Tonsley’s Secure State certified by US Department of Defense

A Tonsley-based firm is helping SA companies gain access to the lucrative US defence industry after securing official cybersecurity certification.

Tonsley cybersecurity company Secure State is hoping to unlock opportunities for local companies seeking lucrative defence work in the US after securing official certification from the US Department of Defense.

The company’s founder and director Luke Smith said his company was the first outside of the US to be registered for Cybersecurity Maturity Model Certification (CMMC), allowing it to guide other South Australian and Australian companies through the strict cybersecurity requirements needed to gain access to the US Department of Defense supply chain.

Mr Smith said the endorsement would pave the way for local businesses looking to expand into the US defence industry.

“This is a game changer for companies here in South Australia in the local defence supply chain and around the country who are looking to tap into the US defence supply chain,” he said.

(L-R): Secure State directors Ben Hodge, Amy Smith and Luke Smith. Picture: Supplied by Secure State

“We’re incredibly proud that Secure State has earned this endorsement, which will allow us to assist clients, in turn, gain the required certification in the US, so that they can access what is a lucrative market, and one which is set to be increasingly important to the nation and our region on the back of the AUKUS agreement.”

The CMMC program applies to all contractors in the US Department of Defense supply chain, and is a certification model designed to ensure contractors secure highly sensitive information the same way that military departments and government agencies do.

Mr Smith said the assessment framework ensured contractors complied with standards published by the US National Institute of Standards and Technology.

He said Secure State was the first international Registered Provider Organisation to be able to offer consulting and implementation services for Australian businesses who require CMMC.

“If a local company in the defence supply chain aspires to be a US Department of Defense

contractor, the reality is CMMC certification is mandatory,” he said.

“It’s a cybersecurity framework that applies to all contractors and sub-contractors dealing with the Department of Defense, which works with over 300,000 contractors and sub-contractors – so it’s incredibly exciting that South Australian and Australian businesses could tap into this.”