17 juin 2019 | International, Sécurité, Autre défense

How contractors can guard against cyber intrusions

By:

Contractors, facing an increasing barrage of cyber intrusions by foreign entities, should protect themselves using traditional regulatory approaches but also new techniques such as blockchain and artificial intelligence, according to a new report from Deloitte.

As companies in the defense supply chain began following the Defense Federal Acquisition Regulation Supplement (DFARS) cybersecurity regulations and the Department of Defense started to assess how adoption went, “we started to form our own ideas on what we see as emerging issues and solutions that [can] ... improve the cybersecurity posture against our enemies,” Jeff Lucy, managing director in cyber risk services practice at Deloitte, told Fifth Domain.

On the regulatory side, the report, titled “Third-party risk management: Cybersecurity in the Defense Industrial Base,” says prime contractors must comply with the defense regulations measuring their companies' compliance with national cybersecurity standards. They should also create awareness among their subcontractors and smaller companies by providing training. Third, primes should create third party assessment programs for performing cybersecurity evaluations of their suppliers.

However, the paper also suggests non-regulatory approaches, including automating supply chain functions, integrating blockchain to boost cybersecurity and using artificial intelligence to gain real time visibility into the threat landscape.

Lucy noted that the Pentagon is beginning to take these regulations seriously and the problems aren't going away.

“In 2019 we've seen that the DoD has started to move forward, start to take action to enforce their expectations around the DFARS requirements,” he said. “It's clear now with the steps that we're seeing with [Undersecretary of Defense for Acquisition and Sustainment] Ellen Lord getting the [Defense Contract Management Agency] on board to start auditing the suppliers processes for assessing their suppliers.”

Cyber intrusions into the supply chains of defense contractors have become more prevalent in recent years. In a recent example, the Chinese government was blamed for a series of hacks and while the information they stole was not technically classified, in aggregate, it was considered to be quite damaging to the U.S.

This year's Department-wide annual report on Chinese military activity included a new section highlighting that China's exfiltration of sensitive military information from the defense industrial base could allow it to gain a military advantage.

Ultimately, Lucy said the solution to the supply chain and cybersecurity for the defense industrial base is manageable.

“Most primes, from what I've seen with interactions with our customers, have put some level of the basic elements for a supplier assessment program in place already,” he said. “They've done some level of canvassing their suppliers, critical suppliers, taking a risk based approach to understand whether their suppliers are in adopting” standards.

https://www.fifthdomain.com/industry/2019/06/14/how-contractors-can-guard-against-cyber-intrusions/

Sur le même sujet

  • Contract Awards by US Department of Defense - September 5, 2019

    6 septembre 2019 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - September 5, 2019

