{ John, Felker }

This week's podcast, CIRCIA Rulemaking: Double Incident Reporting for the DIB. Defense contractors have had cyber incident reporting obligations under DFARS clause 252.204-7012 for many years. Recently, however, CISA issued a 457-page proposed rule implementing the 2022 Cyber Incident Reporting for Critical Infrastructure Act. Unless CISA and DoD can reach an agreement, DIB contractors will have duplicative incident reporting obligations for two different agencies. Links to watch/listen are in the comments ⬇ #DIB #DOD #cyber

14

2 Comments

In the continued aftermath of Hurricane Helene and as we face future disasters, it's important to remain cyber safe! This recent piece in Dark Reading offers great advice on the heels of CISA's recent warning about hurricane-related fraud. The main takeaways? * Be wary of unexpected IT "updates" * Scrutinize charity requests * Verify outage notices from service providers * Beware of unsolicited contractor offers * Cyber criminals exploit anxiety during natural disasters, and might use legitimate-looking emails, social media pleas, or even door-to-door solicitations. Full piece here: https://lnkd.in/gP4U-pAq #CyberSecurity #Cybersafe 

5

DoD is proposing to amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement contractual requirements related to the Cybersecurity Maturity Model Certification (CMMC) 2.0 Program. Read the proposed rule here: https://hubs.li/Q02Lt0VR0 #CMMC #CMMC2.0

10

This Cybersecurity and Infrastructure Security Agency guide offers actionable steps to combat the evolving tactics of foreign malign influence operations. More resources available here: https://lnkd.in/ebM9fqFn #security #nationalsecurity #homelandsecurity #infrastructure #criticalinfrastructure #CI #resource #research #resources #highthreat #threat #threats #cybersecurity #cyber #electionsecurity

6

⏳ #CMMC becomes effective in just six days. Why is this important for defense contractors? Because - Compliance Means More Contracts. Our CMMC Readiness Signal takes minutes to complete and provides your organization with: 1️⃣ How you currently stack up against CMMC 2️⃣ Resources to address identified deficiencies 3️⃣ Actionable steps to kickstart your compliance journey Trade 5 minutes of your time to know what the next 9-12 months of your compliance journey will look like. 👉 https://hubs.ly/Q02_4GXD0

15

Next Tuesday, October 8, our CEO John Petruzzi, Jr. will join senior leaders from Lee Health, IDEMIA, and Everon at #SecuringNewGround's kickoff panel, "The View from the Top." This discussion, moderated by #SIA Board Member Brian Harrell, will cover key trends, challenges, and shifts in the global security industry. Don't miss this chance to gain valuable insights on navigating the future of security. #SNG #SecurityIndustry #Leadership #GlobalSecurity #UnlimitedTechnology

18

1 Comment

Staying aware of the latest developments in cybersecurity and compliance is critical for winning and keeping business with the DoD and other defense contractors. The federal government has just released the final CMMC program rule for public inspection, with updated 48 and 32 CFR rules that change important self-assessment standards for organizations in the defense sector. Check in with Cask and stay on top of the big changes coming up in the world of cyber compliance: https://lnkd.in/ePruDHet #Cask #caskgov #CyberConsulting #Cybersecurity #DataSecurityConsulting #CybersecurityAwarenessMonth

2

DCSA’s “Defense Counterintelligence and Security Agency Assessment and Authorization Process Manual” discusses the change management process, risk management framework, and so much more. Check it out at the link below. https://lnkd.in/eWWAA_CB #DCSA #Toolkit #Counterintelligence

9

U.S. Cyber Command wants to increase the complexity of simulations and actors within its premier training platform, integrating more multidomain scenarios into practice as malicious cyber activity grows more sophisticated and cybersecurity becomes more ingrained in military planning. https://lnkd.in/grW5fG6G

1

"NSM-22 details a new risk management cycle that requires SRMAs to identify, assess, and prioritize risk within their respective sectors and develop sector risk management plans to address those risks." https://lnkd.in/gpsR8Zgu #CriticalInfrastructure #Cybersecurity #NationalSecurity #CISAPlan #industrialcyber #icssecurity #ics

1

Vulnerability Summary for the Week of May 6, 2024 Read more on the link below. #defense #sbir #military #jointwerx #cmmc #cyber #cybersecurity @jointwerx @blackhaysgroup #GovernmentContracts #InfoSec #CyberDefense #NationalSecurity #DigitalTransformation #PublicSector #Startups #TechInnovation

2

📝Full Defense Strategy: https://hubs.ly/Q02tb2pl0 The Pentagon has introduced its inaugural strategy to advance cybersecurity within the defense industry. Announced by David McKeown, the Deputy Chief Information Officer for Cybersecurity, the initiative underscores collaboration with the U.S. defense industrial base to combat ongoing cyber threats. The strategy outlines key goals to enhance cybersecurity governance, boost defense base resilience, and improve collaborative efforts against cyber adversaries. Officials emphasize the necessity of protecting critical information and the U.S. warfighting advantage through a fortified cybersecurity posture. The approach includes evaluating compliance with cybersecurity standards, enhancing threat intelligence sharing, and developing robust responses to cyber incidents. This strategy aligns with the National Defense Strategy and aims to secure critical defense production and information integrity against malicious cyber activities. The release of this cybersecurity framework is part of broader efforts to modernize and secure the U.S. defense industrial base, ensuring it meets the challenges of a complex national security landscape.

3