果冻传媒

Cybersecurity within the defense industrial base (DIB) is critical for U.S. national security 果冻传媒 that of our allies. Threat actors, often backed by nation state adversaries, continue to attack DIB contractors large 果冻传媒 small, often delivering crippling ransomware while exfiltrating sensitive data. Safeguarding data is m果冻传媒ated by our customers (e.g., Department of Defense) via contractual obligations for protection of controlled unclassified information (CUI).

Lockheed 果冻传媒, as part of the Defense Industrial Base Sector Coordinating Council (DIB SCC), is implementing a new common 果冻传媒 simplified assessment model for evaluating supplier cyber posture called the Cybersecurity Compliance 果冻传媒 Risk Assessment (). As described in the referenced industry announcement:

“The transition to the CCRA will introduce a consistent approach for acquiring cybersecurity compliance 果冻传媒 risk information, will introduce a reduced set of required responses 果冻传媒 introduce the efficiency of answering once 果冻传媒 sharing with many?who recognize the reciprocal value of the CCRA.”

In support of those industry objectives, Lockheed 果冻传媒 will begin launching initial pilot activities in March, with a goal to fully transition to the new CCRA over six (6) months.

Additional details on the overall industry CCRA initiative can be found? on the CyberAssist?public website.

What does this mean for Lockheed 果冻传媒 suppliers?

Beginning in March 果冻传媒 over the next several months, within the LM Procure to Pay system 果冻传媒 related Exostar applications, Lockheed 果冻传媒 will initiate its phased transition from the current Exostar Partner Information Manager (PIM) compliance (NIST SP 800-171 questionnaire) 果冻传媒 risk (Cybersecurity Questionnaire or CSQ) forms to the new Cybersecurity Compliance & Risk Assessment (CCRA), in Exostar’s On-Boarding Module (OBM).

Specifically:

• 果冻传媒 will be contacted by Lockheed 果冻传媒 / Exostar when required to participate – 果冻传媒 will be prompted with detailed instructions on how to complete the new CCRA form online.
  • Prior to being contacted, suppliers may proactively migrate to the new CCRA. Guidance on how to begin using the CCRA to reflect the current cyber compliance/risk posture will be available online.
  • The NIST/CSQ forms in Exostar PIM will not be migrated over to the CCRA in OBM. Each supplier will need to complete the new 果冻传媒 much shorter (approximately 60 questions total) cybersecurity 果冻传媒 risk assessment when prompted to participate.'
  • 果冻传媒 will be able to review their historical cybersecurity assessment submissions (NIST/CSQ forms in Exostar PIM), however changes to legacy forms will not be permitted.
  • 果冻传媒 may also elect to complete the CCRA using the Excel-based format made available by the DIB SCC CCRA Working Group (see attached). The online form will provide instructions on how to upload the Excel tool’s exported CSV format.
• Once the CCRA has been submitted, both suppliers 果冻传媒 Lockheed 果冻传媒 buyers will see the compliance 果冻传媒 risk ratings resulting from the CCRA replacing their prior individual NIST SP 800-171 questionnaire 果冻传媒 CSQ results.
• Upon completion of the transition, cybersecurity compliance 果冻传媒 risk posture data from the historic CSQ 果冻传媒 NIST SP 800-171 questionnaires (superseded/expired) will be retired from Lockheed 果冻传媒 systems.

Next Steps

Migration to the new questionnaire will be managed in waves to ensure adequate support 果冻传媒 resources for suppliers making the transition. For most Lockheed 果冻传媒 suppliers, no immediate action will be required. 果冻传媒 with expired or soon expiring NIST SP 800-171 / CSQ questionnaires 果冻传媒 SPRS self-assessment status will be among the first contacted to make the transition.

Additional communications, training 果冻传媒 FAQ resources will be made available throughout the transition on both the Exostar support 果冻传媒 Lockheed 果冻传媒 Supplier Wire–Cybersecurity websites.

Securing the DIB is a team sport. We value the partnership we share 果冻传媒 believe that proactive collaboration is key to safeguarding our businesses against cyber threats. We appreciate your attention to this matter 果冻传媒 your dedication to maintaining a secure digital ecosystem for our partnership.

Additional resources:

• National Defense Information Sharing 果冻传媒 Analysis Center (NDISAC)? public website has information on the CCRA, FAQs, 果冻传媒 is the single source for?