Showing 14 Result(s)
US Department of Defence

How will CMMC and DAM data be used by the Department of Defence for Contract awards?

With all intents and purposes the Interim Final Ruling published by the Department of Defence on the 29th of September 2020 will become affective on the 30th November 2020.  Requiring that contractors and subcontractors input their assessment of NIST SP 800 – 171 compliance and ultimately their CMMC certificates into the DoDs Supplier Performance Risk …

DFARS Interim Final Ruling: A complex road ahead for the international DIB and the deployment, oversight and assurance of NIST SP 800 – 171 and CMMC

On the 29th of September 2020 the US Department of Defence (DoD) released its Interim Final Ruling (ruling) for DFARS Case D041, effective 30th November 2020.  Improving the protection of Controlled Unclassified Information (CUI) and Federal Contract Information (FCI) across the DoDs Defence Industry Base (DIB) and closing gaps in the oversight and assurance of …

CMMC CoE and EU

Cybersecurity Maturity Model Certification (CMMC). Challenges and opportunities for contractors in complying with the US DoDs requirements

It won’t be long before the draft DFARS text for the US DoD CMMC programme is released for public consultation.  Whilst no one knows what it will say, the MoU between the Department of Defence and the CMMC AB is in the public domain.  The first round of training for CMMC provisional assessors has taken …

DFARS D041 balancing act

Cyber regulation and compliance is a rapidly developing field

Governments need to show stronger leadership for cyber regulation. “The government needs to get involved… there will be more regulation of the tech sector”, Bill Gates, co-founder of Microsoft, said in October 2019 to the Bloomberg news agency.  A bit earlier, Facebook founder and CEO Mark Zuckerberg publicly voiced the same idea.  The regulatory road in the tech space will be …