CT manufacturing suppliers face costly cybersecurity rules to keep defense business

Meeting the requirements can determine whether they qualify for military contracts, including work they receive through larger defense companies.

To earn certification, NE-XT had to demonstrate that it met 110 cybersecurity requirements, known as controls.

Mumford said she has spent the last seven years helping small and medium-sized Connecticut companies meet the Pentagon’s cybersecurity requirements.

After CONNSTEP helped identify the company’s security gaps and develop an action plan, NEAP hired Saji Nair, a former business information security officer with GE Vernova, to carry out the work.

He pointed to Microsoft’s GCC High, a version of its Microsoft 365 platform designed to support government security requirements.