What Happened
Industry Urged to Prioritize Foundational Cybersecurity Beyond Compliance
The Department of Defense’s Chief Information Officer, Kirsten Davie, is urging the defense industry to prioritize ‘foundational cybersecurity’ beyond mere compliance, emphasizing that a compromise at any level can jeopardize warfighter capabilities. Davie noted that the security of the defense industrial base is crucial to warfighter security, as any network breach can impact capabilities at the edge. The DoD has been moving away from a compliance-focused approach, introducing the Cybersecurity Maturity Model Certification (CMMC) in 2019. According to Breaking Defense, the department is now taking a more holistic approach to cybersecurity, with a focus on operational resilience and a bias for action.