In 2020, an ambitious Defense Department effort to account for its suppliers’ cybersecurity had many in the community kicking and screaming in tow, but represents a new collective policy thrust that won’t be dismissed.
The program, led by Katie Arrington, the chief information security officer for Defense acquisitions, is based on the idea that the government should incorporate security standards into its contract administration.
Arrington’s presentations on the program often include an estimate of how much is lost each year through cyber disruptions — $600 billion, according to research cited in the DOD’s answers to frequently asked questions about the program — and highlight intellectual property theft by China.
Before the idea of CMMC, companies within the defense industrial base simply pledged their adherence to cybersecurity practices outlined by the National Institute of Standards and Technology. A 2015 rule required Defense contractors to report cyber incidents and to provide “adequate security” using NIST Special Publication 800-171 to protect covered information. But it wasn’t until summer 2019 that the Defense Department started checking whether companies were implementing the standard.
Keep reading this article at: https://www.nextgov.com/cybersecurity/2021/01/cmmc-dramatic-year-pentagons-contractor-cybersecurity-program/171084/
Sometimes it makes sense to pay more or charge more for a supply or service when quality improvements, added features, or other considerations justify the price. Other times, paying more or adding features provides no meaningful benefit so we opt for the least expensive item that satisfies our needs.
In this case, the COFC held that an offeror was required to recertify its size status during a procurement, and the agency’s failure to enforce this requirement invalidated the award.
For anyone going through a bid protest, hiring a knowledgeable attorney who is experienced in this area can be beneficial in providing guidance through the process. But as a primer, here is an outline of the what, who, when and where of bid protests involving government contracts.
The DOD will make alterations to the highest level of the five-tier security model after receiving public comments on the recently issued CMMC Defense Federal Acquisition Regulation System rule.
