Lawmakers Want to Know How Much Bad Software Costs DOD When the House Armed Services Committee begins its markup process of the annual defense authorization bill on June 8, look out for a provision asking the Pentagon to account for wasted money and lost productivity caused by poorly performing software. More
FBI, DOJ Seize Website Addresses, Associated Illegal Data Sales, Hacking Services Federal law enforcement agencies have seized several internet domain names in pursuit of an international investigation into websites that permit users to buy stolen personal data and information or hack other networks. Announced on Wednesday, the domain names OVH Booter, WeLeakInfo and IPStress.in have all been procured by the Federal Bureau of Investigation and Department of Justice with a seizure warrant issued by a U.S. District Court for the District of Columbia. More
DoD tells industry how it will handle cost of inflation As the nation is still in the midst of decades-high inflation, the Defense Department is advising its industry partners on who will be shouldering the burden of increased costs in existing contracts. The Pentagon released clarifying guidance explaining how it will specifically handle cost differences in different contract agreements. More
DOD not meeting same standards it plans to hold contractors to under CMMC The Pentagon established new requirements under the Cybersecurity Maturity Model Certification (CMMC) 2.0 program to hold contractors to better protecting sensitive defense data. But the Department of Defense itself hasn’t yet proven it can meet those same standards. More
Pentagon updates timeline for CMMC cybersecurity initiative The Department of Defense hopes to begin implementing its Cybersecurity Maturity Model Certification (CMMC) program requirements in contracts in May 2023, as part of an effort to prod hundreds of thousands of defense contractors to better protect their networks and controlled unclassified information. More
Cybersecurity agencies reveal top initial access attack vectors The advisory, jointly released by agencies from the United States, Canada, New Zealand, the Netherlands, and the United Kingdom, includes guidance to mitigate these routinely exploited weak security controls, poor security configurations, and bad practices. More
What the U.S. Military Needs to Learn from the Ukraine War As the brutal fighting continues in the Ukraine War, it seems likely to fundamentally upend the way we wage war in the 21st-century. From new tactics to equipment, the Russian invasion of Ukraine may presage fundamental changes in how war is conducted. What can Western militaries learn from the war thus far? More
Challenges of MICRO Contractors to the Defense Industry Cost Challenges to MICRO Contractors to the Defense Industry Series Post 1, Part 1 What Is a Micro-Contractor? Let’s start with defining what a micro contractor to the defense industry base is. The concept of a micro contractor is NOT related with the concept of a micro transaction, currently defined as any purchase under $10,000 as of Aug 31, 2020. A micro contractor is simply a company under ten employees which has secured a contract from the US government that contains CUI/FCI and other sensitive information. [...]
Have you received a letter from your DoD contract officer or prime contractor asking you to complete your NIST 800-171 Basic Assessment and enter your score into the Supplier Performance Risk System (SPRS)? * Are you concerned about keeping or getting new Defense contract work? * How is Cybersecurity/DoD’s new cybersecurity requirements going to affect your business? As a small manufacturer you may feel that you don’t have the resources or bandwidth to comply with DoD’s new cybersecurity requirements. CPI Systems works directly with Defense Contractors or state-based Manufacturing Extension Partnerships (MEP’s) to help small manufacturers maintain or obtain [...]
Cyber Security (to include critical infrastructure protection, cyber-security, data security, risk assessments) REGISTER NOW for the Partnership for Global Sustainability (PGS) Workshop, Virtual TIM #2 - Co-Chaired by CPISYS.com and brought to you by ITB Inc. in collaboration with Florida Tech in Melbourne, FL PLEASE FORWARD THIS NOTICE to ALL of your contacts that may be interested!! Wednesday, January 28, 2021 10:00am EST Cyber Security (to include critical infrastructure protection, cyber-security, data security, risk assessments) Space systems and their associated infrastructure and ground systems may be vulnerable to multiple types of natural and manmade threats. Critical Infrastructure [...]
