Scott Edwards

DoD Contractors: FCI vs CUI We discuss CMMC Compliance requirements, implementing NIST 800-171 110 controls to meet CMMC Level 1 and prepare for CMMC Level 2 assessment.

2

1 Comment

LMI leverages considerable experience across DoD in optimizing and updating internal controls and remediating audit findings to work with organizations. In keeping with the principles of LMI’s performance optimization line of business, our teams of subject matter experts optimize key controls for consistent, compliant, and effective operations. 👉 Have a question or concern related to your organization’s property tracking processes and related internal controls? Learn more about LMI’s steps for optimizing property tracking and connect with LMI subject matter experts today: https://hubs.ly/Q02Pdfhf0 // #PeoplePoweringPossible #Defense #Audit //

11

1 Comment

You can dive deeper into the implications of this announcement and learn how to achieve 32 CFR compliance for CMMC by checking out this short video that we posted on the Kiteworks LinkedIn channel. https://lnkd.in/gPmm6wX3. #CMMC #DIB #DefenseContractors #32CFRCompliance Kiteworks

1

1 Comment

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/dhj2iTT9 #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

3

A few things to digest here: 1. Thank you Robert Metzger for volunteering all of your time to help make things happen. 2. A tax rebate or reduction is only available AFTER the fact, so that's not going to help much at all. Small businesses live or die on cash flow. 3. Any kind of loan - with interest - doesn't help the business, it just puts it further in debt. 4. Even if a business goes through with all of this, there is NO GUARANTEE they will ever win or renew a DiB contract. Ideas: Why not just have the government front the cost, and then deduct it from the payment? This would incentivize the government and prime contractors to use many different sub-contractors. Why not just use DIBCAC assessors to do the third party attestations? There is no training necessary.

5

1 Comment

The Department of Defense (DOD) has officially released the final rule establishing the Cybersecurity Maturity Model Certification (CMMC) Program. Effective December 16, 2024, the DoD will now require all defense contractors and subcontractors to implement and maintain specified security measures to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUl). Valiant-X understands how critical these new requirements are to your business and future growth. Contracting officers (KOs) will not be able to award new contracts, extend performance periods, or exercise options unless the company (otherwise referred to as the DIB) have a valid CMMC certification at the required level (I, II, or III). These requirements will also apply to subcontractors (SubK), current and future, ensuring that your entire supply chain is compliant from top to bottom. Book your Consultation with us now to get compliant for certification! Valiant-X Enterprise Corporation Yves Vazquez John Melcher Annette Melcher (Eichenberger), MBA, PMP Jacob Garcia Jeremy R. Thomas #cmmc #doditconsulting #cloudsolutions #dodcompliance #cybersecurity #innovativetechnology #skillsbridge #cloudarchitects #governmentcontracting #professionalservices #governmentsolutions #innovativesolutions #vxe #valiantxenterprise #cto #enterpriseit

6

Please join Dcode for a GovChat with Steve Wallace, CTO and leader of the Emerging Technology Directorate at Defense Information Systems Agency! Steve is an engaging and informative speaker who will make it well worth your time. Register at the link below! 🗓️ On Thursday, October 17, at 2-3 p.m. ET, we’ll talk with Steve and delve into the critical cybersecurity challenges facing the Department of Defense, including: 💡 The importance of commercial technology in advancing DISA’s cybersecurity posture and digital capabilities. 💡 The challenges facing the Department as a result of emerging cyber threats. 💡 Key priorities for DISA as it leads digital transformation across the DoD, including enhancing cybersecurity resilience and accelerating innovation. Register here: https://lnkd.in/egKEEZyy #DigitalTransformation #DISA #Cybersecurity #DefenseTech Tait Ryssdal William Ross Petuchov

