Supporting the European DIB maintain cyber compliance
Browsing Category
The new US administration has its work cut out for sure when it comes to cyber security, but the challenges and opportunities are recognised. To support the development of strategy and operationalise cyber risk management the Cybersecurity Solarium Commission has offered its advice through the enclosed ‘Transition book for the incoming Biden Administration’. Providing useful …
Sometimes it’s useful to go back to the beginning, to understand the reasons for the decisions which are made and why. To clarify the mission objective and reconfirm what we are doing and why we are doing it. The enclosed public report was published in 2018 by the US Government Accountability Office (GAO) to the …
On 17th December 2020 the UK Defence trade associations ADS Group and Team Defence Information (TDI), Katie Arrington the CISO for the Office of the Under Secretary of Defence for Acquisition and Sustainment and myself, with the support of the UK Embassy in Washington. Held a CMMC webinar. We introduced the US DoDs CMMC programme and …
On the 3rd of November 2020 myself, Rear Admiral William Chase (Senior Military Advisor for Cyber Policy to the Under Secretary of Defense for Policy/Deputy Principal Cyber Advisor to the Secretary), and John Weiler (Chairman of the CMMC Center of Excellence and CEO of the IT Acquisition Advisory Council) were invited to speak to the …
With all intents and purposes the Interim Final Ruling published by the Department of Defence on the 29th of September 2020 will become affective on the 30th November 2020. Requiring that contractors and subcontractors input their assessment of NIST SP 800 – 171 compliance and ultimately their CMMC certificates into the DoDs Supplier Performance Risk …
On the 29th of September 2020 the US Department of Defence (DoD) released its Interim Final Ruling (ruling) for DFARS Case D041, effective 30th November 2020. Improving the protection of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) across the DoDs Defence Industry Base (DIB) and closing gaps in the oversight and assurance of …
It won’t be long before the draft DFARS text for the US DoD CMMC programme is released for public consultation. Whilst no one knows what it will say, the MoU between the Department of Defence and the CMMC AB is in the public domain. The first round of training for CMMC provisional assessors has taken …
CMMC is being driven forward by the US DoD as the standard for Cyber Security oversight and assurance across it’s Defence Industry Base (DIB). With between 300,000 and 350,000 companies in the supply chain, ranging from SMEs up to large corporates will be impacted by the programme. 5 levels of maturity certification have been defined …