Join us at our next monthly post meeting where Ms. Charlene Watson, Senior Cybersecurity Operational Technology SME at Pond, will be presenting on “Operational Cybersecurity as a Contractual Weapon: Why 2026 may break unprepared A/E/C Design Teams and Contractors”
**This will be a Virtual ONLY event. MS Teams link will be sent after you RSVP to SAME.JENNIFER.REGEL@GMAIL.COM*
Abstract: The DoD has crossed a line that many AEs, primes, and specialty contractors have not yet recognized: Operational Technology (OT) cybersecurity is no longer policy guidance—it is enforceable design and contract criteria. Between late 2024 and 2025, updated UFCs and UFGSs formally embedded UFC 4-010-06 as a mandatory requirement across all facility-related control systems, including those historically treated as “low-risk” or “non-cyber” (housing, metering, telecom closets, utilities). This shift is structural, not incremental. At the same time, DoD-wide adoption of NIST SP 800-53 Rev 5, mandatory application of NIST SP 800-82 Rev 3, and the CMMC Final Rule (32 CFR Part 170) have collapsed the traditional separation between “IT cybersecurity” and facility design. Drawings, control logic, specifications, metering data, and FRCS documentation are now unambiguously CUI, placing design firms, electrical subs, BAS integrators, and vendors directly in scope for compliance and audit exposure. 2026 is shaping up to be the inflection point in time for enforcement. Projects will increasingly fail at 65–95% design review, RMF integration, commissioning, or turnover—not due to construction defects, but because cybersecurity was never designed. Consequences may begin to include redesign mandates for contractors and AEs, rejected ATOs, DFARS and CMMC violations for both government and industry, False Claims Act exposure, bid disqualification, and post-award contract failure. This session explains:
- What changed from 2016 to year’s end 2025
- Why enforcement is accelerating
- And how firms that do not adapt now will discover—too late—that OT cybersecurity has become a gatekeeping mechanism for DoD work.