The Rule Is the Artifact. The Control Is the Obligation.

Craig Wood

Published on: 17/09/2026

FAA issued new aircraft cyber special conditions in June; the rule replacing them is still proposed. CIRCIA has not published. What binds you regardless.

aviation cybersecurity complianceFAA special conditions14 CFR 25.1319CIRCIA final ruleTSA surface cybersecurityNYDFS Part 500cybersecurity compliancevCISO

CMMC Reform RFI Closes August 14 — The Pause Is a Comment Window, Not a Break

Craig Wood

Published on: 30/07/2026

CMMC's reform RFI closes Aug 14, CIRCIA slips to September, HIPAA to 2027 — what still binds for DIB, maritime, and healthcare security leaders.

CMMC reform RFICMMC Phase 2 suspensionCIRCIA final ruleHIPAA Security Rulemaritime cybersecurity MTSANIST 800-171 complianceDFARS 252.204-7012cybersecurity compliance