6

Does being compliant with CMMC really matter right now? A small fraction of defense contractors have already done the hard work to prepare for these critical requirements to protect our national defense infrastructure. For the remaining ~200,000 contractors, it is a risk management decision. Can you afford to lose contracts with those clauses? Would your business stay afloat without that government customer? Could waiting hurt your business and bottom line? We have seen companies lose HUGE contracts that resulted in having to layoff people who have been there for 20 years. This stuff has a huge impact. Don’t think that you have to do it all at once! You just need to start with a solid plan and a budget. When you do this, you are ahead of the majority and will be on your way to a competitive advantage before you know it. The hardest part is getting started. Feeling stuck? Valor Cybersecurity is here to help you get ready. #cybersecurity #defense #compliance #dod

6

The Deltek-sponsored "Importance of FedRAMP for Defense Contractors" Webinar with Michael Greenman is now available On-Demand. If you missed this insightful session on navigating FedRAMP compliance and its impact on government contractors, now’s your chance to catch up. Watch the session here: https://lnkd.in/gmxJ5gKz ___ #GCWFedRAMP #FedRAMP

4

Platform One is not just about the work that we do but the work that we make capable. 🤝 Vulcan’s team of only 6 people had to create a “pay by the seat” licensing model to help DoD customers adopt #DevSecOps and Agile practices as a part of the cloud-centric vision within DISA J9 Hosting and Compute (J9 HaC). By utilizing Platform One’s Big Bang and Iron bank the Vulcan team was able to create a low cost – best value solution for DoD customers who wanted an enterprise solution without feeling the major budget constraints that can impact the ability to deploy and get tools to the warfighters. 🎖 Platform One can be effectively utilized by a team of just 6 people, imagine what we could do for you! Click here to contact our customer success team to do a tech fit today: https://lnkd.in/giyuPEzG Read more about this incredible accomplishment here: https://lnkd.in/gaCP4ucu #PlatformOne #MissionObsessed #Casestudy #Militarytech #Software #Kubernetes #Security #Airforce

102

1 Comment

🤔 Well said Help Net Security “The tool excels in distributing software across various secure development settings, including edge and embedded systems, secure clouds, data centers, and local setups.” “Zarf simplifies deployments into a single compressed file containing everything your app needs. It can be installed without an internet connection. Its declarative approach ensures consistent application deployment every time. The tool can also incorporate legacy code into modern DevSecOps environments, facilitating deployment.” https://lnkd.in/eRwgmKwG

57

2 Comments

🚀 Major Milestone for Army Software Modernization! 🚀 On the heels of the proposed CMMC Level 2 readiness gate criteria requirement on the massive Army MAPS IDIQ opportunity from yesterday - the Army continues to lead the way towards a more secure and resilient supply chain! The Army CIO just released five pivotal policy memos driving forward Initiative 8 under Army Directive 2024-02. These memos are a game-changer for cybersecurity and DevSecOps, embedding security directly into software development for faster, more secure tools to support soldiers on the modern battlefield. 📜 Key Memos Include: • Army Software Modernization Directive—Initiative 8—Implementation Plan • Army DevSecOps Configuration Management Framework • Army DevSecOps Platform Certification • Army DevSecOps Pipeline Certification • Army Transition to Continuous Authority to Operate (cATO) These policies lay the groundwork for a faster, more agile, and secure development process, with cATO as a centerpiece — enabling continuous monitoring and faster approvals. 📚 Links to Memos can be found below in the commments👇 #ArmyModernization #DevSecOps #Cybersecurity #cATO #ArmyCIO #CMMC #SecurebyDesign #SSDF Benjamin S. Katie Arrington Jason R... Weiss Chris Hughes Scott Edwards Dr. Pete Dowdy, DSc., CISM, CGRC, CDPSE, CEH David A. Africano Ryan Gibbons Alex Hoang To Ben Tchoubineh Sherif Said, PMP David "SPUD" Webb, MSIT, CISSP, CCISO, CAPM, Opinions are MINE Jen Easterly Jeremy Stinson, MBA Ntoh O Etta Aaron Aaron Burrows Jerry Leishman Tony Barrett Kristin Sargent Eric Levitas Tom Sanders Angela Rittenbach Greg Goldwater Robert Metzger Carter Schoenberg Kyle Lai Regan Edens Megin Kennett Eric Power Mackenzie Burkhammer George Perezdiaz Jeff Baldwin, D.Sc. Koren Wise Linda Rust Tom Cornelius Lauren C. Ayers Jacob Horne ☁️ Dave Fairburn Jr. CISSP, “Father of FedRAMP" Alexy J.

