Timothy Powers, PMP

DoD Contractors: FCI vs CUI We discuss CMMC Compliance requirements, implementing NIST 800-171 110 controls to meet CMMC Level 1 and prepare for CMMC Level 2 assessment.

2

1 Comment

LMI leverages considerable experience across DoD in optimizing and updating internal controls and remediating audit findings to work with organizations. In keeping with the principles of LMI’s performance optimization line of business, our teams of subject matter experts optimize key controls for consistent, compliant, and effective operations. 👉 Have a question or concern related to your organization’s property tracking processes and related internal controls? Learn more about LMI’s steps for optimizing property tracking and connect with LMI subject matter experts today: https://hubs.ly/Q02Pdfhf0 // #PeoplePoweringPossible #Defense #Audit //

11

1 Comment

The Cybersecurity Maturity Model Certification (CMMC) rule established to verify that contractors have implemented required security controls to protect federal contract information (FCI) and controlled unclassified information (CUI). Learn requirements and next steps. https://lnkd.in/g_sTgAKy. Thanks for your insight, Jason Oksenhendler, CISM, CAP, CCSK and Devin Osterhout. #Cybersecurity #CMMC

3

Dave DiEugenio, PMP, CISM, ITIL on supporting a dispersed group of Marine Corps Recruiting recruiters - "Network availability, security and reliability is as important as electricity and heat." Our panel on simplifying software management with Richard Grabowski, Dave DiEugenio and John Schneider just wrapped at Adapt 2024! #AxoniusFederal #FederalCybersecurity #FederalIT #DefenseTech #Adapt2024 #AxoniusAdapt2024

19

4 Comments

Enhanced Visibility & Hardening Guidance for Communications Infrastructure CISA has released actionable guidance to help organizations bolster the security and resilience of critical communications infrastructure. * Enhanced Network Visibility: Tools and strategies to monitor and detect potential vulnerabilities. * Hardening Measures: Practical steps to fortify systems against evolving threats. * Proactive Defense: Best practices for mitigating risks to critical infrastructure. Secure your communications systems today and stay ahead of potential threats. Explore the full guidance here: https://lnkd.in/gADKtUPf #Cybersecurity #InfrastructureSecurity #CISA #Resilience

30

This newsletter is out. This week: DoD has posted the proposed new Cybersecurity Maturity Model Certification (CMMC) regulatory language and process for contractors to comply with the new requirements. CMMC compliance will be required at time of award. Heidi Shyu's office has announced the second annual Technology Readiness Experimentation (TREX) event, to be held Aug. 19-28 at Camp Atterbury, Indiana. Press will be allowed at the event on August 27, so look for stories coming out in a few weeks. TREX supports the Rapid Defense Experimentation Reserve (RDER) initiative with tactical scenario demonstrations. The next tranche of Replicator capabilities will include Anduril's large displacement unmanned undersea vessel (Dive-LD). Anduril has made news for betting big on industrial capacity, with a factory in Rhode Island underway to make more of this UUV and the recently announced megafactory Arsenal-1, intended to be capable of producing "tens of thousands of autonomous vehicles and weapons." The Space Force is continuing work with international partners to craft a strategy aimed at strengthening the space supply chain. Our top story looks at how two recent contracts show improvement at how DoD procures new technology, with this unsurprising revelation: success at getting new tech into the hands of warfighters requires understanding of military needs, the technology itself, AND the acquisition process. And in ARP news, we're excited to share news of a collaboration between students in the Department of Defense Management and the Navy's Force Resilience Office. Read the full newsletter here: https://lnkd.in/dziFJEE #govcon #procurement #defenseinnovation #defenseindustry

3

3 Comments

The Defense Department is actively working on plans to build cybersecurity requirements for the defense industrial base into defense contracts as part of its Cybersecurity Maturity Model Certification https://ow.ly/EA4V50TNGPJ #DoD #cybersecurity

1

Join us on Wednesday, May 29th at 8:30 AM to discover how CERT Ukraine and CISA work together to combat cyber threats! Limited tickets available - act fast! Link in bio for more details and to get tickets. #CERTUkraine #CISA #CyberDefense #Collaboration #CyberSecurity.

