A recent ransomware attack on Canadian contractor Bird Construction has once again highlighted the need for cybersecurity measures in the industry. Canadian media reports late last month said that the Ontario-based government contracting company was the victim of an incident that resulted in the encryption of company

The Defense Department has been steadily working on its new unified standard, the Cybersecurity Maturity Model Certification (CMMC), and is expected to release a final version and a list of accrediting bodies in January. But while companies shouldn’t wait until things are finalized to prep for certification, many are stuck. “CMMC is going to be

Because construction managers must oversee many physical assets, from materials and vehicles to personnel, something as nonsubstantive as data can easily be overlooked as an asset to protect, Dettweiler told Construction Dive. However, data such as employee social security numbers, building plans or construction time frames is easily exploitable …

It’s a new year — and a new cybersecurity regime for vendors working on defense contracts is coming. The Defense Department has been steadily working on its new unified standard, the Cybersecurity Maturity Model Certification (CMMC), and is expected to release a …

The accreditation body overseeing the Defense Department’s cybersecurity certification for prospective contractors is also authorized to provide certified companies with cybersecurity services, according to members of the group’s board of directors. “A continuous monitoring capability could provide benefits to …

CMMC has become one of the looming issues for defense contractors as the Pentagon looks to fortify, not only its own networks, but those of the defense industrial base. In this op-ed, Johann Dettweiler, director of operations at TalaTek, a risk management firm, offers a frequently asked questions on how business leaders should think about this program.

With the current upheaval, business leaders may lose focus and push off implementing security measures, managing risk, and keeping up with compliance requirements. That’s a big mistake.
It’s clear that …