Cue the music from Jaws. As the deadline gets closer and closer, the once looming prospect of compliance regulation now is upon us. Parabilis has stayed on top of the latest news pertaining to the Defense Department’s handling of CMMC, and what we are seeing in the latest update deals with the required self-assessments that were recently registered by contractors in SPRS (Supplier Performance Report System). We have partnered with Cybersec Investments and CEO Fernando Machado to give you an update on what to expect, guidance on if you will be affected, and if so, the next steps to take.

The DCMA DIBCAC (Defense Contractor Management Agency / Defense Industrial Base Cybersecurity Assessment Center) is set to begin looking into companies that have provided self assessment scores into SPRS. This assessment will consist of a review of the system security plan (SSP) description of how each requirement is met to identify any descriptions which may not properly address the security requirements. Categorized as “Medium Assessments” these will be a paper review of minimal impact to contractors. DIBCAC will initiate contact to the designated contractor on a Monday and said contractor will be required to provide the already created SSP by Friday of the same week.