    ARMY Ensign-Bickford Aerospace & Defense Co., Simsbury, Connecticut (W52P1J-19-D-0065); and Chemring Ordnance Inc., Perry, Florida (W52P1J-19-D-0066), will compete for each order of the $320,000,000 firm-fixed-price contract for the Anti-Personnel Obstacle Breaching System. Bids were solicited via the internet with two received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 4, 2024. U.S. Army Contracting Command, Rock Island Arsenal, Illinois, is the contracting activity. Honeywell International Inc., Clearwater, Florida, was awarded a $37,851,458 firm-fixed-price contract for procurement of the commercial Tactical Advanced Land Inertial Navigator 5000 Inertial Navigation Unit. Bids were solicited via the internet with one received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 8, 2023. U.S. Army Contracting Command, Warren, Michigan, is the contracting activity (W56HZV-19-D-0082). MW Builders, Pflugerville, Texas, was awarded a $30,477,000 firm-fixed-price contract to construct a completed fully functional Tactical Equipment Maintenance Facility. Bids were solicited via the internet with five received. Work will be performed in Fort Hood, Texas, with an estimated completion date of June 4, 2021. Fiscal 2018 military construction funds in the amount of $30,477,000 were obligated at the time of the award. U.S. Army Corps of Engineers, Fort Worth, Texas, is the contracting activity (W9126G-19-C-0119). General Atomics Aeronautical Systems Inc., Poway, California, was awarded a $29,316,074 modification (P00016) to contract W58RGZ-19-C-0027 for performance based logistics support services for the MQ-1C Gray Eagle unmanned aircraft system. Work will be performed in Poway, California, with an estimated completion date of Sept. 4, 2020. Fiscal 2019 operations and maintenance, Army funds in the amount of $6,469,479 were obligated at the time of the award. U.S. Army Contracting Command, Redstone Arsenal, Alabama, is the contracting activity. Ace Precision Machining Corp., Oconomowoc, Wisconsin, was awarded a $25,000,000 firm-fixed-price Foreign Military Sales (Kuwait and Saudi Arabia) contract for hot section parts for the Advanced Gas Turbine-1500 tank engine. Bids were solicited via the internet with one received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 4, 2024. U.S. Property and Fiscal Officer, Kansas, is the contracting activity (W912JC-19-D-5712). Nakasato Contracting LLC,* Honolulu, Hawaii, was awarded a $14,200,000 firm-fixed-price contract for the construction of an Operational Readiness Training Complex (Barracks) at Pohakuloa Training Area, Hawaii. Bids were solicited via the internet with six received. Work will be performed in Pohakuloa Training Area, Hawaii, with an estimated completion date of Dec. 1, 2021. Fiscal 2018 military construction funds in the amount of $14,200,000 were obligated at the time of the award. U.S. Army Corps of Engineers, Honolulu, Hawaii, is the contracting activity (W9128A-19-C-0006). GP Strategies Corp., Columbia, Maryland, was awarded a $12,693,583 cost-plus-fixed-fee contract for Life Cycle Logistics Support and Chemical Demilitarization Training Facility operations and maintenance in support of the U.S. Army Chemical Materials Activity, Recovered Chemical Materiel Directorate. Bids were solicited via the internet with one received. Work locations and funding will be determined with each order, with an estimated completion date of Sept. 23, 2020. U.S. Army Contracting Command, Rock Island Arsenal, Illinois, is the contracting activity (W52P1J-15-D-0087). General Dynamics Information Technology, Fairfax, Virginia, was awarded a $7,237,568 modification (P00017) to contract W81XWH-17-F-0078 for support services for the U.S. Army Medical Materiel Development Activity. Work will be performed in Fort Detrick, Maryland, with an estimated completion date of Sept. 30, 2022. Fiscal 2019 research, development, test and evaluation funds in the amount of $7,237,568 were obligated at the time of the award. U.S. Army Medical Materiel Development Activity, Fort Detrick, Maryland, is the contracting activity. NAVY Hexagon U.S. Federal Inc., Huntsville, Alabama, is being awarded a $107,067,910 firm-fixed-price, cost-plus-fixed-fee, and cost-only indefinite-delivery/indefinite-quantity (IDIQ) contract for surface ship Situational Awareness, Boundary Enforcement and Response (SABER) qualification testing and non-recurring engineering, computing hardware production, land-based site equipment, spare parts and engineering services. This IDIQ will support multiple program executive offices and ship programs. Work under this IDIQ contract will be performed in Huntsville, Alabama, and is expected to be completed by September 2023. No funding will be obligated with this IDIQ award; funds