Call us now:
The release by the DoD IG of its evaluation of the DoDs process for authorising 3rd Party Organisations performing CMMC assessment is an interesting read. Highlighting the effects of not securing CUI across the DIB that could weaken national security, and need to ensure adequate oversight and assurance of the DIB in implementing cybersecurity under CMMC.1. ISO 17011 is required for accrediting C3PAO organisations and the accreditation of CMMC assessors?2. Aligning communications between the DoD CIO and DIB Cybersecurity Assessment centre is required to ensure adequate certification of C3PAOs and adequate authorisation of C3PAOs to conduct assessments.3. All C3PAOs authorisation process to be effectively implemented and assessors to be re-authorised to perform CMMC 2.0 assessments.One wonders the effect of the audit under the New Presidents Secretary of Defense.The US DoD is dependent on the international supply chain, how will oversight and assurance of the international DIB take place?@Thaddeus Dziekanowski Brian D. McCarthyVeritas GRC United States Department of Defense#cybersecurity #cyberriskmanagement #CMMC
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3AugcPost%3A7285219741600808961