In October 2022, the Cybersecurity and Infrastructure Security Agency (CISA) published an advisory highlighting advanced persistent threat (APT) activity observed on a defense organization's enterprise network.Our military secrets are not safe and there is an urgent need to improve the state of cybersecurity for this group, which often do not meet even the most basic cybersecurity requirements.”Improving Understanding of RegulationsA major factor in non-compliance appears to be a lack of understanding of government cybersecurity regulations, which was cited by 82% of respondents.Carl Herberger, vice president, security services at CyberSheath, told Infosecurity that a previous lack of enforcement of government regulations explains the compliance difficulties being faced, with businesses needing to adapt.It’s a story of the ‘haves’ and ‘have nots.’ Contractors who struggle have successfully grown their businesses without significant technology investments, have not taken advantage of cloud based economies of scale and therefore are quite far behind other industries and that learning curve is steep.”He argued that enforcement of the CMMC will ultimately improve compliance.Second, we need some kind of incentives, tax or otherwise, to propel contractors to make these investments quickly,” outlined Herberger."