Julian Boddy, MBA

"(1) Affirming Official. The Affirming Official is the senior level representative from within each Organization Seeking Assessment (OSA) who is responsible for ensuring the OSA’s compliance with the CMMC Program requirements and has the authority to affirm the OSA’s continuing compliance with the specified security requirements for their respective organizations. (2) Affirmation content. Each CMMC affirmation shall include the following information: (i) Name, title, and contact information for the Affirming Official; and (ii) Affirmation statement attesting that the OSA has implemented and will maintain implementation of all applicable CMMC security requirements to their CMMC Status for all information systems within the relevant CMMC Assessment Scope." #cmmc #dod #cybersecurity

25

[LIVE TALK] Join #TheBrickHouse on August 20 at 12:00pm ET for "Into the Breach–Advanced Penetration Testing Tactics." Gain practical tools and insights on advanced #PenetrationTesting methodologies to enhance security defense. Gary Brickhouse, CISO at GuidePoint Security, and a panel of TAS and #AppSec practitioners, will discuss techniques for identifying #cybersecurity weaknesses, including red team operations and application exploitation. Register today: https://okt.to/BRtOYU #PenTesting

2

Join us on Wednesday, May 29th at 8:30 AM to discover how CERT Ukraine and CISA work together to combat cyber threats! Limited tickets available - act fast! Link in bio for more details and to get tickets. #CERTUkraine #CISA #CyberDefense #Collaboration #CyberSecurity.

12

🚨 Important Update for Defense Contractors and anyone related to the DIB: The DFARS 7021 clause, covering the Cybersecurity Maturity Model Certification (CMMC) requirements, has just cleared a significant hurdle. The Office of Information and Regulatory Affairs (OIRA) has completed its review, and the rule is now on its way to the Federal Register for publication. Once published, there will be a 60-day public comment period before the rule can be finalized and put into effect. Keep an eye out for the Federal Register publication—it's coming soon! We can expect 7021 to show up in contracts late Q2 next year. #Cybersecurity #CMMC #DFARS #DefenseIndustry #Compliance 

8

🚨 Important Update for Defense Contractors and anyone related to the DIB: The DFARS 7021 clause, covering the Cybersecurity Maturity Model Certification (CMMC) requirements, has just cleared a significant hurdle. The Office of Information and Regulatory Affairs (OIRA) has completed its review, and the rule is now on its way to the Federal Register for publication. Once published, there will be a 60-day public comment period before the rule can be finalized and put into effect. Keep an eye out for the Federal Register publication—it's coming soon! We can expect 7021 to show up in contracts late Q2 next year. #Cybersecurity #CMMC #DFARS #DefenseIndustry #Compliance 

9

This week I shared thoughts on the #threat of Chinese malicious cyber activity and the importance of #cybersecurity at a keynote speech to the Air Force Technical Applications Center in sunny Florida. During AFTAC's Cybersecurity Day, I encouraged DoD members and industry partners alike to go to NSA.gov to learn from some of the over 75 Cybersecurity Advisories we've published about the threat and what to do about it. We talked about threats like #VOLTTYPHOON and the tactic of #livingofftheland to access and operate in our networks. Products on NSA.gov offer ways to become a hard target by employing #zerotrust principles. We can't choose to not be targets, but we can and must choose to be HARD targets...

199

2 Comments

"A comprehensive guide authored by Dean Parsons, SANS Certified Instructor and CEO / Principal Consultant of ICS Defense Force, emphasizes the growing need for specialized ICS security measures in the face of rising cyber threats." #criticalinfrastructure #ICS #cybersecurity

3

💡 Have you considered becoming a CMMC Certified Professional (CCP)? 👉 The requirements can be difficult to navigate, and don't always provide future CCPs with a clear picture of exactly what is required to become certified 👉 Hopefully this can help someone interested in pursuing the CCP better understand the costs associated with this pursuit ❓ If you have questions about whether becoming a CCP is the right path for you, or if it would provide value to you or your organization, please reach out #CMMC #CCP #cui #dod

16

5 Comments

DISA Expands Thunderdome Zero Trust Program Deployment; Brian Hermann, Quoted. ExecutiveGov discusses the Defense Information Systems Agency's (DISA) expansion of the Thunderdome zero trust program. In 2023, the program was deployed to 15 sites and plans are underway to extend it to 60 more sites in 2024. The program involves four key components: 🔐 Customer security stacks 🔗 Software-defined wide area networking 📴 Secure access service edge capability, and 💯 Application security stacks. Brian Hermann, DISA's director of the cybersecurity and analytics directorate, emphasized the program's role in advancing zero trust architecture, which is crucial for organizational security. DISA has also finalized the contracting process to support the U.S. Coast Guard’s network security improvement efforts through Thunderdome. Versa Networks is at the forefront of enhancing cybersecurity with their pivotal role in DISA's Thunderdome project. Their cutting-edge solutions are setting new standards in securing our nation's digital infrastructure. For more details, you can read the full article here:-https://lnkd.in/gd4wAWM2 #DISA #Thunderdome #ZeroTrust #Cybersecurity #versanetworks #channelpartners

5

🚨 DFARS 252.204-7021 (the CMMC clause) is currently at the Office of Management and Budget (OMB) 🚨 The abstract states, "DoD is amending an interim rule to implement the CMMC framework 2.0 in order to protect against the theft of intellectual property and sensitive information from the Defense Industrial Base (DIB) sector. The CMMC framework, as defined in Title 32 of the Code of Federal Regulations (CFR), assesses compliance with applicable information security requirements. This rule provides the Department with assurances that a DIB contractor can adequately protect sensitive unclassified information at a level commensurate with the risk, accounting for information flow down to its subcontractors in a multi-tier supply chain." Once approved, the rule will be sent to the Federal Register for publication 👀 You can see the rule here: https://lnkd.in/eyP5dqre Shoutout to Eric Crusius for breaking this news! #cmmc #dod #cybersecurity

35

ECS selected #Axonius to support DHS's CDM program. Axonius will provide comprehensive #Cybersecurity asset visibility and vulnerability management, enabling efficient risk management: https://dy.si/m5nFJ

2

#ICYMI: NCSC recently released updated guidance by the National Insider Threat Task Force. Explore this compendium of best practices for insider threat practitioners at: https://lnkd.in/ecFZX2Wf

120

2 Comments

🗞️ In CyberScoop: "[T]he years of work to build up federal collaboration with industry are paying off, from the Joint Cyber Defense Collaborative to the National Risk Management Center — the 'proto' version of the JCDC, [Chris Krebs] said — to the National Security Agency’s Cybersecurity Collaboration Center. "'We’re starting to see that these things work with the resources and time into it, but it’s generating results and there’s no better evidence of the results, I think, than when Russia invaded Ukraine, and the ‘Shields Up’ campaign and the breadth to which that was able to change behavior in industry,' said Krebs, now chief intelligence and public policy officer at SentinelOne." To learn more, read the full article by Tim Starks: https://s1.ai/CS-Collab

42