Central Florida Builds for Defense: What a Local Subcontractor Needs in Place Now
Orlando is one of the country's centers for military simulation and training. If your company supports that work and CUI comes through your contract, a few things decide whether you stay eligible for award. Orl
Orlando is one of the country's centers for military simulation and training. If your company supports that work and CUI comes through your contract, a few things decide whether you stay eligible for award.
Orlando trains the warfighter
- NAWCTSD (Naval Air Warfare Center Training Systems Division) is the Navy's principal center for modeling, simulation and training systems technologies. It was formed in 1941 and has been at Naval Support Activity Orlando, in the Central Florida Research Park, since 1988.- PEO STRI, the Army's Program Executive Office for Simulation, Training and Instrumentation, is also at NSA Orlando.- Team Orlando, the partnership of military commands, federal agencies, industry and academia in the region, calls itself the world's largest cluster of modeling, simulation and training organizations.## When CUI comes with the work DFARS 252.204-7012 requires contractors to flow the clause down to subcontractors whose work involves covered defense information. When CUI comes through your subcontract, so do the NIST SP 800-171 requirements. ## What to have in place now
- A current SPRS score. Under DFARS 252.204-7019, an offeror required to implement NIST SP 800-171 must have a current assessment, no more than 3 years old, posted in SPRS to be considered for award.- An SSP and POA&M that back up that score. The score you post should match what your System Security Plan describes, with every gap in your Plan of Action and Milestones.- A clear map of where your CUI lives: where it arrives, where it is stored and who can reach it.CMMC Phase 2 remains suspended, and contracts can require only CMMC Level 1 (Self) or Level 2 (Self) assessments for now. None of the three items above depends on Phase 2. ## Talk to a local team Cyberneza is a veteran-owned, 100% US-based cybersecurity and compliance firm in Orlando, Florida. We help Central Florida defense suppliers get their SPRS score, SSP, POA&M and CUI map in order: https://cyberneza.com/contact Sources: NAVAIR: NAWCTSD Orlando, NSA Orlando installation guide, Team Orlando, DFARS 252.204-7019, DFARS 252.204-7012
📰 Read the original article on Dev.to Security
Originally published by Dev.to Security. Aggregated on AIWithGhost for educational purposes — full credit and traffic to the original publisher.