CMMC is officially moving from policy to procurement. The Department of Defense has published the final DFARS rule in Title 48 of the CFR, wiring CMMC requirements directly into contracts. The rule is effective 60 days after publication in the […]
DFARS CMMC Final Rule Published: No Surprises, Just Execution Read More »
The argument over whether Cybersecurity Maturity Model Certification would ever show up in real contracts is finished. It is over. Basta. Finito. On Aug. 25, 2025, the Office of Information and Regulatory Affairs cleared the Defense Department acquisition rule in Title 48 of the
Ready Or Not: Trump Administration Just Cleared Rule For Cyber Compliance Read More »
Every defense contractor knows compliance with CMMC is coming due. The question that keeps surfacing: If it feels this difficult for us, how are others managing to pull it off? At CMMC CON 2025, CyberSheath will open that black box.
Join us at CMMC CON 2025 to Dive Into the Annual State of the DIB Report Read More »
When defense contractors think about CMMC, their minds go straight to technical requirements — system security plans, access controls, or the 110 practices in NIST 800-171. But the Department of Justice has made it clear that failing to meet the
The Hidden Liabilities Contractors Face in the CMMC Era Read More »
I am honored to share that I have joined CyberSheath as Chief Executive Officer. I am grateful to our Founder, Eric Noonan, our leadership team, our board, and BV Investment Partners for their trust. Eric built a category leader through
A New Chapter At CyberSheath Read More »
On July 23, the Department of Defense sent CFR 48 to the Office of Management and Budget for review, the final regulatory step before CMMC becomes required for virtually all DOD contracts starting Oct. 1, 2025. With the 60-day review
CyberSheath Experts Share Real Stories from CMMC Implementations at CMMC CON 2025 Read More »
Defense contractors are racing to implement CMMC controls and prepare for assessments, zooming right by the legal implications of getting it wrong in the process. You don’t need a cybersecurity incident to face million-dollar penalties, contract termination, or federal investigation.
Legal Expert Reveals Hidden Compliance Risks at CMMC CON 2025 Read More »
Defense contractors are focused on making quality parts and meeting delivery schedules. Cybersecurity has always been something that happened to other sectors. With CMMC implementation starting fall 2025, even small manufacturers must demonstrate sophisticated cyber defenses to keep their DOD
You’ve spent months implementing controls, documenting policies, and preparing your systems for CMMC Level 2 compliance. But when the certified third-party assessor organization (C3PAO) shows up, what exactly happens next? Most contractors have no idea what to expect during the
Get a Front-Row Seat to a CMMC Assessment at CMMC CON 2025 Read More »
As social engineering threats target defense contractors and CMMC compliance deadlines loom, contractors in the defense industrial base (DIB) face mounting pressure to secure their human vulnerabilities. With attackers increasingly exploiting people rather than technology, organizations need battle-tested expertise to
Social Engineering Expert and Hacker Rachel Tobac to Deliver Keynote at CMMC CON 2025 Read More »
