10 mars 2020 | International, C4ISR, Sécurité

The Pentagon’s first class of cybersecurity auditors is almost here

Mark Pomerleau

The Pentagon hopes to have the first class of auditors to evaluate contractors' cybersecurity ready by April, a top Department of Defense official said March 5.

The auditors will be responsible for certifying companies under the new Cybersecurity Maturity Model Certification (CMMC), which is a tiered cybersecurity framework that grades companies on a scale of one to five. A score of one designates basic hygiene and a five represents advanced hygiene.

Currently, there are no auditors — known as Certified Third-Party Assessment Organizations (C3PAO) — as the accreditation board came about officially in January.

“Our goal is to have, in late April, our pilot pathfinder on the training for the C3PAOs,” Katie Arrington, chief information security officer for the Office of the Under Secretary of Defense for Acquisition, said at an event hosted by DreamPort in Columbia, Maryland.

The accreditation board is working on training the auditors and the accompanying training materials

Arrington said just because there aren't any auditors already working doesn't mean companies shouldn't be getting ready.

“You've got to get prepared for the audit,” she said. “You should be able to say ‘I think I've done my self assessment, I think I'm at this CMMC level.' Waiting for the audit to come in and then decide to get good or to get on track is not the way I would position my business.”

If all goes according to plan, all new contracts in 2025 will feature the security requirements.

Arrington also suggested that the framework has received interest outside the DoD.

“Do I think that other federal agencies are getting on board? Yes they are. They're waiting for me to get through my pathfinder,” she said.

She also referred to comments made by Under Secretary of Defense for Acquisition and Sustainment Ellen Lord, who explained nearly a dozen nations and international organizations are interested in adopting CMMC.

https://www.fifthdomain.com/dod/2020/03/09/the-pentagons-first-class-of-cybersecurity-auditors-is-almost-here/

Sur le même sujet

6 mai 2019 | International, Aérospatial

Vente d'armes : Airbus envisage de porter plainte contre Berlin
Par Bruno TREVIDIC La décision du gouvernement allemand de suspendre les exportations d'armes à l'Arabie saoudite a déjà coûté à Airbus plus de 190 millions d'euros. L'embargo allemand sur les ventes d'armes à l'Arabie saoudite a coûté très cher à Airbus et le groupe d'aéronautique et défense envisage désormais de présenter la facture à Berlin. Selon un article du « Spiegel » publié vendredi, Airbus envisagerait de porter plainte devant les tribunaux allemands, contre la décision du gouvernement fédéral. « Nous nous réservons la possibilité d'engager un recours », a confirmé un porte-parole du groupe. Un impact de 190 millions d'euros Lors de la présentation des résultats du premier trimestre , le 30 avril, les dirigeants d'Airbus avaient chiffré à 190 millions d'euros, l'impact financier de la suspension des licences d'exportation de matériel militaire à l'Arabie saoudite. Une somme à laquelle s'ajouterait une partie des 83 millions d'euros « liés à l'écart de comptabilisation des paiements avant livraisons et aux réévaluations bilancielles ». De quoi expliquer partiellement la forte baisse du résultat net d'Airbus au premier trimestre. Un contrat de 2,5 milliards d'euros Pour le groupe européen, la potion est d'autant plus amère que le principal contrat avec l'Arabie saoudite visé par cet embargo allemand ne porte pas véritablement sur des ventes d'armes. Il s'agit d'un contrat signé dès 2009 pour un système complet de sécurisation des 9.000 km de frontières du royaume, associant tous les moyens de détection et de surveillance, d'une valeur totale d'environ 2,5 milliards d'euros, et qui devait être partiellement fabriqué sur le site Airbus de Donauwörth, près de Munich. D'où l'envie d'aller en contester la légalité devant les tribunaux allemands. Exportations impopulaires Toutefois d'autres programmes militaires auxquels le groupe Airbus participe sont également concernés par le gel des exportations d'armes à Ryad, parmi lesquelles les avions de combat Eurofighter Typhoon, l'avion de ravitaillement en vol A330 MRTT, des hélicoptères, des missiles MBDA... A tel point que plusieurs des partenaires européens de l'Allemagne, au premier rang desquels la France , se sont émus de cette situation. Sans effet jusqu'à présent sur le gouvernement d'Angela Merkel, qui sait l'impopularité des ventes d'armes au sein de son opinion publique. La décision de Berlin de stopper les ventes d'armes à l'Arabie saoudite avait été annoncée en octobre dernier, suite à l'émotion suscitée par l'assassinat du journaliste Jamal Khashoggi au consulat d'Arabie saoudite à Istanbul. A l'époque, Berlin avait toutefois évoqué une mesure provisoire. Mais depuis, ce moratoire a déjà été prolongé à trois reprises, rendant de plus en plus improbable la réalisation des contrats. Bruno Trévidic https://www.lesechos.fr/industrie-services/air-defense/vente-darmes-airbus-envisage-de-porter-plainte-contre-berlin-1016128
18 décembre 2020 | International, Terrestre

