SGT NCAM Infographic

Stay Cyber Safe: Protecting Our Data and Contracts

National Cybersecurity Awareness Month

Why Cybersecurity Matters to You

Why Are We a Target?

Insider Threats: It Could Happen Here

Securing Our Supply Chain

Stay Compliant, Stay Secure

Beware of Ransomware

Phishing Scams: Don’t Take the Bait

The Future of Cybersecurity

Ransomware: A Growing Threat

Ransomware attacks on government contractors increased by 80% in 2023 (Source: FBI). Some of these attacks result in critical project delays or breaches of sensitive government data.

Why It’s Important:

What is Ransomware?

Ransomware is malware designed to encrypt your data, making it inaccessible until a ransom is paid. Government contractors are increasingly targeted as cybercriminals seek to disrupt operations and extract payments.

Insider threats are responsible for 34% of all data breaches in the government contracting sector (Source: Ponemon Institute). This includes both malicious intent and accidental security lapses by well-meaning employees.

Why It Matters:

What is an Insider Threat?

An insider threat refers to any security risk that comes from within the organization. This could be an employee, contractor, or business associate who has inside information about the organization’s security practices, data, and computer systems.

According to a 2022 report, 43% of cyberattacks on contractors were initiated via supply chain vulnerabilities, a method favored by state-sponsored attackers like those linked to China and Russia.

In 2021, 73% of cyberattacks involved a vulnerability within the supply chain (Source: Accenture).

Why Supply Chain Security is Critical

Your suppliers and vendors could be a weak link in the cybersecurity chain. Hackers often target smaller companies within the supply chain, knowing they might not have the same level of cybersecurity defenses.

Why You Should Care:

A breach can jeopardize national security, lead to loss of contracts, or expose sensitive information. Recent data shows that 50% of government contractors have experienced at least one cyberattack in the past year (Source: CISA).

What’s at Stake?

Government contractors handle sensitive information such as classified data, defense strategies, and intellectual property. This makes contractors a primary target for cybercriminals seeking access to this valuable data through security gaps.

The Future of Cybersecurity: AI and Automation

What’s Next in Cybersecurity?

As cyberattacks become more sophisticated, the government contracting industry is increasingly turning to AI (Artificial Intelligence) and automation to predict and respond to threats in real-time.

What You Can Expect:

• More frequent use of AI to monitor network traffic and detect anomalies.
• Automated systems for responding to lower-level threats, freeing up human resources for more complex tasks.
• Stay engaged with training opportunities on how to use and interact with these advanced tools, ensuring a safer and more secure work environment.

Failing to comply can result in the loss of government contracts, hefty fines, or reputational damage. The Department of Defense is enforcing CMMC compliance across all contractors by 2026.

Why It’s Important:

In 2022, 34% of contractors faced compliance-related issues or fines after cybersecurity audits revealed noncompliance with federal requirements,

Compliance with NIST SP 800-171 & CMMC

What Are These Standards?

NIST SP 800-171 and Cybersecurity Maturity Model Certification (CMMC) are mandatory for government contractors handling Controlled Unclassified Information (CUI). These frameworks set out cybersecurity practices that contractors must follow to protect federal information systems and networks.

3,100 incidents

2023

2,500 incidents

2022

2,200 incidents

2021

1,850 incidents

2020

1,540 incidents

2019

1,300 incidents

2018

Timeline

SUBTITLE HERE

20XX

SUBTITLE HERE

20XX

SUBTITLE HERE

20XX

SUBTITLE HERE

20XX

SUBTITLE HERE

20XX

Cyberattacks on contractors rose by 24% in 2023 alone (Source: DHS). The increase in remote work has also led to a rise in vulnerabilities, especially for organizations that don’t have stringent security measures in place.

Why You Should Care:

The Growing Threat

As attackers become more sophisticated, government contractors are increasingly targeted due to the critical data they manage for federal clients.

In 2023, 75% of defense contractors reported an increase in phishing attacks targeting their employees.

Phishing remains one of the most common and successful attack methods. Over 90% of cyberattacks on contractors start with a phishing email (Source: Verizon DBIR). Recent attacks have compromised entire networks, leading to severe data breaches.

Why It’s a Threat:

What is Phishing?

Phishing scams involve tricking individuals into providing sensitive information like usernames, passwords, or credit card details by pretending to be a trustworthy entity, such as a coworker or federal client.