12

What does CMMC entail? CMMC serves as a validation of a contractor's cybersecurity posture. Mandatory for all DoD contractors and subcontractors handling CUI, CMMC compliance mandates adherence to NIST SP 800-171 controls, verified through third-party certification. Achieving CMMC compliance is not only crucial for securing contracts with the DoD but also for demonstrating your commitment to safeguarding sensitive data. https://cmmc.smeinc.net/ #IYKYK #CMMC #DoD #Cybersecurity #SMEInc

1

Platform One is not just about the work that we do but the work that we make capable. 🤝 Vulcan’s team of only 6 people had to create a “pay by the seat” licensing model to help DoD customers adopt #DevSecOps and Agile practices as a part of the cloud-centric vision within DISA J9 Hosting and Compute (J9 HaC). By utilizing Platform One’s Big Bang and Iron bank the Vulcan team was able to create a low cost – best value solution for DoD customers who wanted an enterprise solution without feeling the major budget constraints that can impact the ability to deploy and get tools to the warfighters. 🎖 Platform One can be effectively utilized by a team of just 6 people, imagine what we could do for you! Click here to contact our customer success team to do a tech fit today: https://lnkd.in/giyuPEzG Read more about this incredible accomplishment here: https://lnkd.in/gaCP4ucu #PlatformOne #MissionObsessed #Casestudy #Militarytech #Software #Kubernetes #Security #Airforce

102

1 Comment

Defense Acquisition University (DAU) has two upcoming webinars you’ll want to add to your calendars. The first will be a primer on Supply Chain Risk Management (SCRM) happening on Dec. 12, and the second will cover basic cyber hygiene on Dec. 16. To register for the Dec. 12 SCRM webinar, visit https://buff.ly/41q3Clr For the Dec. 16 cyber hygiene webinar, visit https://buff.ly/4ifeJnf #CyberSecurity #SupplyChainRiskManagement #GovernmentContractor #GovernmentContracting #NAPEX #APEXAccelerators

18

Tap below to learn more about the compliance requirements chosen vendors of DoD contractors must meet in the wake of the new CMMC Proposed Rule, depending on the services provided. 📝: Timothy Walsh

10

The Department of Defense (DoD) recently published a proposed rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate contractual requirements pertaining to the proposed Cybersecurity Maturity Model Certification (CMMC) 2.0 program. The new proposed rule is a significant development in the path toward finalizing the CMMC 2.0 program. Based on its current trajectory, the likelihood of a finalized CMMC 2.0 going into effect in 2025 is quite high. Beth Burgin Waller and Patrick Austin, members of the Woods Rogers Cybersecurity & Data Privacy practice group, provide an overview of the key provisions contained in the proposed DFARS rule. #WoodsRogers #cybersecurity #DOD https://bit.ly/3XghgFi

4

Download OSIbeyond's DoD Contractor’s Guide to CMMC 2.0 Compliance to learn the steps DoD contractors need to take in order to prepare for, achieve, and maintain CMMC 2.0 compliance. https://lnkd.in/dtqNsHTh #CMMC #DoDContractors #CMMCCompliance

7

Download OSIbeyond's DoD Contractor’s Guide to CMMC 2.0 Compliance to learn the steps DoD contractors need to take in order to prepare for, achieve, and maintain CMMC 2.0 compliance. https://lnkd.in/dtqNsHTh #CMMC #DoD #DoDContractor #GovCon #Manufacturer

7

Bad security compliance process: - Pull engineers off development to interpret DISA requirements - Start thinking about security after product is built - Create documentation from scratch - Spend countless months figuring out requirements - Hope your guides meet federal standards Good security compliance process: - Let engineers focus on core development - Build security in from day one - Use pre-approved DISA templates - Reduce the overall time spent working towards compliance - Provide actionable, step-by-step guides Plus, here's what I've learned after 10+ years in DOD compliance… The companies that succeed treat security as a feature, not an afterthought. What would you add to the 'good' list?

1