David Finnis

FCI & CUI: Why Commercial Companies and Subcontractors Should Pay Attention

Even if your business is not a prime contractor or direct government vendor, you may still be required to safeguard federal information. Commercial companies that support primes or large integrators often inherit these requirements through flow-down clauses in subcontracts. Meeting them is critical to stay competitive in the supply chain.

CMMC: What Commercial Companies and Sub-Contractors Should Know

What is CMMC? The Cybersecurity Maturity Model Certification (CMMC 2.0) is a U.S. Department of Defense (DoD) initiative that ensures companies in the defense supply chain protect federal data. Phase 1 of the rule takes effect on November 10, 2025. While CMMC applies specifically to prime DoD contractors,

ISO42001 - the new AI standard

Introduction With 82% of businesses either using or exploring Artificial Intelligence (AI), the potential for transformative benefits in accelerated software development, customer engagement, employee productivity, and operational efficiency is undeniable. AI is not just a buzzword; it’s a cornerstone of the current technology evolution for many organizations. The AI

What is new in ISO27001:2022?

Background The most implemented version of ISO270001 has been around since its release in 2013. The update to ISO27001 has been a long time coming. At the rate of technology changes and the migration to the cloud that we have seen in the past ten years, the ISO27001 information security