Cybersecurity Maturity Model Certification
Cybersecurity Maturity Model Certification is now a live compliance pressure point for defense-adjacent supply chains operating across Trade and Geopolitical Risk. The U.S. Department of Defense finalized CMMC 2.0 rulemaking in October 2024, and the U.S. Department of State's Directorate of Defense Trade Controls is watching contractor compliance status as part of broader ITAR authorization reviews. Firms sourcing from or exporting to high-risk jurisdictions are mapping vendor access controls against CMMC Level 2 requirements before contract renewals trigger formal self-attestation obligations.
Watch
- CMMC 2.0 final rule: phased contract clause insertion beginning mid-2025
- ITAR authorization reviews now cross-referencing contractor CMMC self-attestation status
- Third-party assessor (C3PAO) capacity constraints delaying Level 2 certifications
- Bureau of Industry and Security export license conditions referencing cybersecurity control standards
- DoD CMMC Program Office guidance on foreign ownership, control, or influence (FOCI) mitigation plans
Recent material activity in Trade & Geopolitical Risk
-
OFAC replaces legal-services payment reporting requirement with recordkeeping obligation across multiple sanctions programs
On July 27, 2026, OFAC issued a final rule updating contact and website information across several sanctions-program regulations and amending general licenses that authorize payments for legal services from funds origina…
Read a full sample brief → -
USITC opens public interest comment period for Section 337 complaint targeting secondary cylindrical batteries and components
On July 27, 2026, the U.S. International Trade Commission received a complaint covering certain secondary cylindrical batteries, their components, and downstream products containing them, docketed as DN 3926. The Commiss…
Read a full sample brief → -
ITC institutes Section 337 investigation into imported dermatological treatment devices on four patent claims
The U.S. International Trade Commission instituted an investigation on July 27, 2026, following a complaint filed by Serendia, LLC of Los Angeles alleging patent infringement by importers of dermatological treatment devi…
Read a full sample brief → -
ITC institutes Section 337 investigation into adjustable child carriers on patent infringement complaint by Ergobaby
The U.S. International Trade Commission formally instituted an investigation on July 27, 2026, into alleged patent infringement by importers of adjustable child carriers, following a complaint filed by The Ergo Baby Carr…
Read a full sample brief → -
ITC institutes Section 337 investigation into imported silicon anode materials covering four active battery patents
The U.S. International Trade Commission instituted an investigation on July 24, 2026, based on a complaint filed June 18, 2026 by Sila Nanotechnologies and Georgia Tech Research Corporation. The complaint alleges patent …
Read a full sample brief → -
USTR publishes FY 2027 tariff-rate quota allocations for raw cane sugar, refined sugar, and sugar-containing products
On July 24, 2026, the Office of the United States Trade Representative issued FY 2027 in-quota quantity allocations for imported raw cane sugar, refined sugar (including specialty sugar), and sugar-containing products. T…
Read a full sample brief → -
EU Council implements updated Iran human rights sanctions designations under the 2011 restrictive measures framework
On 24 July 2026, the EU Council issued a Council Implementing Decision updating designations under the Iran human rights sanctions regime established in 2011. The decision adds or modifies listings of persons and entitie…
Read a full sample brief → -
EU Council implements updated Iran sanctions designations under Regulation 359/2011 effective 24 July 2026
On 24 July 2026, the EU Council issued an implementing regulation updating restrictive measures against specified persons, entities, and bodies under the Iran human rights sanctions framework. The regulation takes effect…
Read a full sample brief → -
EU Council adds new designations under Iran human rights sanctions regime effective 24 July 2026
On 24 July 2026, the EU Council issued an Implementing Decision updating designations under the Iran human rights restrictive measures framework. The decision adds or amends listings of persons and entities subject to as…
Read a full sample brief → -
EU Council adds new designations under Ukraine sanctions regime via Implementing Regulation of 23 July 2026
The EU Council adopted Implementing Regulation (EU) 2026/1843 on 23 July 2026, implementing the Ukraine territorial integrity sanctions framework. The regulation adds or amends designations, triggering immediate asset-fr…
Read a full sample brief →