There needs to be an agree approach to address harmonisation of cyber standards. (CSF)3. SMEs cannot afford to implement CMMC. Tax breaks could be issued for both SMEs and audit firms to develop the resources to implement cybersecurity and oversight CMMC.4. The DoD and DIB to control the design, storage and transmission of CUI and secure defense IP. Prime contractor to manage the IP required to design and build DoD weapon systems.5. Risk based approach to the management of cyber, based upon a weapon a systems Bill of Materials.Augusta plan 1: https://lnkd.in/d-wv6ezNAugusta plan 2: https://lnkd.in/d3CCkrJmAugusta plan 3: https://lnkd.in/enfYu2nzBrian D. McCarthy Faisal KhanVeritas GRC#cybersecurity #cyberriskmanagement

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7265270893713534976