Georgia Tech Procurement Assistance Center

Georgia Defense Industrial Base Task Force hosting CMMC summit May 18th

By

No matter where you’re at on the CMMC journey, there are resources to support you.  Join the Georgia Defense Industrial Base Task Force (GDIBT) – a partnership between the Georgia Department of Economic Development (GDEcD), Georgia Cyber Center, and the Technology Association of Georgia (TAG) on May 18 from 9 a.m. – 12: 30 p.m. to map out your path forward.

Join local businesses as they share their experiences with CMMC and answer your questions.  CMMC-AB Marketplace providers and cyber professionals explain how their tools and ‘turn-key’ services support your CMMC journey.  Chart your course further with a training session focused on NIST 800-171 and more.

PRICE: FREE

FORMAT: VIRTUAL

Event Contact:
Heather Maxfield
(404) 920-2022
Send Email

Date and Time:  Tuesday, May 18, 2021 (9:00 AM – 12:30 PM) (EDT)

Registration Link:  https://members.tagonline.org/calendar/Details/cmmc-summit-337318?sourceTypeId=Hub

AGENDA

9:00 – 9:05 AM                     Larry Williams, President and CEO, TAG 

9:05 – 9:10 AM                     Eric Toler, Executive Director, Georgia Cyber Center

9:10 – 9:20 AM                     Keynote – Dr. Joye Purser, Regional Director—Region 4, Cybersecurity and Infrastructure Security Agency (CISA)

9:20 – 10:20 AM                   Peer Panel, Moderated by Roy Hadley, Adams and Reese, LLP

  • Allison Giddens, Co-President, Win-Tech
  • Allison Stewart, Compliance Analyst & Training, Top Flight
  • Miguel Garcia, AMRAAM Project Manager / Business Development, Collins Manufacturing

10:20 – 10:35 AM                 Break 

10:35 – 11:35 AM                 UGA SBDC “NIST 800-171 + Beyond” Training

  • Mark Lupo, UGA SBDC

11:35 –12:25 PM                  ‘Solutions’ Provider Panel, Moderated by Roy Hadley, Adams and Reese, LLP

  • Horacio Maysonet, President & CEO, Cyber Security Solutions
  • Chris Silvers, Founder and Principal Consultant, CG Silvers
  • Chris Hallenbeck, Chief Information Security Officer, Americas Tanium

12:30 PM                               Closing, Cassia Baker, Georgia Department of Economic Development Center of Innovation for Aerospace 

CMMC: Some frequently asked questions

By

The National Defense Industrial Association has held a series of webinars for its members focusing on the latest news coming out of the Defense Department on the Cybersecurity Maturity Model Certification.

NDIA Senior Vice President of Strategy and Policy Wes Hallman, Director of Regulatory Policy Nick Jones, and Principal Director of Strategy Corbin Evans led a webinar on Feb. 18 and answered some written questions posed by members afterward.

The next members-only webinar is scheduled for April 15.

The questions and answers from that previous session have been edited for clarity and length.

Continue reading at:  National Defense Magazine

CMMC is coming: How government contractors can prepare

By

People like to say that cybersecurity threats are constantly evolving.  So perhaps it’s fitting that cybersecurity compliance is undergoing a significant evolution of its own this year, too.

That evolution is the arrival of the Cybersecurity Maturity Model Certification, more commonly abbreviated as CMMC.  CMMC is a new standard for cybersecurity that the U.S. Defense Department is rolling out to defense contractors, requiring companies to enforce new oversight across their operations and down their supply chains.

The Defense Department’s goal is to make CMMC a standard clause for all defense contracts by 2026, including higher education institutions that do government-sponsored defense research; and professional services firms that provide consulting to the Defense Department.

Even if you are not a prime defense contractor, CMMC is still likely to join your list of compliance obligations sometime soon.

Continue reading at:  Risk & Compliance Matters

CMMC announces new advisory council to collect industry feedback

By

The governing body for the Defense Department’s cybersecurity compliance program has launched a new organization charged with getting defense contractors’ feedback on the implementation process.

The CMMC advisory council will “provide a crystallizing, unified voice” for defense contractors seeking certification and “supply key feedback, input, and recommendations for implementing CMMC” said Karlton Johnson, the chair of the CMMC Accreditation Body.

The council is separate from the board of directors and will operate between the defense industry base, the CMMC Accreditation Body, and the Defense Department.

