In this session, we will identify how to ensure that good cybersecurity hygiene flows through a contractor’s supply chain. We will discuss the Defense Contract Management Agency’s (DCMA) mandate to examine contractor compliance with cybersecurity requirements as part of its Contractor Purchasing System Reviews (CPSR) and its implications for contractors in the near future. At the end of the session, we will discuss the pair of Proposed Rules issued in October 2023 (addressing “Cyber Threat and Incident Reporting and Information Sharing” and “Standardizing Cybersecurity Requirements for Unclassified Federal Information Systems”), and will explore the implications of those Proposed Rules for contractors.
Learning Objectives: By the end of this session, students will understand how to ensure cybersecurity hygiene in their supply chain, and be prepared to proactively address their purchasing procedures in anticipation of DCMA reviews. Students will also gain insight as to the likely next developments in and implications of Federal cybersecurity initiatives, particularly as they relate to non-DoD agencies.