will be obligated with each order. This contract was competitively procured via the Federal Business Opportunities website using full-and-open competition procedures, with two offers received. This competition was conducted under the authority 10 U.S. Code 2304, which states that contracting officers shall promote and provide for full and open competition. Support under this IDIQ is for SABER systems to be installed on various surface ships. This procurement includes shipsets and test site sets, technical data, associated engineering services and spares. The Naval Sea Systems Command, Washington, District of Columbia, is the contracting activity (N00024-19-D-4114). DynCorp International LLC, Fort Worth, Texas, is being awarded an $88,730,512 modification (P00052) to a previously awarded, firm-fixed-price, indefinite-delivery/indefinite-quantity contract (N00019-15-D-0003). This modification provides organizational, intermediate, and depot-level maintenance and logistics support for 16 T-34, 54 T-44, and 287 T-6 aircraft. Work will be performed at the Naval Air Station (NAS) Corpus Christi, Texas (47%); Whiting Field, Florida (42%); NAS Pensacola, Florida (9%); and various locations through the continental U.S. (2%), and is expected to be completed in March 2020. No funds will be obligated at time of award, funds will be obligated on individual orders as they are issued. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. General Electric Aviation Systems, Vandalia, Ohio, is being awarded a $56,594,358 modification (P00006) to a previously awarded firm-fixed-price contract (N00019-18-C-0004). This modification procures 320 Generator Conversion Unit (GCU) G3 to G4 conversion retrofit kits; 547 GCU G4 units; wiring harnesses; and associated technical, financial and administrative data in support of F/A-18E/F and E/A-18G aircraft. Work will be performed Vandalia, Ohio, and is expected to be completed in January 2022. Fiscal 2019 aircraft procurement (Navy) funds in the amount of $56,594,358 will be obligated at time of award, none of which will expire at the end of the current fiscal year. The Naval Air Systems Command, Patuxent River, Maryland, is the contracting activity. PAE Applied Technologies LLC, Arlington, Virginia, is being awarded a $52,268,318 modification to previously awarded contract N66604-05-C-1277 to reinstate 6 month periods of performance and increase target cost for Atlantic Undersea Test and Evaluation Center. Atlantic Undersea Test and Evaluation Center (AUTEC) is the Navy's large-area, deep-water, undersea test and evaluation range. Underwater research, testing, and evaluation of anti-submarine weapons, sonar tracking and communications are the predominant activities conducted at AUTEC. The contractor performs services required to perform AUTEC range operations and maintenance of facilities and range systems. In addition, the contractor is responsible for operating a self-sufficient one square mile Navy outpost. This modification increases the value of the basic contract by $52,268,318. The new total value is $853,017,162. Work will be performed in Andros Island, Commonwealth of the Bahamas (80%); and West Palm Beach, Florida (20%), and is expected to be complete by March 2020. No funding will be obligated at time of this modification award. The Naval Undersea Warfare Center, Newport Division, Newport, Rhode Island, is the contracting activity. Pacific Shipyards International, Honolulu, Hawaii, is being awarded a $32,110,694 firm-fixed-price contract for the execution of USS Michael Murphy (DDG 112) fiscal 2020 selected restricted availability. This is a Chief of Naval Operations scheduled selected restricted availability. This availability will include a combination of maintenance, modernization and repair of USS Michael Murphy. The purpose is to maintain, modernize, and repair the USS Michael Murphy. This is a “short-term,” non-docking availability restricted to the vessel's homeport. Pacific Shipyards International will provide the facilities and human resources capable of completing, coordinating and integrating multiple areas of ship maintenance, repair, and modernization for USS Michael Murphy. Work will be performed in Pearl Harbor, Hawaii, and is expected to be complete by April 2020. This contract includes options which, if exercised, would bring the cumulative value to $36,916,612, and be complete by April 2020. Fiscal 2019 operations and maintenance (Navy) funding in the amount of $32,110,694 will be obligated at time of award and expire at the end of the current fiscal year. This contract was competitively solicited via the Federal Business Opportunities website with one offer received in response to solicitation number N00024-19-R-4404. The Naval Sea Systems Command, Washington, District