Continue reading at:  FCW

What is CUI – The devil is in the details

By

Controlled unclassified information (CUI) is defined, in part, as “information the government creates or possesses, or that an entity creates or possesses for or on behalf of the government, that a law, regulation, or government-wide policy requires or permits an agency to handle using safeguarding or dissemination controls.”

Despite this seemingly straightforward definition, identifying CUI has been a challenge for the government and contractors.  This challenge has become particularly evident as the Defense Department implements its interim rule to the Defense Federal Acquisition Regulation Supplement to protect CUI through a mandatory Defense Department assessment methodology and through a slow rollout of its Cybersecurity Maturity Model Certification program.

Continue reading at:  National Defense Magazine

DoD initiates CMMC review

By

When the Defense Department confirmed that Deputy Secretary Kathleen Hicks decided to review the Cybersecurity Maturity Model Certification (CMMC) program, initial reactions were mixed.

Some experts said this is a significant sign that the Biden administration wants to rethink major aspects of CMMC.

Others say it’s a perfunctory review and one any new administration would undertake given the importance of the program.  They say these reviews likely are happening across DoD.

Continue reading at:  Federal News Network

See also this article in FedScoop:  CMMC is under an internal DoD review

Matthew Travis hired as CMMC Accreditation Body CEO

By

The third-party board implementing the Department of Defense‘s new cybersecurity standards for contractors finally has a CEO after months of searching.

Matthew Travis, a former deputy director of the Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency, has been tapped to lead the Cybersecurity Maturity Model Certification Accreditation Body (CMMC-AB) — the organization tasked with overseeing the ecosystem of assessors who will inspect the IT networks of the 300,000 companies in the defense industrial base.

Travis will lead day-to-day operations of the CMMC-AB, a job that has largely been filled by the AB’s board of directors in the nearly 15 months since it was incorporated.

Continue reading at:  FedScoop

Tips to prepare for a first CMMC assessment

By

With cyberterrorism acknowledged as an ever-increasing threat to national security, it came as no surprise when the Defense Department last year introduced a more robust cybersecurity framework in the form of the Cybersecurity Maturity Model Certification (CMMC).

Businesses must meet one of five levels of certification, with the new standard already required for certain defense contracts, while the planned five-year rollout aims to ensure that, by 2026, all government defense work will include the CMMC requirement, impacting more than 300,000 contractors.

Preparation is the key to success.  The sooner a company begins preparing for a CMMC third-party assessor organization, or C3PAO, to come in, the smoother its progress along the journey will be.

Continue reading at:  National Defense Magazine

Podcast: CMMC, and transitioning to the new requirements

By

Everyone knows that DoD gets thousands of attacks every day.  These attacks are getting more creative by attacking DoD’s trusted supply chain.  The SolarWinds incident is an example of how a trusted software supplier was shown to have been compromised.

To control some of these creative attacks, DoD has created the Cybersecurity Maturity Model Certification (CMMC) that companies who do business with DoD may need to comply with to continue to do business with the DoD in the future.

The Federal News Network recently held a podcast with John Gilroy and FedHIVE CEO Michael Cardaci, who talked about ways to smooth the transition to the Cybersecurity Maturity Model Certification or CMMC.

Listen to the Podcast at:  The Federal News Network

GSA signals increased cybersecurity requirements in civilian IT GWACs

By

The General Services Administration (“GSA”) is including language regarding cybersecurity requirements in requests for proposals relating to certain IT governmentwide acquisition contracts (“GWACs”).  Certain requirements will be modeled on those the Department of Defense (“DoD”) is including in its contracts as part of the Cybersecurity Maturity Model Certification (“CMMC”) program.

The GSA confirmed recently that businesses preparing to submit proposals in response to two proposed GWACs (Polaris/Stars III) should expect to see Cybersecurity Maturity Model Certification (“CMMC”) level-specific requirements in certain subsequent orders issued against those contracts.  Speaking at a recent event, Keith Nakasone, deputy assistant commissioner for IT acquisition at the GSA, explained that these new CMMC requirements will be incorporated at the order level rather than the contract level, in order to introduce flexibility in addressing unique needs and bolster an agile framework.

Continue reading at:  JD Supra

A related article can be found at FCW:  https://fcw.com/articles/2021/02/17/cmmc-gsa-gwacs-get-ready.aspx

Contracting News

Read More

Contracting Tips

Read More

GTPAC News

Read More

Georgia Tech News

Read More