requirements | The Contracting Education Academy

November 26, 2019 By cs

DoD Releases Version 0.6 of its Cybersecurity Maturity Model Certification

The Office of the Assistant Secretary of Defense for Acquisition has released Version 0.6 of its draft Cybersecurity Maturity Model Certification (CMMC) for public comment.

The CMMC was created in response to growing concerns by Congress and within DoD over the increased presence of cyber threats and intrusions aimed at the Defense Industrial Base (DIB) and its supply chains.

The model updates Version 0.4, which DoD released on September 4, 2019, and which we wrote about here. The CMMC establishes the framework necessary for contractors to obtain one of five certification levels necessary to perform work on certain DoD contracts, including those that require the handling of Controlled Unclassified Information. Whereas Version 0.4 merely listed the capabilities, controls, and processes that were expected to apply to each certification level, this version provides some additional discussion and clarification to assist contractors with meeting Level 1 certifications.

DoD has not explicitly asked for comment on this version of the CMMC, and has stated that the updated model is being released “so that the public can review the draft model and begin to prepare for the eventual CMMC roll out.” For this reason, although additional changes are to be expected to the model, contractors should review the general requirements closely to ensure that they are positioned to continue bidding on DoD contracts once DoD begins including a requirement to obtain a specific certification level in Requests for Proposal in Fall 2020.

Keep reading this article at: https://www.insidegovernmentcontracts.com/2019/11/dod-releases-version-0-6-of-its-cybersecurity-maturity-model-certification/

August 4, 2017 By AMK

Could ‘microconsulting’ disrupt government contracting?

I have never been a fan of contractor bashing.

I believe there is nothing wrong with making a profit. I do not believe that contractors typically spend their days dreaming up ways to cheat the government. Indeed, I even believe that many contractor employees and managers believe deeply in the missions of organizations they work for, and get satisfaction from helping citizens and society through their organizations’ efforts — an observation I discussed a while back in a blog based on an informal conversation at a Coalition for Government Procurement event.

Having said that, I was a strong advocate even when in government 20 years ago for bringing more suppliers who primarily sold to the commercial marketplace into government contracting. Indeed, at a strategic level one of the main thrusts of the procurement reform efforts of the 1990s was to reduce barriers to entry for commercial firms created by government procurement rules — both in terms of the complexity of the process and some government oversight requirements that were burdensome or expensive for contractors to comply with.

Keep reading this post at: https://fcw.com/blogs/lectern/2017/07/kelman-microconsulting.aspx

October 6, 2016 By AMK

Changing the role of contract managers

The role of today’s “contract manager” continues to change. How and why it is doing so depends on one’s perspective, but from the private to public sector it is converging.

fischetti-ncma At the federal level, contract managers develop and manage contract vehicles between both parties; interpret and implement the myriad laws and regulations required for inclusion; provide sound business advice in the execution of pre-award and post-award functions, use a wide range of common contracting methods and contract types; develop and/or review complex pricing arrangements; conduct meetings with contractors on sensitive and/or acquisition-related issues as an authoritative contractual representative when warranted; assist in the procurement of standard or specialized services, commodities and/or construction within a contracting office;execute and track deliverables until final contract closeout, etc. This traditional “cradle to grave” responsibility is (to the extent it wasn’t already) a growing role at the state and local public procurement level as well.

Some government organizations, or the contract managers themselves, view their role as compliance and process enforcement, while others see it as much more. However, in going beyond traditional roles, should contract manager involvement start much earlier and be more comprehensive, including requirements definition, acquisition strategy and planning, spend analysis, source selection, supply chain management, project management, and the external relationships from beginning to end?

Keep reading this article at: http://www.federaltimes.com/articles/changing-role-of-contract-managers

July 16, 2015 By AMK

Pentagon contractors rank below retailers and banks when it comes to cybersecurity

After revelations that a compromised contractor login abetted a grandiose breach of federal employees’ background investigations, now comes word that Defense Department suppliers score below hacked retailers when it comes to cyber defense.

The new industry-developed cyber rankings — and the recent Office of Personnel Management hack — raise questions about the extent to which cybersecurity is a shared responsibility between government agencies and contractors.

“You can write a contract requiring somebody to do something. The question is, how do you enforce it? And if it’s broken, what are the penalties? That’s what DOD is really struggling with,” said Jacob Olcott, vice president of business development at BitSight Technologies, which rates firms’ susceptibility to hacks. “If you are the only organization that’s building an F-35, there is only so much that the government can demand of you.”

Keep reading this article at: http://www.nextgov.com/cybersecurity/2015/07/pentagon-contractors-ranked-below-retailers-and-banks-when-it-comes-cybersecurity/116899

The Office of the Assistant Secretary of Defense for Acquisition has released Version 0.6 of its draft Cybersecurity Maturity Model Certification (CMMC) for public comment.

I have never been a fan of contractor bashing.

NASA might be one of the most buzzworthy agencies but don’t expect any love from the procurement office if you come in throwing around buzzwords.

After revelations that a compromised contractor login abetted a grandiose breach of federal employees’ background investigations, now comes word that Defense Department suppliers score below hacked retailers when it comes to cyber defense.

Search this Website