The alert from CISA this week that Russian State Sponsored Cyber Actors have obtained US defense information and technology, highlights the

← Back to Blog

The alert from CISA this week that Russian State Sponsored Cyber Actors have obtained US defense information and technology, highlights the challenges that the US DIB faces with securing its supply chains. With threat actors gaining access to sensitive unclassified information and proprietary export controlled technology, in some case maintaining persistence for at least six months.

The alert is comprehensive and demonstrates why programs such as the DoDs DFARS 252.204-7012 and its planned CMMC program are important in implementing cybersecurity practices across the DIB. One would expect questions to be raised about DIB cybersecurity at appropriate Senate committees over the coming weeks. No doubt raising concerns about DIB cybersecurity at a time of heightened tensions between East and West.

The remedial actions in the alert while not extensive, are comprehensive for a smaller defence contractors to implement. They highlight the cybersecurity challenges faced by the DIB from Prime contractors through to the domestic and international contractors and subcontractors the DoD relies upon to manufacture weapon systems.

It may also provide information to the DoJ following its October 2021 announcement of its Civil cyber fraud initiative and False Claims Act (FCA). With cyber attacks reported under DFARS, how did the compromises take place and were adequate cyber protections in place as required under NIST SP 800-171?

Ted Dziekanowski Brian McCarthy Jason Spezzano

#theaugustaplan‚ #cybersecurity‚ #cyberriskmanagement‚ #regulatorycompliance‚ #regulatoryoversight‚ #cybercompliance‚ #cyberregulation‚ #cybergovernance‚ #cyberriskgovernance‚ #ransomeware‚ #governance‚ #nist‚ #cyberinsurance‚ #insurance‚ #defence‚ #defense‚ #sec

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A6899998548440485888

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags