Call us now:
The U.S DoD CMMC program has had a bumpy ride ahead of the proposed rule change next year and implementation of CMMC into the contracting process. A significant issue for CMMC and DFARS compliance has always been creating enough assessors to oversight, assure and issue certificates of CMMC compliance. With over 300,000 defense contractors globally, this presents a problem for CMMC, the DoD and U.S national security.
So it’s a concern that as the rule making process continues the number of registered practitioners in the Cyber AB’s marketplace has dropped from 2,637 in November 2021 to 1,899 today. However all is not lost, with the SEC cybersecurity proposal planned, EU NIS 2.0 and DORA cyber regulation moving forward. Regulating independent internal and 3rd party audit of cyber risk management compliance. There will be plenty of opportunity to oversight and assure cyber across the defense industry
We created a strategy and called it the Augusta Plan in 2021 to addresses this. (https://lnkd.in/d-wv6ezN). There is an existing pool of international auditors that are already used by public primes and defense SMBs (SME’s). Auditors that are regulated and quality assured through international professional bodies, that can be readily skilled in cyber.
A lot has changed in the past 18 months. Cyber is now considered a national security issue and cyber regulation, enforcement programs and civil and criminal convictions for cyber compliance in the U.S, EU and Australia have overtaken CMMC and the DIB. CUI cyber compliance may not be a choice for the DIB, as the ‘stick’ is slowly being moved from the DoD to other regulators. Regulators who are regulating cyber into board rooms.
Although one fears ‘Mission’ will always take precedence over regulation?
Ted Dziekanowski
#cybersecurity #cyberriskmanagement #cyberregulation #theaugustagroup #CMMC #dfars
View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7006552265616412672