{"id":24175,"date":"2019-10-08T22:32:33","date_gmt":"2019-10-08T22:32:33","guid":{"rendered":"https:\/\/one.sightlinemg.com\/c4isrnet\/uncategorized\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/"},"modified":"2026-08-08T18:16:16","modified_gmt":"2026-08-08T18:16:16","slug":"small-businesses-main-focus-of-new-cybersecurity-rules","status":"publish","type":"post","link":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/","title":{"rendered":"Small businesses main focus of new cybersecurity rules"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Small businesses are increasingly being targeted digitally by nation states, according to Department of Defense officials, who say more must be done specifically to evaluate and reinforce the security of contractors battling cyberattacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cWe\u2019re losing,\u201d said Katie Arrington, special assistant to the assistant secretary of defense for acquisition for cyber within the office of the undersecretary of defense for acquisition and sustainment, speaking Oct. 7 at an AFCEA-hosted event.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Arrington explained that adversaries cost the country $600 billion a year and that, with 5G on the horizon, that amount must be multiplied by \u201cumpteenth\u201d in 2025 given the near-unlimited bandwidth for cyber campaigns technology promises. As a result, Arrington said, the forthcoming cybersecurity maturity model certification (CMMC) was designed specifically for small businesses.<\/p>\n\n\n\t<aside class=\"smg-interstitial-link wp-block-smg-interstitial-link\">\n\t\t<a href=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/09\/10\/what-does-state-of-the-art-cybersecurity-look-like-to-the-pentagon\/\" class=\"smg-interstitial-link__inner\">\n\t\t\t\t\t\t\t<div class=\"smg-interstitial-link__media\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"200\" src=\"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/4419918.jpg.jpg?w=300\" class=\"smg-interstitial-link__image wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"smg-interstitial-link__content\">\n\t\t\t\t<span class=\"smg-interstitial-link__kicker\">Related<\/span>\n\t\t\t\t<h3 class=\"smg-interstitial-link__title\">What does state-of-the-art cybersecurity look like to the Pentagon?<\/h3>\n\t\t\t\t\t\t\t\t\t<p class=\"smg-interstitial-link__excerpt\">The Department of Defense is cracking down on contractor cybersecurity.<\/p>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/a>\n\t<\/aside>\n\t\n\n\n<p class=\"wp-block-paragraph\">The CMMC is a framework that grades company cybersecurity on a scale of one (least secure) to five (most stringent). What small businesses will be asked to do is comply with a tiered rating system depending on the systems they\u2019ll be working on.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">What this means is if a company is working on janitorial services, they may only need to comply with level 1 of CMMC as opposed to level 3, which is equivalent to <a href=\"https:\/\/csrc.nist.gov\/publications\/detail\/sp\/800-171\/rev-1\/final\" target=_blank>NSIT 800-171 regulations<\/a>, or level 4 that is reserved for exquisite systems.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In the past, there was a two-tiered system for small businesses to be compliant, Arrington described. A company could be compliant with 80 controls under NIST 171 and have a <a href=\"https:\/\/www.fedramp.gov\/developing-a-plan-of-actions-milestones\/\" target=\"_blank\">Plan of Actions &amp; Milestones (POA&amp;Ms)<\/a> to do the other 30, while another company could be doing all the 110 controls and both are technically acceptable.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThat isn\u2019t right, because our adversaries aren\u2019t taking a cup of coffee and saying, \u2018I\u2019m going to come back to you when your POA&amp;M is done,\u2019\u201d said Arrington. \u201cThey\u2019re walking through those POA&amp;Ms like they\u2019re Swiss cheese.\u201d<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">As a result, Arrington made the case that the CMMC is really about leveling this playing field and protecting sensitive systems that require additional cybersecurity controls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Some have noted that these new requirements, while meant to protect the defense industrial base against loss from external forces, could hit smaller companies harder within the market.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cThis would have severe unintended consequences on small businesses that do not have the resources and sophistication to obtain a high CMMC level, producing market entry barriers and limiting competition,&#8221; the Professional Services Council <a href=\"https:\/\/insidecybersecurity.com\/daily-news\/defense-industry-groups-question-pentagons-new-cyber-certification-rules\" target=_blank>said<\/a> in a Sept. 25 letter to DoD following the September draft release of the CMMC.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cUntil we see the whole scope of who it\u2019s going to apply to and why it\u2019s going to apply to them, it could impact a lot of small companies,\u201d Alexander Major, partners and co-leads for government contracts at McCarter &amp; English LLP, <a href=\"https:\/\/fcw.com\/articles\/2019\/09\/11\/dod-cyber-rules-cmmc-react.aspx\" target=_blank>told FCW<\/a> following the same draft release.