of Columbia, is the contracting activity (N00024-19-C-4404). Utah State University Research Foundation - Space Dynamics Laboratory, North Logan, Utah, is being awarded a $24,999,998 cost-plus-fixed-fee contract for electro-optical research and development. The contract provides research and development efforts in the areas of exploitation software and advanced sensor and processing technologies including digital cameras, processing, compression, command and control, analog systems, power, communications, telemetry, radio frequency/optical sensor payloads and electromechanical systems/support. The maximum total value for this 24 month contract, with no options, is $24,999,998. Work will be performed in North Logan, Utah, and is expected to be complete by Sept. 5, 2021. Fiscal 2019 working capital funds (Navy) in the amount of $5,793,000 will be obligated at time of award and will not expire at the end of the current fiscal year. In accordance with 10 U.S. Code 2304(c)(3)(B), as stated in Federal Acquisition Regulation 6.302-3, this contract was not competitively procured. Only one responsible source and no other supplies or services will satisfy agency requirements. The U.S. Naval Research Laboratory, Washington, District of Columbia, is the contracting activity (N00173-19-C-2013). PrimeTech International Inc.,* North Kansas City, Missouri, is being awarded a $12,457,597 firm-fixed-price, time-and-materials six-month bridge contract for logistics services to manage, support, and operate the Marine Corps Consolidated Storage Program warehouse network. Work will be performed in Barstow, California (23%); Camp Lejeune, North Carolina (18%); Camp Pendleton, California (13%); Okinawa, Japan (10%); Miramar, California (9%); Camp Geiger, North Carolina (7%); Twenty-nine Palms, California (4%); Cherry Point, North Carolina (4%); Kaneohe Bay, Hawaii (3%); Yuma, Arizona (2%); Beaufort, South Carolina (2%); Iwakuni, Japan (2%); New River, North Carolina (2%); and Bridgeport, California (1%). Work is expected to be completed March 2020. Fiscal 2019 operation and maintenance funds (Marine Corps) in the amount of $12,457,597 will be obligated at the time of award and will expire at the end of the current fiscal year. This contract was not competitively procured in accordance with 10 U.S. Code 2304(c) (1) - only one responsible source and no other supplies or services will satisfy agency requirements. Marine Corps Logistics Command, Albany, Georgia, is the contracting activity (M67004-19-P-2010). Oceanit Laboratories Inc.,* Honolulu, Hawaii, is being awarded a $9,500,000 cost-plus-fixed-fee delivery order (N68335-19-F-0393) against a previously awarded basic ordering agreement (N68335-16-G-0028) in support of the deputy assistant secretary of defense for emerging capability and prototype technology. This order is for a Small Business Innovation Research Phase III effort for the continued development of a Prototype Test Unit (PTU) sensor for integration, test and demonstration with a non-kinetic system. The PTU sensor will incorporate the necessary hardware and software subsystems to demonstrate the viability of a novel defensive capability in an at-sea-demonstration aboard a Navy ship. Work will be performed in Honolulu, Hawaii, and is expected to be completed in September 2021. Fiscal 2018 and 2019 research, development, test and evaluation (Navy) funds in the amount of $9,500,000 will be obligated at time of award, $7,500,000 of which will expire at the end of the current fiscal year. The Naval Air Warfare Center, Aircraft Division, Patuxent River, Maryland, is the contracting activity. DEFENSE LOGISTICS AGENCY UPDATE: Maryland Industrial Trucks, Linthicum Heights, Maryland (SPE8EC-19-D-0043), has been added as an awardee to the multiple award contract for commercial trucks and trailers, issued against solicitation SPE8EC-17-R-0008, announced April 20, 2017. DEFENSE INFORMATION SYSTEMS AGENCY Booz Allen Hamilton, McLean, Virginia, was awarded a firm-fixed-price, single-award, indefinite-delivery/indefinite-quantity (ID/IQ) contract, HC1047-19-D-5001, in support of the Defense Information Systems Agency's (DISA) Defense Collaboration Services (DCS) program. The primary place of performance will be at DISA, Fort Meade, Maryland. The ID/IQ ceiling value is $49,500,000, with the minimum guarantee of $5,000 funded by fiscal 2019 operations and maintenance funds. Proposals were solicited via FedBizOpps (FBO.gov), and one proposal was received. The ordering period is Sept. 8, 2019, through Sept. 7, 2024. The Defense Information Technology Contracting Organization, National Capital Region, is the contracting activity (HC1047-19-D-5001). *Small Business https://www.defense.gov/Newsroom/Contracts/Contract/Article/1953308/source/GovDelivery/

  • After SolarWinds, US needs to toughen cyber defenses, says Microsoft president

    24 février 2021 | International, C4ISR, Sécurité

    After SolarWinds, US needs to toughen cyber defenses, says Microsoft president

    Microsoft Corp. President Brad Smith asked the Senate Armed Services Committee to picture the danger from a cyberattack on the water supply or other national infrastructures.

  • Contract Awards by US Department of Defense - October 19, 2018

    21 octobre 2018 | International, Aérospatial, Naval, Terrestre, C4ISR, Sécurité

    Contract Awards by US Department of Defense - October 19, 2018

    AIR FORCE Raytheon Missile Systems, Tucson, Arizona, has been awarded a $62,016,768 cost-plus-incentive-fee option (P00012) to contract FA8675-16-C-0044 for the Advanced Medium Range Air to Air Missile (AMRAAM) program. This modification provides for the exercise of options for Phase 5 activities and foreign military sales (FMS) drawings for the form, fit and function refresh of the AMRAAM guidance section. Work will be performed in Tucson, Arizona, and is expected to be completed by Dec. 21, 2020. This contract involves FMS to Norway, Turkey, Japan, Romania, and Australia. FMS funds in the amount of $6,072,542 are being obligated at the time of award. Air Force Life Cycle Management Center, Eglin Air Force Base, Florida, is the contracting activity. Ball Aerospace & Technologies Corp., Boulder, Colorado, has been awarded a ceiling $36,043,319 cost-reimbursement type contract for Solid State Laser Effects and Modeling. This contract provides for developing innovative diagnostics/test methods, increasing fidelity, realism and confidence of predictive models, measuring and consolidating laser vulnerability data, and working synergistically with tri-service for high energy laser system research. Work will be performed at Kirtland Air Force Base, New Mexico, and is expected to be completed by Oct. 24, 2022. This contract award is the result of a competitive acquisition and one offer was received. Fiscal 2018 research, development, test and evaluation funds in the amount of $100,000 will be obligated at the time of award. Air Force Research Laboratory, Kirtland AFB, New Mexico, is the contracting activity (FA9451-19-C-0001). Infinity Systems Engineering LLC, Colorado Springs, Colorado, has been awarded a $22,653,934 firm-fixed-price contract for Global Positioning Systems Engineering, Analysis & Remote Site Sustainment II. The contract provides organizational maintenance and operational support services to the operational unit that will include remote site technicians, network administrative officers and operations support. Work will be performed in Colorado Springs, Colorado, and is expected to be completed by Dec. 31, 2025. This award is the result of a competitive acquisition and three offers were received. Fiscal 2019 operations and maintenance funds in the amount of $2,565,094 are being obligated at the time of award. Space and Missile Systems Center, Peterson Air Force Base, Colorado, is the contracting activity (FA8823‐19‐C‐0001). Advanced Electronics Co., Riyadh, Kingdom of Saudi Arabia, has been awarded a $9,437,259 modification (FA8505-11-D-0002-0006-12) to contract FA8505-11-D-0002 for the Royal Saudi Air Force Electronic System Test Set. The contract modification incorporates a 15-month extension in order to allow for the completion of the Royal Saudi Air Force Electronic System Test Sets configuration upgrade. Work will be performed Huntsville, Alabama and in the Kingdom of Saudi Arabia. It is expected to be completed by Dec. 28, 2019. This modification involves foreign military sales for the Kingdom of Saudi Arabia. Foreign military sales funds in the amount of 9,437,259 are being obligated at the time of award. Total cumulative face value of the contract is $28,518,831. Air Force Life Cycle Management Center, Robins Air Force Base, Georgia, is the contracting activity. Honeywell International Inc. Aerospace, Albuquerque, New Mexico, has been awarded a $7,838,175 firm-fixed-priced order, for the repair and upgrade of the C-5M Super Galaxy's Versatile Integrated Avionics/Avionics Integrated Units (VIA/AIU). This order provides for the repair and upgrade of 85 of the existing 903 and 904 configuration VIA/AIUs to the 905 configuration. The C-5M VIA/AIU repair and upgrade effort is a key component to the overall Core Mission Computer/Weather Radar aircraft modification/installation kit. Work will be performed in Albuquerque, New Mexico, and is expected to be completed by June 14, 2020. This award is the result of a sole-source acquisition. Fiscal 2017 aircraft procurement funds in the amount of $7,146,972; and fiscal 2018 aircraft procurement funds in the amount of $691,203 are being obligated at the time of award. Air Force Life Cycle Management Center, Wright-Patterson Air Force Base, Ohio, is the contracting (FA8625-18-F-6801). DEFENSE LOGISTICS AGENCY Rocky Brands Inc., Nelsonville, Ohio, has been awarded a maximum $20,566,240 modification (P00005) exercising the second one-year-option period of one-year base contract SPE1C1-17-D-1004 with four one-year option periods for hot-weather combat boots. This is a firm-fixed-price, indefinite-delivery/indefinite-quantity contract. Locations of performance are Ohio and Puerto Rico, with an Oct. 20, 2019, performance completion date. Using military service is Army. Type of appropriation is fiscal 2019 defense working capital funds. The contracting activity is the Defense Logistics Agency Troop Support, Philadelphia, Pennsylvania. ARMY Science Applications International Corp., Reston, Virginia, was awarded a $13,567,362 firm-fixed-price contract for life cycle management of programs within multiple ammunition product lines. Bids were solicited via the internet with one received. Work locations and funding will be determined with each order, with an estimated completion date of Dec. 4, 2023. U.S. Army Contracting Command, New Jersey, is the contracting activity (W15QKN-19-D-0002). Fabritex Inc.,* Hartwell, Georgia, was awarded a $9,257,500 firm-fixed-price contract for non-corrosive 16-block wire mesh for the manufacture and assembly of articulated concrete mattress squares. Bids were solicited via the internet with one received. Work will be performed in Hartwell, Georgia, with an estimated completion date of Oct. 18, 2023. Fiscal 2019 operations and maintenance Army funds in the amount of $9,257,500 were obligated at the time of the award. U.S. Army Corps of Engineers, Memphis, Tennessee, is the contracting activity (W912EQ-19-C-0001). *Small Business https://dod.defense.gov/News/Contracts/Contract-View/Article/1667326/source/GovDelivery/

Toutes les nouvelles