12 October 2024

With CMMC 2.0, Cyber Security Tsunami Ahead for Thousands of Defense Firms

Rebecca Grant

China’s cyber espionage is off the charts, and according to the FBI, Iran has been targeting the aerospace and defense industrial base, too. It’s not just top-secret programs; China, Russia, Iran and others are also going after vulnerable unclassified information and federal contract data. The threat is so severe that the government insists that Controlled Unclassified Information and Federal Contract Information meet higher standards.

That is why thousands of critical businesses face new cybersecurity standards for protecting unclassified information beginning in mid-2025. And many aren’t ready. In one recent survey, 96% of the 300 firms responding said they could not meet full compliance.

The standards known as Cybersecurity Maturity Model Certification 2.0 were first announced in late 2021. Major programs like aircraft carriers and the B-21 bomber depend on thousands of supplier companies. Some suppliers are already wrapped into classified programs. However, there are also numerous firms producing just a few critical parts for the defense sector, often nestled inside thriving commercial businesses.


No comments: