DOJ Ramps Up Cyber-Enforcement on Defense Contractors

The Department of Justice's recent $4.6 million settlement with defense contractor MORSECORP sends a clear message to the Defense Industrial Base: cybersecurity noncompliance will be aggressively pursued through False Claims Act enforcement. With damages potentially reaching triple all contract payments plus penalties up to $28,000 per claim, DIB contractors face unprecedented legal and financial exposure for cybersecurity failures. SSE's CISO and CTO Charlie Sciuto was recently featured in Security Journal Americas, offering analysis on the enforcement landscape and outlining critical compliance pitfalls that companies must avoid as CMMC third-party assessments approach. Read the full article here.
International Security Journal
Additional Blog Posts
CMMC Compliance Requirements Explained for Subcontractors
The Cybersecurity Maturity Model Certification (CMMC) has fundamentally changed what it means to participate in…
NIST 800-171 Rev.3 Draft: What It Means Now and Moving Forward With CMMC
The National Institute of Standards and Technology (NIST) finalized Special Publication (SP) 800-171 Revision 3…
