New DFARS & CMMC Requirements

security, secure, locked

The U.S. Department of Defense (DoD) issued new regulations for the Defense Federal Acquisition Regulation Supplement (DFARS). Most manufacturing and aerospace businesses contracted to the (DoD) will have to meet the necessary compliance and security requirements outlined in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171. 

Does this apply to me? 

Yes – If you are part of the DoD or Aerospace supply chain and access controlled unclassified information, you likely are affected. This is not restricted to the primary contractor, if you are a subcontractor or supplier to a contractor who accesses controlled unclassified information (CUI), you must meet the new requirements. 

What is controlled unclassified information? 

Controlled Unclassified Information (CUI) is a category of unclassified information within the U.S. Federal government. (CUI) is information owned by the government that is sensitive and requires safeguarding and protection.  

Types of (CUI) 

  • Financial records 
  • Engineering drawings and lists
  • Manuals
  • Contract information

What should I do? Get an Expert. 

TechHouse has partnered with leading industry experts to provide critical evaluation and remediation services to help you prepare for the assessment. And with a test at level 3 running 65 to 85K, you don’t want to take that assessment twice. Our consultants hold multiple NIST certifications and provide you with the necessary tools to get your organization DFARS/NIST SP 800-171 compliant.  

Many small and midmarket suppliers did not expect the notice or may think it does not apply to them. Starting in January, contracts will start to require level 1 and level 3 compliance.  

Do not lose out on this revenue. The DoD will not award new contracts to manufacturing and aerospace businesses that are not compliant.  

What are the best next steps if you are working with DoD or are a supplier to a DoD contractor and have been notified of the new DFARS or NIST SP800-171 requirements? Contact our team. We will walk through a questionnaire with you and then provide an estimate to evaluate any gaps between your current readiness and the requirement of Level 1 or Level 3. 

If you believe these new regulations affect you, feel free to contact us today to learn more.

We’ll happily answer the above questions and any others you may have.