34

9 Comments

The Department of Defense (DoD) recently published a proposed rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate contractual requirements pertaining to the proposed Cybersecurity Maturity Model Certification (CMMC) 2.0 program. The new proposed rule is a significant development in the path toward finalizing the CMMC 2.0 program. Based on its current trajectory, the likelihood of a finalized CMMC 2.0 going into effect in 2025 is quite high. Beth Burgin Waller and Patrick Austin, members of the Woods Rogers Cybersecurity & Data Privacy practice group, provide an overview of the key provisions contained in the proposed DFARS rule. #WoodsRogers #cybersecurity #DOD https://bit.ly/3XghgFi

4

As the DoD embraces RMF 2.0, OMNI Technologies has partnered with OpenRMF® Professional to simplify your cybersecurity compliance journey. OpenRMF Professional's advanced automation features are designed to alleviate the burdens of RMF 2.0: - Effortless ATO Management: Seamlessly track and manage multiple ATO packages through one intuitive interface. - Live POAM Updates: Gain real-time visibility into your Plan of Action & Milestones for continuous compliance. - Enhanced Efficiency & Accuracy: Automate tasks to reduce manual effort and ensure consistent compliance reporting. - Simplified Compliance Tracking: Generate compliance reports quickly, tracking progress against RMF, FedRAMP, or StateRAMP requirements. Leverage OMNI’s cybersecurity expertise and OpenRMF Professional's automation tools to confidently navigate RMF 2.0. Visit our website to read our WP and contact us to learn how we can help you simplify RMF 2.0 compliance with OpenRMF® Professional: https://lnkd.in/ejET6Tvj

16

1 Comment

If #DOGE is looking for easy ways to save on the industry side, that scale, here’s a simple formula: 1. Look at the market, and make a list of all the areas where GovCon consultants multiply the most: - CMMC/ATO/FedRamp - DCAA compliance - GSA vehicle management - Capture, bid and proposal - Government relations - ITAR - The list goes on 2. Automate as much of it as humanly possible You see, the consultant-heavy areas have a negative money multiplier effect, in that everyone needs help with them, so you multiply the cost across EVERY industry participant, and they’re all allowable costs, so who pays? USG 100%. AND The government folks are actually disincentivized to fix the broken processes because the system’s brokenness is what creates their second career as a consultant. Kill two birds with one stone.

119

31 Comments

The most comprehensive guide to CMMC and CUI I have ever seen and a great read for any contractors doing business with DoD https://lnkd.in/gMP692jM

4

https://lnkd.in/gw2mqQqa Huntsville Business Journal FYI https://lnkd.in/gpFCdTeW I own the TM Huntsville AI, please take down this article. HSV.Ai doesn't have the right to Huntsville AI. They are legally obligated to use Huntsville AI LLC.

I received an e-mail today from NSA about their tools for the DIB entitled "Free Cybersecurity Services from DOD for Defense Industrial Base". Don't get me wrong, I am happy they are providing the tools to the DIB but it seems like the NSA tools and the Project Spectrum cloud tools they are working on for the DIB are too exclusionary. We have a lot of small businesses that are trying to get into being part of the DIB "club" and are expected to meet all the requirements that are being given out for free to companies with DOD contracts. Does this mean that if you don't have an existing contract you will not be able to afford to participate to get a contract? The companies that already have contracts have already agreed to DFARS 7012 flowdowns. The new companies are just trying to get kickstarted and the free tools are not being provided? Please, let's talk about how we can get the new companies to be part of the DIB and use the tools provided.

17

13 Comments