Securing DoD Contractor Information Systems – Are You Ready?
This past year, the US Government implemented significant policy changes that impact DoD Government contractors with how they protect their own internal networks and compete for DoD contracts.
Attacks to information systems can range from denial of service, espionage, manipulation of data, and more. Cyber criminals and hackers are actively seeking to compromise systems related to US Government activities. In the wake of multiple large “hacks” in US Government systems, and after many years of debating security controls, DoD Contractors are themselves being held to higher cybersecurity requirements. There is a deadline looming that mandates cybersecurity changes in US Government DoD contractor systems.
Dates to know:
December 30, 2015 – DoD amended the Defense Federal Acquisition Regulation Supplement (DFARS) concerning Controlled Defense Information (CDI).
- DFARS 252.204-7008 Compliance with Safeguarding and CDI Controls
- DFARS 252.204-7012 – Safeguarding CDI and Cyber Incident Reporting
December 31, 2017 – DoD Deadline to fully implement all NIST SP 800-171 controls on contractor information systems.
- NIST SP 800-171 provides guidance in the protection of Controlled Unclassified Information (CUI) in nonfederal information systems and organizations
- NIST SP 800-171 defines categories of security requirements of all information assets covering people, process, and technology to include suppliers and vendors
These requirements will be added to some existing and all new contract clauses, including solicitations. These rules apply to ALL contractors with Covered Defense Information transiting their information system. Demonstrating compliance to the DoD CIO is mandatory.
This is just a high-level overview. There are other changes that have occurred this year for ALL US Government contractors, and other existing rulesets for cybersecurity compliance still apply. Achieving and demonstrating cybersecurity compliance is essential to compete and win DoD (and other) Government Contracts.
Understanding these new changes, and the impact to your organization, can be tough work. If you need assistance understanding what is required, how to crosswalk all the regulations, where does your company stand, what work needs to be done and how much will it cost, let us know.
- We look at your unique situation and provides solutions tailored to your budget and requirements.
- We are NOT “sales-driven” so we don’t work under any pressure to “up-sell” you beyond your needs.
- We don’t apply a vendor-specific solution to your gaps, rather we work with you to find the optimal solutions to help you reach compliance
Help your organization be prepared well in advance of that looming deadline. Contacting us is easy- just drop us a line at firstname.lastname@example.org.
(Don’t worry, we won’t add you to a spam list – we don’t like that either)
This information is not intended as legal advice.
- NIST SP 800-171: http://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.8 00-171.pdf
- Federal Register – DOD implementation: http://www.gpo.gov/fdsys/pkg/FR-2015-08-26/pdf/2015- 20870.pdf
- Federal Register – DOD implementation (Amended): https://www.gpo.gov/fdsys/pkg/FR-2015-12-30/pdf/2015- 32869.pdf
- Controlled Unclassified Information: https://www.archives.gov/cui/
- DOD – Safeguarding Covered Defense Information and Cyber Incident Reporting: http://www.acq.osd.mil/dpap/policy/policyvault/USA005505-15- DPAP.pdf
Zofia Consulting is a proud team member with Answer ALS and the NFL.
The “Game-Changing” campaign, highlighting NFL’s most famous game-changing moments, is born out of a partnership between the NFL and Answer ALS. Its purpose is to give ALS its own game-changing moment by driving donations where urgency is needed – research.
The featured game-changing moments include: Dwight Clark’s “The Catch,” Dave Casper’s “The Ghost to the Post,” Roger Staubach’s “The Hail Mary,” Odell Beckham Jr.’s “The One Hander,” and Steve Gleason’s “The Rebirth.” https://youtu.be/gfU5c4eoDl0
The 2015 social media campaign, the “Ice Bucket Challenge,” drew widespread awareness for ALS, and the “Game-Changing” campaign is building on its success to leverage the power of emotion to rally NFL fans around finding a cure for the disease.
The NFL and its teams, Team Gleason, current and past NFL players, Johns Hopkins Packard Center for ALS Research, Cedars-Sinai, Harvard and many others will also participate in the campaign. In addition, the broader ALS community including the creators of the Ice-Bucket Challenge, Pete Frates and Pat Quinn, will also be participating.
You can help NOW
Text “ALS” to 27722 to donate $5.
To further support ALS research and for more information, please visit http://answerals.org/.
Thank you for your support!
CEO, Zofia Consulting
Another year already! 2014 was an amazing year at Zofia.
