My Public Sector Colleagues,
CY25 is ending and December is the time of the year I generate my New Year’s resolutions. I hope you consider doing the same and generate both personal and professional goals.
I am working on the following professional ones:
1) Learn more about how Generative AI works (nuts and bolts)
2) Read three professional books
3) Continue mentoring internal staff
4) Connect with my colleagues more often
For personal ones, they are more typical:
1) Spend more time with my wife and family
2) Refine my golf game
3) Maintain a healthy lifestyle
CY26 Budgets
December is the time of the year where the State level proposed budgets are revealed and sent to the Legislature for consideration. I hope your Projects for CY26 are included and will reflect the investment priorities of the respective Public Sector entities and legislative branch authorizations.
Some Tech Thoughts
CMMC:
-
Phased Implementation of CMMC Requirements Has Begun! CMMC Phase 1 Implementation (Nov 10, 2025 - Nov 9, 2026) to focus primarily on CMMC Level 1 and Level 2 self-assessments. The DOW website has a post to remind users to submit AFFIRMATIONS with your CMMC assessments in SPRS. Phase 2 will begin November 2026. https://dodcio.defense.gov/CMMC/
-
Recall: The first phase of CMMC implementation began on November 10, 2025. CMMC assessment requirements will be implemented using a four-phase plan over three years. The phases add CMMC Level requirements incrementally, starting with self-assessments in Phase 1, and ending with full implementation of program requirements in Phase 4. This phased approach allows time to train assessors and companies to understand and implement CMMC assessment requirements.
Shout Out:
- Here is shout out to a recent LinkedIn (LI) Article by Michael Watson the current CISO for the Commonwealth of Viginia. Michael is the longest serving State CISO at 14+ years and he has the one of the broadest and deepest knowledge levels for risk management. In the LI article, Mike says “Cybersecurity is entering a new era where AI does not just analyze information, it begins to understand it.”
- (M. Watson LI Article) “When Attacks Become Autonomous, Defenses Must Become Insightful” 12/5/25. Read the LinkedIn Article
The journey continues; we'll get there together.
- Nelson Moe, Director of SLED Strategy, Iron Bow Technologies
