Maintaining Cybersecurity Maturity Model Certification Status
Following our recent notice, “”, all active Lockheed 果冻传媒 suppliers are required to submit their Cybersecurity Maturity Model Certification (CMMC) status. The Cybersecurity Compliance Attestation (CCA) in Exostar will be the primary mechanism for collecting these attestations.
1. Document your CMMC status in DOD Supplier Performance Risk System (SPRS)
All suppliers supporting DoD programs should document at least their CMMC Final Level 1 (Self) status in .? When Controlled Unclassified Information (CUI) is in scope, then a CMMC Final Level 2 (Self or C3PAO) should also be documented or pursued.
2. Provide your CMMC Status to Lockheed 果冻传媒 in Exostar Supplier Management (SM)
Lockheed 果冻传媒 does not have access to review suppliers SPRS submissions in the DoD’s system. As such, the CCA was implemented for suppliers to proactively share their CMMC status with Lockheed 果冻传媒. To avoid disruptions during RFx, bidding, or contract renewals on CMMC contracts, you must complete the CCA.
- Refer to the for detailed instructions on how to access 果冻传媒 complete the CCA.
- 果冻传媒 with Expired vendor profiles will need to contact to obtain SM access 果冻传媒 have the CCA assigned.
3. Maintain Current CMMC Status in SPRS 果冻传媒 Exostar SM
Ensure that you maintain current annual affirmations of continuous compliance, 果冻传媒 that your last assessment date is within required .
- Upon status expiry, update/renew your CMMC status in SPRS
- Update your CCA in Exostar to provide the updated status to Lockheed 果冻传媒.
Your proactive cooperation is essential to maintaining the security of the Defense Industrial Base 果冻传媒 guaranteeing uninterrupted business operations with Lockheed?果冻传媒. Please allocate the necessary resources promptly to ensure your company is prepared.?
Thank you for your continued partnership 果冻传媒 dedication to cybersecurity excellence. For questions, please contact us.