This year, our team focused on building capacity and strengthening our offerings to our clients. Global demands for increased full-spectrum security sharpened our skills and hastened our pace. Our clients wanted to ensure they were best postured to meet the dynamism of threats to their physical and cyber footprints. It is our job to make sure they are prepared!
Here are a few 2014 Zofia highlights:
2014 was a year with a domestic security focus. Our client concerns kept us close to home and inside clients’ facilities as we shored up our clients’ physical and cyber presence. With thousands of reported intrusions, huge recovery expenses, and liability concerns across the USA – this was a year to double check security operations. We kept a watchful eye on global trends and threats to inform our clients’ domestic US position. We trained client corporate staff on issues of security, competitive intelligence, and analysis. We teamed with multiple other consultancies to bring holistic approaches to satisfy diverse client needs.
Our network of associates and advisors was never busier. We addressed a variety of topics for our existing clients and tapped into more new resources than in the past years. Our advisors introduced our associates to experts around the world in cybersecurity, terrorism, novel security capabilities, and more to ensure our clients had the best information available to mitigate threats and evaluate risks. In the area of strategic planning and support, we assisted Team Gleason with kicking off their >$600M initiative “Answer ALS” – a project to finally end ALS. How amazing to be a part of a campaign that is changing the face of research and brain science.
Zofia continues to grow and enhance our partnerships with top firms in the USA in support of multiple government and commercial clients. It is part of our philosophy to find and discover the best talent for our clients. If that means the expertise resides in another firm, we facilitate a mutually beneficial partnership to ensure our clients’ needs are fully supported with the best talent.
We noted an increased demand for specific global expertise in Africa and Eastern European countries. We delivered smartly by tapping into senior consultants with on the ground expertise that proved very accurate and timely. Most importantly – our clients referred us to their partner companies. The best advertising for Zofia is a word-of-mouth referral and we are grateful for the continued confidence our clients place in us.
Zofia continues our commitment to being a valuable member of our local community. Zofia provided more than 85 hours of pro bono consulting to a variety of nonprofit activities and we proudly donated portions of our profits to: Robert Packard Center for ALS Research, Team Gleason, America’s VetDogs and Jill’s House. Inspired by the work of Steve Gleason – our CEO also became a board member of Team Gleason to more fully support them directly.
Zofia had a tremendous 2014 thanks to our team, partners, clients, friends, and family. After a very short break – 2015 is already starting for us, and we are ready. We look forward to helping you get your year going smartly, safely, and securely.
We have all seen the tragic mistakes made by corporate cultural blunders in their attempt to market globally. These failures could have been prevented with proper research, insight, and experience. Products and services, no matter how fabulous and wanted, will never transcend local culture(s). To be successful in a new territory means having a keen understanding of local traditions, ideology, dominant philosophies, languages, politics, and more. Create corporate success by using intelligence to drive your organizational decisions. That is our Philo-Zofia
Our own Suzanne McDermott writes about “Global Branding on Ice.” When creative assets leave US air space – Suzanne notes how important it is to ensure you know your audience and understand the local domains where you intend to operate.
“When you’re marketing a global brand, you need to be on your toes—especially when you’re promoting Disney On Ice. Produced by Feld Entertainment, the visual tour below gives you a sense of how our original materials migrated as the show made its way around the world. I’ve always been fascinating by what happens when creative assets leave US air space. Beginning with the key art, I hope you enjoy seeing how the work evolved from the US to Australia to several Asian markets.” -Read the rest at http://blog.ihaforum.org/post/2014/03/12/Global-Branding-On-Ice.aspx
Suzanne is Zofia’s Senior Creative Services Advisor. With over 20 years of global experience, her creative voice helps our clients envision success in new markets and with new resources. Learn more about Suzanne and our other advisors here.
An organization, a volunteer, and a community come together to support the Packard Center at Johns Hopkins
Michelle Farr knows first-hand that collaborative efforts lead to significant results. After 25 years of service in a number of government agencies, she is now CEO of a consulting company, Zofia Consulting, LLC,that brings together the expertise of a wide variety of disciplines in intelligence and security, and she also serves on the executive committee of the Innovative Solutions Consortium (ISC), a forum that promotes collaboration among industry leaders in the government. In her spare time, Farr is avidly involved in one of Johns Hopkins’ major hubs of collaborative science: the Robert Packard Center for ALS Research at Johns Hopkins.
Read the whole article here —> https://rising.jhu.edu/mfarr
Another article on the event from The Robert Packard Center for ALS Research Here —> http://www.alscenter.org/news/newsletter/2013/November_December/ISC%20Rocks%20Out#!