Call us now:
The defence industry is starting to see the effects of DFARS cybersecurity requirements across United States Department of War defence procurement. Effects that create opportunities and issues for both the DoW and defence contractors. As the enclosed contract solicitation on sam.gov demonstrates.
The contract solicitation to supply the Oregon Air National Guard requires contractors to have conditional or Final CMMC Level 2 certification. For those who understand the DoW CMMC rollout program, formal CMMC certification starts in November 2026, or at the DoW’s discretion from November 2025. Note the rationale for a CMMC certificate.
Why do such examples matter? How will the international DIB, that the DoW relies upon and that receives funding from the DoW, demonstrate CMMC compliance, let alone certification?
CMMC is a competitive differentiator, but, like all regulations, waiting until it matters is not wise. CMMC self-assessment and certification are being included in defence contracts, and it takes 6 – 12 months to assure NIST SP 800-171 compliance. There’s the unfortunate problem of having to confirm historic contractual compliance.
@Thaddeus Dziekanowski
@Parava Security Solutions
#cybersecurity #cmmc
https://lnkd.in/e6fURXG6
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7433069075133767680