New Cybersecurity Certification Requirements

The Office for the Under Secretary of Defense and Sustainment (OUSD (A&S)) recently released its Cyber Security Maturity model Certification (CMMC). DoD stakeholders, University Affiliated Research Centers (UARCs), Federally Funded Research and Development Centers (FFRDCs) and the Defense Industrial Base (DIB) all had a hand in developing the CMMC model. This model measures cybersecurity maturity using five levels (from basic to advanced) and aligns a set of processes and practices with the type and sensitivity of the information to be protected and any associated threats to that information. (CMMC Model v1.0, January 30, 2020)

DoD’s CMMC enhances the protection of:

  • Federal Contract Information (FCI) provided or generated by the government, but not intended for public release
  • Controlled Unclassified Information (CUI), which requires safeguarding or dissemination consistent with laws, regulations and government-wide policies. (ibid)

The CMMC model includes the safeguarding requirements for FCI spelled out in FAR clause 52.204-21 and the security requirements for CUI stated in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 per DFARS clause 252.204-7012 [3,4,5].

Included in the CMMC model is a certification piece verifying the implementation of cybersecurity maturity measure processes and practices. This is intended to deliver assurance to the DoD that contractors and subcontractors can sufficiently protect CUI at a level equal to the risk. (ibid)

To obtain a full overview of the CMMC Model, domains, practices, and processes, please review the Cybersecurity Maturity Model Certification.

Have questions about the effect on your current contract or one in works? Give us a call.

Phase 2: Resistance is Futile

Although we covered this last month, it’s worth another review¬† as GSA moves to phase two of the MAS consolidation.

As you know, GSA is merging the Multiple Award Schedule (MAS) program contracts from 24 different schedules into one. Notices of changes to terms and conditions for current contract holders under the MAS program should be received by contract holders in the coming months.

The consolidated schedule makes it simpler for the government to make purchases and will roll out in three parts:

  1. Creation of a new contract vehicle for all future acquisitions
  2. Bring current contract holders onto the new consolidated schedule
  3. Consolidate those businesses that have multiple contracts across many schedules(Federal Times January 31, 2020)

Terms and conditions are being standardized and all current contract holders and contractors, placed on the consolidated schedule, must respond to them by July 31, 2020. (ibid)

Questions about the consolidation and how you and your contracts are affected? Give us a call.

Make a pitch, win a prize

In 2018, the Army acquisition office set up the Expeditionary Technology Search or xTechSearch. The Army has continued to use these pitch days to find small and nontraditional businesses with useful technologies. (Federal News Network, January 16, 2020)

In a pitch search, businesses propose their new technologies and ideas to the government in phases. Phase One is a white paper. Generally, 50 companies make it through the white paper phase and onto phase two. Companies chosen to move onto phase two receive a $5,000 prize which may be used to help defer the cost of engaging with government. The second phase is a 15-minute in-person pitch to a panel. Up to 24 companies can move from phase two to phase three, with the highest-ranking company receiving a $10,000 prize. Phase three participants are invited to a conference and provided exhibit space and asked to provide a proof-of-concept demonstration. Up to 12 participants move forward, with the highest-ranking business plan and proof-of-concept demonstration plan to receive a prize of $120,000. The technology solution and transition plans are presented during phase four, the final phase. Currently, xTechSearch 4.0 is in its second phase.

The grand prize winner will be announced in October at the Association of the United States Army annual meeting in Washington, DC. The grand prize winner receives a prize of $250,000, similar to the size of a Small Business Innovation Research grant.

Want to learn more about pitch days? Give us a call.