INFOSEC ALERT - NOTICE TO THE DEFENSE INDUSTRIAL BASE *UPDATED*

The U.S. Army Corps of Engineers (USACE) is awaiting the issuance of the final DFARS Clause to implement the Cybersecurity Maturity Model Certification (CMMC) Program. This program establishes requirements for defense contractors and subcontractors to implement prescribed cybersecurity standards for safeguarding Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The CMMC Program provides a consistent methodology to assess a defense contractor's implementation of required cybersecurity requirements. Key aspects of the program include: • Implementation of cybersecurity standards set forth in 48 CFR 52.204-21 and NIST Special Publications 800-171 and 800-172 • Assessment of compliance with applicable cybersecurity standards for contractor information systems • Protection of FCI and CUI to meet evolving threats and safeguard nonpublic, unclassified information • Balancing the need to safeguard FCI and CUI with the requirement to share information with defense contractors • Providing DoD with increased assurance that FCI and CUI information will be adequately safeguarded when residing on or transiting contractor information systems