Life Cycle Engineering Helps Contractors Meet 2017 DFARS Compliance Rules

cyber pic

Businesses that serve the federal government/Department of Defense are waking up to the reality that the December 2017 deadline for DFARS Compliance 252.204-7012 is quickly approaching.

Life Cycle Engineering (LCE) is working on their compliance as described by their Director of Information Technology, Jennifer Ash: “Cybersecurity risk mitigation has been a business reality and responsibility for us for years.  This new DFARS regulatory requirement deadline effective in December of 2017 makes it critical that we prove our compliance so we maintain our viability as a defense and federal government contractor.”

To support their own compliance activities and those of their partners and clients, Life Cycle Engineering’s cybersecurity team created a self-assessment tool called CyberAssess. Using CyberAssess enables Department of Defense (DoD) contractors to meet new federal compliance standards set by the Defense Federal Acquisition Regulation Supplement (DFARS) for protecting Controlled Unclassified Information (CUI). The online tool addresses the needs of companies lacking the resources to decipher complex security requirements specified in the NIST SP 800-171 using a Risk Management Framework process. The self-assessment tool consolidates information to identify gaps within a company’s compliance and produces an audit report for contractors to submit to the DoD CIO before the December 2017 deadline.

“We will also use the tool to guide us through other certification processes we may pursue including RMF, Intelligence Community Directive 503, the Federal Information Security Management Act as well as the DoD’s Information Assurance Certification and Accreditation,” added Ash.

LCE recently won an ACEC (American Council of Engineering Companies) Engineering Excellence Award for the CyberAssess tool.  “Our goal was to create a solution for our federal clients and partners that would greatly reduce the investment required to identify and solve compliance issues that could potentially threaten our nation’s security and business viability,” stated Bob Fei, LCE President and CEO.

Learn more about conducting a NIST SP 800-171 compliance audit using CyberAssess.