Most contractors in the defense industrial base are manufacturers, engineers, and specialized suppliers. They don’t have a CISO. They don’t have a security operations center. Usually, one IT generalist handles help desk tickets, manages cloud infrastructure, and tries to figure
DIY or Partner? We Break Down the Cost Difference at CMMC CON 2026 Read More »
Many defense contractors across the supply chain are making the dangerous assumption that the Cybersecurity Maturity Model Certification (CMMC) mandate doesn’t apply to them. Small Doesn’t Mean Exempt from CMMC In most cases, it’s small and medium-sized businesses that
Why Small Defense Contractors Can’t Afford to Ignore CMMC Read More »
The government shutdown has been ongoing for nearly a month. Museums closed. Federal employees furloughed. Washington is paralyzed with no end in sight. But Nov. 10 doesn’t care. While Congress remains gridlocked over funding, Phase 1 of the
While Washington Shuts Down, CMMC Compliance Marches On Read More »
The countdown to CMMC enforcement is over. November 10 is not just another date on the calendar. It is the day the Department of Defense/War DOD/DOW begins embedding CMMC clauses into contracts and when every company in the Defense Industrial
CMMC Enforcement Begins November 10: What Defense Contractors Must Know Now Read More »
I am honored to share that I have joined CyberSheath as Chief Executive Officer. I am grateful to our Founder, Eric Noonan, our leadership team, our board, and BV Investment Partners for their trust. Eric built a category leader through
A New Chapter At CyberSheath Read More »
If you’ve spent more than five minutes Googling CMMC compliance solutions, you already know how confusing and misleading the marketing is. Some vendors want you to buy licensing first. Others waterboard you with acronyms that further confuse the situation. Almost
Compliance and cybersecurity are constantly evolving. Recently a shift has occurred with the concept of supply chain risk management (SCRM) as a set of requirements across many cybersecurity frameworks—in particular, NIST 800-171 as it applies to the defense industrial base—gaining
What Is Supply Chain Risk Management? A Guide for Defense Contractors Read More »
Outsourcing any aspect of your business can be a daunting task—so it’s understandable that business owners and stakeholders may have concerns about letting another entity assume some responsibilities. Why should you rely on an outside resource for management of your
Why to Outsource Cybersecurity Compliance Management Read More »
The first CMMC Level 2 certification requirement is officially live on SAM.gov in a draft section L and M, in anticipation of the final rule’s implementation on December 16th. This milestone marks a pivotal moment for the Defense Industrial Base
CMMC Level 2 Certification Now Required for DOD Contracts Read More »
A recent case involving Georgia Tech Research Corporation and its affiliates highlights a critical trend: the U.S. government is increasingly using the False Claims Act (FCA) to hold defense contractors accountable for cybersecurity noncompliance. In this case, it was alleged
What the False Claims Act Means for Defense Contractors Read More »