GM Defense begins renovating N.C. facility to build ISVs
By Christen McCurdy Dec. 17 (UPI) -- GM Defense announced Thursday that it has started renovation of an existing General Motors building to support production of the Infantry Squad Vehicle, an all-terrain troop carrier designed to transport a nine-soldier infantry squad. The 750,000-square-foot facility is located in Concord, N.C. Construction at the facility is likely to continue into early spring, with the production line delivering vehicles in April. "We have tremendous momentum behind our ISV win, featuring a first-of-its-kind tactical wheeled vehicle that gives our Soldiers speed, durability and performance to enhance mission success," said Tim Herrick, interim president of GM Defense. "GM Defense is responsible for the design, engineering and manufacturing of the ISV. This facility will enable us to meet our customer's timeline for delivery while continuing our journey to bring commercial technologies and transformative mobility solutions to the defense market." The 5,000-pound ISV is based on the 2020 Chevrolet Colorado ZR2 midsize truck architecture and uses 90 percent commercial-off-the-shelf parts, but is engineered to fulfill military requirements and designed to provide rapid ground mobility. The ISV is light enough to be sling loaded from a UH-60 Blackhawk helicopter and compact enough to fit inside a CH-47 Chinook helicopter, and includes a Rollover Protection System for transportability on any battleground. The facility is slated to manufacture 649 ISVs in support of the production of the 2,065 vehicles GM Defense is contracted to deliver per a $214.3 million award awarded to GM Defense in June. The deal is the first major award since GM created a defense subsidiary in 2017. GM Defense delivered its first ISV to the Army in October. https://www.upi.com/Defense-News/2020/12/17/GM-Defense-begins-renovating-NC-facility-to-build-ISVs/4241608253661/
22 mai 2019 | International, Aérospatial

CAE awarded contract from Boeing to develop additional P-8A operational flight trainer for Royal Air Force
Tampa, Florida, USA, May 13, 2019 – (NYSE: CAE; TSX: CAE) – On the eve of the International Training and Education Conference (ITEC), Europe's largest show for military training and simulation, CAE announced that Boeing has ordered simulator hardware for an additional P-8A operational flight trainer (OFT) for the United Kingdom Royal Air Force (RAF). This follows a contract award last year for CAE to design and manufacture the hardware for the first P-8A OFT for the RAF as well as a P-8I OFT for the Indian Navy. In addition, CAE developed and delivered a P-8 operational flight trainer integration asset, which is used by Boeing as an engineering development tool to test and validate aircraft and simulator upgrades for the United States Navy, Royal Australian Air Force, and other international customers. “We are pleased to continue supporting Boeing on the development of P-8 training systems for the international customers acquiring this advanced maritime patrol aircraft,” said Ray Duquette, President and General Manager, CAE USA. “The United Kingdom and India will now join the U.S. Navy and Australia in leveraging high-fidelity synthetic training as part of their overall P-8 training curriculum.” The P-8 OFTs for the RAF and Indian Navy will be similar to the P-8A OFTs that CAE and Boeing have already developed for the U.S. Navy and Royal Australian Air Force. CAE designs and manufactures the P-8 OFT hardware to Level D standards, the highest qualification for flight simulators. CAE also provides the 737-800 OFT software baseline and simulation-based software lab environment that is used for the P-8 OFT development and integration tasks. CAE then delivers the simulators to Boeing, who designs, installs and integrates software specific to the P-8 aircraft. The P-8A OFTs for the RAF are scheduled for delivery to RAF Base Lossiemouth in Scotland in 2021. The P-8 OFT for the Indian Navy specifically representing the Indian Navy's P-8I variant is scheduled for delivery to India Naval Station (INS) Rajali in 2021. https://www.cae.com/news-events/press-releases/cae-awarded-contract-from-boeing-to-develop-additional-p-8a-operational-flight-trainer-for-royal-air-force

Toutes les nouvelles