Call us now:
Thank you Armando Seay. ITAR and CUI are interchangeable; CUI has already been transferred. CUI has been shared (F35), and every other weapon system that the International DIB contributes towards or sustainment contracts are delivered.
With the introduction of CMMC, the question that remains is what and how the international DIB will deal with it. As @Thaddeus Dziekanowski and I wrote back in 2021, and incidentally presented to the DoD, Cyberspace Solarium Commission, and White House ONCD and UK government, the DoD and international DIB have to work out how the international DIB will certify to CMMC.
There aren’t enough assessors; those that exist may not get security clearance; many don’t have the knowledge, skills, or experience to assess the DIB. Having been a counsel-appointed cyber expert, most assessors won’t be prepared to face the legal implications, and many contractors are playing catch-up on NIST 171 implementation (AKA False Claims Act).
Brian D. McCarthy
Veritas GRC
#cybersecurity #cmmc
https://lnkd.in/d-wv6ezN
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7390446042598723584