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Major\u2019s co-lead, Franklin Turner, also told FCW that Arrington\u2019s assertion that the CMMC would cost only a few thousand dollars is \u201cutterly foolish,\u201d adding it would &#8220;likely be an impediment&#8221; for small companies.<\/p>\n\n\n\t<aside class=\"smg-interstitial-link wp-block-smg-interstitial-link\">\n\t\t<a href=\"https:\/\/one.sightlinemg.com\/c4isrnet\/it-networks\/2019\/07\/18\/is-industry-cyberinsecurity-dods-achilles-heel\/\" class=\"smg-interstitial-link__inner\">\n\t\t\t\t\t\t\t<div class=\"smg-interstitial-link__media\">\n\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"300\" height=\"157\" src=\"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/Hill_weeapons.jpg.jpg?w=300\" class=\"smg-interstitial-link__image wp-post-image\" alt=\"\" \/>\t\t\t\t<\/div>\n\t\t\t\t\t\t<div class=\"smg-interstitial-link__content\">\n\t\t\t\t<span class=\"smg-interstitial-link__kicker\">Related<\/span>\n\t\t\t\t<h3 class=\"smg-interstitial-link__title\">Is industry cyber(in)security DoD\u2019s Achilles\u2019 heel?<\/h3>\n\t\t\t\t\t\t\t\t\t<p class=\"smg-interstitial-link__excerpt\">The Department of Defense hosted a prototyping event to test tools that can monitor manufacturing company networks for cyber intrusions.<\/p>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/a>\n\t<\/aside>\n\t\n\n\n<p class=\"wp-block-paragraph\">However, as Arrington and others have pointed out, top nation states are targeting these smaller companies, necessitating the initiative. Trying to sympathize with the audience, Arrington touted her background contracting with utilities, water and weather services where she herself was guilty of poor cybersecurity practices as a program manager. <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cI knew where the weather was, the water was and the electric was. It was all on my laptop,\u201d she said.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">She did much of her work at coffee shops because, \u201cI needed to network and I needed to communicate with my peers to drive new business and I needed to be seen, because as a small business you have a lot of people who telework from home.\u201d <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">But even using a VPN to tunnel into work accounts has the potential to be exploited, Arrington acknowledged. \u201cI was taking everything around me in the pipe.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Recent events have put a spotlight on the fact data doesn\u2019t have to be classified to be sensitive. Several Navy breaches \u2014 largely attributed to China \u2014 targeted contractors that were determined to have information that wasn\u2019t itself classified, but in aggregate disclosed sensitive capabilities. It is the increase in campaigns to exploit a higher percentage of lower-level vulnerabilities that the CMMC framework addresses.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cOur adversaries are not trying to get at us at the \u2026 top of the nuclear triad,\u201d said Arrington. \u201cYou don\u2019t have the aperture to defend yourself against a nation state and we don\u2019t want you to. I need to be able to help you protect us because when 80 percent of my data lives on your network, it\u2019s no longer a you or a me \u2014 it\u2019s a we thing. This is a we problem.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u201cI need to know exactly what I\u2019m asking you to protect and at what level. Right now, you\u2019re all just doing a bunch of different disparate things, but there\u2019s not a level set. [Cybersecurity] controls do not equal requirement,\u201d Arrington continued.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">It is expected that in fall 2020 CMMC requirements will be included in requests for proposals and will be a go\/no go decision.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.<\/p>\n","protected":false},"author":7,"featured_media":31869,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"_yoast_wpseo_meta-robots-noindex":"","_yoast_wpseo_meta-robots-nofollow":"","_yoast_wpseo_canonical":"","_acf":"","_yoast_wpseo_primary_category":10,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","_smg_distribution_targets":[]},"categories":[10],"tags":[],"coauthors":[3268],"class_list":["post-24175","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cyber"],"acf":{"subheadline":"","legacy_arc_id":"YYRJLJFJMRDHJJ2WXCHT5DZCZ4","arc_canonical_url":"\/dod\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/","remove_feature_photo":false,"is_sponsored":false,"subtype":"","redirect_url":"","disable_inline_ads":false,"native_logo_pretext":"Presented By:"},"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v26.0 (Yoast SEO v28.1) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Small businesses main focus of new cybersecurity rules - C4ISRNet<\/title>\n<meta name=\"description\" content=\"Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.