The US Defence industry is starting to feel the effects of the United States Department of War (DoW) CMMC cyber requirements as they started their…

← Back to Blog

The US Defence industry is starting to feel the effects of the United States Department of War (DoW) CMMC cyber requirements as they started their deployment, from November 10th 2025. Now the GSA (General Services Administration) is getting in on the act, as it rolls out cybersecurity requirements for the protection of CUI following a similar approach to that of the DoW, with a splash of FISMA.

The New requirements for the protection of CUI apply immediately to new contracts, at the contracting officer’s discretion. Requiring contractors to implement NIST SP 800-171 and certain 172 controls. Further still, the GSA program requires the adoption of Risk Management Framework practices (In Line with FISMA).

https://lnkd.in/eVaVEDqU

There is no doubt that the US Federal Government is pushing ahead with cybersecurity as part of the contracting process.

Like the CMMC program, the US has just witnessed the deployment of one of the largest cybersecurity programs to affect the Federal funding process. As the GSA and DoW cyber programs require compliance.

No compliance, no contract.

@Thaddeus Dziekanowski Brian D. McCarthy

@Parava Security Solutions

#cybersecurity #nationalsecurity

https://lnkd.in/eRDM3AJ5

View Original Post
https://www.linkedin.com/feed/update/urn%3Ali%3Ashare%3A7423308927146274816

Categories

Cybersecurity, National Security & Defence, Regulation & Compliance

Tags