Call us now:
The report from CyberSheath highlights what many in the Defense industry know: CMMC compliance of the US National Defense Industrial Base is not where it should be or needs to be following 10 years of regulatory compliance. While such reports should always be taken with a modicum of factual correctness (you can’t guarantee survey results), it reflects what is already known and seen on the ground, as it relates to compliance with DFARS. It reflects my own work in the UK and EU on CMMC compliance.
The report highlights that whilst there is an increasing number of organisations submitting their SPRS score (which has been a requirement for 5 years). There is a lack of confidence (65%) in the accuracy of those scores and a lack of preparedness for CMMC certification. The confidence in SPRS scores is a concern that has been demonstrated through recent Federal lawsuits that identified significant differences between DIB SPRS submission scores and subsequent independent evaluation. On the upside, there is still a general acceptance that a legal mandate is required to secure the DIB and protect National Security.
There is a further issue for the DoW: it is likely the research does not consider compliance with the International DIB, which the US National DIB relies upon to manufacture weapons systems.
@Thaddeus Dziekanowski
@Parava Security Solutions
#cybersecurity #DIB #nationalsecurity
https://lnkd.in/e6ZbbCAp
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7496477439829655552