\" \/>\n<meta name=\"robots\" content=\"noindex, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Small businesses main focus of new cybersecurity rules\" \/>\n<meta property=\"og:description\" content=\"Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/\" \/>\n<meta property=\"og:site_name\" content=\"C4ISRNet\" \/>\n<meta property=\"article:published_time\" content=\"2019-10-08T22:32:33+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-08-08T18:16:16+00:00\" \/>\n<meta name=\"author\" content=\"Mark Pomerleau\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Mark Pomerleau\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\n\t    \"@context\": \"https:\\\/\\\/schema.org\",\n\t    \"@graph\": [\n\t        {\n\t            \"@type\": \"Article\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#article\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/\"\n\t            },\n\t            \"author\": {\n\t                \"name\": \"migration\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\"\n\t            },\n\t            \"headline\": \"Small businesses main focus of new cybersecurity rules\",\n\t            \"datePublished\": \"2019-10-08T22:32:33+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:16:16+00:00\",\n\t            \"mainEntityOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/\"\n\t            },\n\t            \"wordCount\": 855,\n\t            \"commentCount\": 0,\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635888885745931747-2254253jpg.jpg\",\n\t            \"articleSection\": [\n\t                \"Cyber\"\n\t            ],\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"CommentAction\",\n\t                    \"name\": \"Comment\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#respond\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebPage\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/\",\n\t            \"name\": \"Small businesses main focus of new cybersecurity rules - C4ISRNet\",\n\t            \"isPartOf\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\"\n\t            },\n\t            \"primaryImageOfPage\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#primaryimage\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#primaryimage\"\n\t            },\n\t            \"thumbnailUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635888885745931747-2254253jpg.jpg\",\n\t            \"datePublished\": \"2019-10-08T22:32:33+00:00\",\n\t            \"dateModified\": \"2026-08-08T18:16:16+00:00\",\n\t            \"description\": \"Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.\",\n\t            \"breadcrumb\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#breadcrumb\"\n\t            },\n\t            \"inLanguage\": \"en-US\",\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"ReadAction\",\n\t                    \"target\": [\n\t                        \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/\"\n\t                    ]\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"ImageObject\",\n\t            \"inLanguage\": \"en-US\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#primaryimage\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635888885745931747-2254253jpg.jpg\",\n\t            \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/08\\\/635888885745931747-2254253jpg.jpg\"\n\t        },\n\t        {\n\t            \"@type\": \"BreadcrumbList\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/2019\\\/10\\\/08\\\/small-businesses-main-focus-of-new-cybersecurity-rules\\\/#breadcrumb\",\n\t            \"itemListElement\": [\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 1,\n\t                    \"name\": \"Home\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t                    \"ad_zone\": \"home\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 2,\n\t                    \"name\": \"Cyber\",\n\t                    \"item\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/cyber\\\/\",\n\t                    \"ad_zone\": \"cyber\"\n\t                },\n\t                {\n\t                    \"@type\": \"ListItem\",\n\t                    \"position\": 3,\n\t                    \"name\": \"Small businesses main focus of new cybersecurity rules\"\n\t                }\n\t            ]\n\t        },\n\t        {\n\t            \"@type\": \"WebSite\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#website\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"description\": \"Media for the Intelligence-Age Military | C4ISRNET\",\n\t            \"publisher\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\"\n\t            },\n\t            \"potentialAction\": [\n\t                {\n\t                    \"@type\": \"SearchAction\",\n\t                    \"target\": {\n\t                        \"@type\": \"EntryPoint\",\n\t                        \"urlTemplate\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/?s={search_term_string}\"\n\t                    },\n\t                    \"query-input\": {\n\t                        \"@type\": \"PropertyValueSpecification\",\n\t                        \"valueRequired\": true,\n\t                        \"valueName\": \"search_term_string\"\n\t                    }\n\t                }\n\t            ],\n\t            \"inLanguage\": \"en-US\"\n\t        },\n\t        {\n\t            \"@type\": \"Organization\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#organization\",\n\t            \"name\": \"C4ISRNet\",\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/\",\n\t            \"logo\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\",\n\t                \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"contentUrl\": \"https:\\\/\\\/one.sightlinemg.com\\\/wp-content\\\/uploads\\\/2026\\\/06\\\/c4isrnet-logo-white.png\",\n\t                \"caption\": \"C4ISRNet\"\n\t            },\n\t            \"image\": {\n\t                \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/logo\\\/image\\\/\"\n\t            }\n\t        },\n\t        {\n\t            \"@type\": \"Person\",\n\t            \"@id\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/#\\\/schema\\\/person\\\/cc76c831bb37a926738c8391fca7a3b1\",\n\t            \"name\": \"migration\",\n\t            \"image\": {\n\t                \"@type\": \"ImageObject\",\n\t                \"inLanguage\": \"en-US\",\n\t                \"@id\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec\",\n\t                \"url\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"contentUrl\": \"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g\",\n\t                \"caption\": \"migration\"\n\t            },\n\t            \"url\": \"https:\\\/\\\/one.sightlinemg.com\\\/c4isrnet\\\/author\\\/migration\\\/\"\n\t        }\n\t    ]\n\t}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Small businesses main focus of new cybersecurity rules - C4ISRNet","description":"Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.","robots":{"index":"noindex","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"og_locale":"en_US","og_type":"article","og_title":"Small businesses main focus of new cybersecurity rules","og_description":"Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.","og_url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/","og_site_name":"C4ISRNet","article_published_time":"2019-10-08T22:32:33+00:00","article_modified_time":"2026-08-08T18:16:16+00:00","author":"Mark Pomerleau","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Mark Pomerleau","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#article","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/"},"author":{"name":"migration","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1"},"headline":"Small businesses main focus of new cybersecurity rules","datePublished":"2019-10-08T22:32:33+00:00","dateModified":"2026-08-08T18:16:16+00:00","mainEntityOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/"},"wordCount":855,"commentCount":0,"publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635888885745931747-2254253jpg.jpg","articleSection":["Cyber"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/","name":"Small businesses main focus of new cybersecurity rules - C4ISRNet","isPartOf":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website"},"primaryImageOfPage":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#primaryimage"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#primaryimage"},"thumbnailUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635888885745931747-2254253jpg.jpg","datePublished":"2019-10-08T22:32:33+00:00","dateModified":"2026-08-08T18:16:16+00:00","description":"Forthcoming cybersecurity controls are designed to help the Department of Defense and small business work together to protect sensitive data based on tiers of systems.","breadcrumb":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#primaryimage","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635888885745931747-2254253jpg.jpg","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635888885745931747-2254253jpg.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/2019\/10\/08\/small-businesses-main-focus-of-new-cybersecurity-rules\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/","ad_zone":"home"},{"@type":"ListItem","position":2,"name":"Cyber","item":"https:\/\/one.sightlinemg.com\/c4isrnet\/cyber\/","ad_zone":"cyber"},{"@type":"ListItem","position":3,"name":"Small businesses main focus of new cybersecurity rules"}]},{"@type":"WebSite","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#website","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","name":"C4ISRNet","description":"Media for the Intelligence-Age Military | C4ISRNET","publisher":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/one.sightlinemg.com\/c4isrnet\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#organization","name":"C4ISRNet","url":"https:\/\/one.sightlinemg.com\/c4isrnet\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/","url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","contentUrl":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/06\/c4isrnet-logo-white.png","caption":"C4ISRNet"},"image":{"@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/one.sightlinemg.com\/c4isrnet\/#\/schema\/person\/cc76c831bb37a926738c8391fca7a3b1","name":"migration","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=gcf4cb6ee0ec29e49e7a963234e4340ec","url":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9e8d47be443ce94ce7fc357677b5f9c70235bb1f59e7267a102a74af58c04f59?s=96&d=mm&r=g","caption":"migration"},"url":"https:\/\/one.sightlinemg.com\/c4isrnet\/author\/migration\/"}]}},"jetpack_sharing_enabled":true,"distributor_meta":false,"distributor_terms":false,"distributor_media":false,"distributor_original_site_name":"C4ISRNet","distributor_original_site_url":"https:\/\/one.sightlinemg.com\/c4isrnet","push-errors":false,"jetpack_featured_media_url":"https:\/\/one.sightlinemg.com\/wp-content\/uploads\/2026\/08\/635888885745931747-2254253jpg.jpg","_links":{"self":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/24175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/comments?post=24175"}],"version-history":[{"count":2,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/24175\/revisions"}],"predecessor-version":[{"id":43791,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/posts\/24175\/revisions\/43791"}],"wp:attachment":[{"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/media?parent=24175"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/categories?post=24175"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/tags?post=24175"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/one.sightlinemg.com\/c4isrnet\/wp-json\/wp\/v2\/coauthors?post=24175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}