Back to news

January 29, 2020 | International, C4ISR, Security

New cybersecurity standards for contractors could be finalized this week

The first version of the new cybersecurity requirements the Pentagon wants military contractors to follow could be finalized as soon as Jan. 31.

Katie Arrington, chief information security officer for the Office of the Under Secretary of Defense for Acquisition and the point person for the Cybersecurity Maturity Model Certification (CMMC), told an audience Jan. 28 that she will have the requirements by the end of the month.

The CMMC is a tiered cybersecurity framework that grades companies on a scale of one to five. A score of one designates basic hygiene and a five represents advanced hygiene. Arrington said Jan. 28 that the lowest level will become the default for Department of Defense contracts and will include basic tasks such as changing passwords.

Speaking at an event hosted by the law firm Holland and Knight, Arrington said the new standards won't be in effect overnight. The auditors and assessors who will grade companies need training and new contracts will be slowly phased in.

“The likelihood that any awards will be made until 2021 [of the certification] is, I would say, highly unlikely,” she said. She noted that companies are not required to have CMMC certification until the time of award. “You have a full year to get yourselves set, to get yourself in position.”

According to one slide in her presentation, all new contracts will have the requirements in fiscal year 2026. Arrington expects 1,500 companies to be certified by the end of 2021.

The requirements are expected to be free of jargon and overly technical language that can often make military documents befuddling.

“I asked if it could be created on an eighth grade reading level. Why? Because I'm not smart and I owned a small business and I fell prey to this,” she said. “I needed it to be in something that anybody could adapt to. We hear companies all the time say my nephew is doing my cybersecurity. I need your nephew to read what I need him to do.”

Arrington promised that the requirement would not become a simple checklist, because if it does “I've failed. We failed.”

Moreover, she suggested the framework be reevaluated at least once each year because cyber threats will continue to evolve.

https://www.fifthdomain.com/dod/2020/01/28/new-cybersecurity-standards-for-contractors-could-be-finalized-this-week/

On the same subject

  • COVID cash crunch still hurting small defense firms

    April 27, 2020 | International, Aerospace, Naval, Land, C4ISR, Security

    COVID cash crunch still hurting small defense firms

    By: Joe Gould WASHINGTON ― Cash flow for small defense contractors is continuing to suffer under the coronavirus pandemic, according to a survey by the National Defense Industrial Association. The survey echoes warnings from the Pentagon that these firms, part of a vast network of suppliers that makes up the defense-industrial base, are especially vulnerable. The Pentagon this week announced it will make $3 billion in new “progress payments" to increase cash flow to prime contractors, expecting the money would then trickle down. Of the NDIA survey respondents: 67 percent of companies with less than $1 million in annual revenue have seen a cash-flow disruption. 60 percent said the crisis has interfered with their cash flow. 60 percent expect to have long-term financial and cash-flow issues stemming from the crisis. 66 percent said accelerated payments from the Defense Department or prime contractors would be the most helpful step toward business recovery. L3Harris Technologies said this week it will issue more than $100 million in payments to its small suppliers. Lockheed Martin announced Friday it executed $256 million in accelerated payment toward its $450 million goal. Both of these promised followed the Pentagon's announcement this month that it will boost progress payment rates from 80 percent to 90 percent for large companies, and to 95 percent for small businesses. The payments are made to contractors, usually on a monthly basis, for costs incurred and work performed under a contract; a 90 percent rate means that if $1 million in expenses are submitted on the program, the Defense Department will reimburse $900,000. Sixty-six percent of the respondents also said it would help them to receive flexibility on the performance of their contracts. Seventy-two percent expected to avoid overruns on their firm fixed-price contracts as a result of disruptions caused by COVID-19. On Thursday, acquisitions officials with the Army said they expect costs to rise, and in response will guard against program slips and closely watch vulnerable lower-tier companies with less slack in their workforces. Pentagon officials anticipate workforce and supply chain issues will yield a three-month delay across the majority of its Major Defense Acquisition Program portfolio. “The supply chain does have some challenges, and that's probably where the vast majority of any slips would occur that are tied to individual companies,” said Bruce Jette, the Army's acquisition chief. “These companies are small, and if one person gets COVID in the company, the next thing you know you've lost 14 days with the company because everybody that didn't get it is in quarantine.” As of April 10, 769 small businesses responded to the NDIA survey. The number of companies expecting cash-flow disruptions was slightly lower last month, when 458 small businesses responded. Factoring into cash-flow problems, according to the NDIA, are cuts to billable hours, delayed payments from prime contractors and government customers, a lack of telework options or schedule flexibility in contracts, and shelter-in-place orders that prevent employees from working. Beyond revenue expectations, meeting contract obligations and access to capital are where small businesses are taking the biggest hits during the pandemic. Other areas of difficulty were workforce availability, access to secure facilities, contracting officers accessibility, clear information from the Defense Department, confidence in the supply chain, and stock and cost of materials. The technology and services sectors reported more disturbances from the crisis than the manufacturing sector, NDIA noted. And businesses with fewer than 50 employees are feeling the brunt harder than businesses with more than 500 employees. Defense Contract Management Agency data this week showed that 106 out of 10,509 primary Pentagon contractors are closed, and 68 companies closed and then reopened. Of 11,413 subcontractors, 427 were closed, with 147 having closed and reopened. https://www.defensenews.com/2020/04/24/covid-cash-crunch-still-hurting-small-defense-firms/

  • Garciga expected to be next US Army chief information officer

    June 26, 2023 | International, C4ISR

    Garciga expected to be next US Army chief information officer

    Leonel Garciga currently serves as the director for information management within the Army’s G-2 intelligence directorate.

  • Raytheon-FlexRadio team to develop airborne high-frequency radio

    September 5, 2019 | International, C4ISR

    Raytheon-FlexRadio team to develop airborne high-frequency radio

    FORT WAYNE, Ind., Sep. 4, 2019 /PRNewswire/ -- Raytheon (NYSE: RTN) will develop and qualify a high-frequency radio under a $36 million Project Agreement through an Other Transaction Agreement with Consortium Management Group. The OTA is on behalf of Consortium for Command, Control and Communications in Cyberspace, in support of requirements from the U.S. Air Force Life Cycle Management Center. The new radio will provide beyond line-of-sight, long distance communications for aircrews. "High-frequency radios provide the military with secure communications in an increasingly complex and congested threat environment," said Barbara Borgonovi, vice president of Integrated Communication Systems. "Raytheon's partnership with FlexRadio combines commercial innovation with advanced military hardening techniques to rapidly deliver a next-generation operational capability that supports strategic and tactical missions." The Raytheon-FlexRadio team is one of two recipients for this development program. After the 31-month period of performance, one team will be named to move on to production. "Worldwide high-frequency communications is what our commercial customers do every day using virtually every mode of operation and type of propagation," said Gerald Youngblood, CEO of FlexRadio. "Our partnership brings together the vast resources and experience of Raytheon in airborne tactical communications systems with FlexRadio's commercial off-the-shelf high-frequency Software Defined Radios to deliver a modular, extensible, and flexible communications platform for the warfighter." About CMG The mission of Consortium Management Group, Inc. on behalf of Consortium for Command, Control, and Communications in Cyberspace (C5) is to speed development of technologies to improve U.S. Government capabilities required to sustain U.S. military supremacy in weapon systems information technologies. For more information on CMG and its uniquely rapid, cost-effective and collaborative acquisition vehicle for companies, nonprofits and academic organizations seeking to do business with the Federal Government, contact Mary Reinecke at mary@cmgcorp.org, 202-466-4211 About FlexRadio FlexRadio Systems is a leader in technologically advanced software defined radio systems for the consumer, commercial and government markets. Founded in 2003, FlexRadio has customers in more than 30 countries with a wide range of products spanning consumer HF radio systems, government geolocation sensors and signals intelligence platforms. FlexRadio Systems is headquartered in Austin, Texas. For more information, please visit www.flexradio.com. About Raytheon Raytheon Company, with 2018 sales of $27 billion and 67,000 employees, is a technology and innovation leader specializing in defense, civil government and cybersecurity solutions. With a history of innovation spanning 97 years, Raytheon provides state-of-the-art electronics, mission systems integration, C5ITM products and services, sensing, effects and mission support for customers in more than 80 countries. Raytheon is headquartered in Waltham, Massachusetts. Follow us on Twitter. Media Contact B.J. Boling +1.972.952.4761 saspr@raytheon.com http://raytheon.mediaroom.com/2019-09-04-Raytheon-FlexRadio-team-to-develop-airborne-high-frequency-radio

All news