Tips for Preparing for DOD’s New CMMC

By Hollie Kapos, Corporate Counsel

The Cybersecurity Maturity Model Certification (CMMC) has been one of the hottest topics in government contracting this year. In fact, one of my colleagues addressed the topic in a blog on DOD and CMMC just a few months ago.

And no wonder everyone’s talking about it – it applies to ALL companies doing business with DOD, including OEMs, distributors and resellers. Here’s some basic information to help you prepare no matter where you are in the supply chain.

What is CMMC?

Intellectual property theft and cybercrime cost the United States billions of dollars and threatens national security. In order to protect government information from theft and other malicious cyber activity, DOD is making cybersecurity an acquisition foundation. Accordingly, DOD is developing the Cybersecurity Maturity Model Certification – a certification process to measure a company’s ability to protect sensitive government data.

Read more of this post

Federal Modernization Challenges and Priorities for FY20

By Jessica Parks, Analyst

Data visibility, cloud and emerging technologies were important themes at a the recent IT Modernization summit hosted by FCW. The conference sessions brought together acquisition and IT officials from a variety of federal agencies, small and large, both civilian and DOD, who shared how their agencies are delivering on modernization goals.

Here are more details about these topics and advice on how you can position your company and solutions to stand out from the crowd.

Data Visibility

Agencies need improved visibility into their data. Data is the cornerstone of multiple technologies, powering AI and machine learning algorithms and bolstering cybersecurity efforts. It is, quite simply, crucial for government agencies to be able to gain as much insight into their data as possible in order to keep pace with rapid technological developments. Don Heckman, Principal Director in the Deputy Chief Information Office for Cybersecurity at DOD, noted that “visibility into assets is a huge challenge” for the agency. Read more of this post

What the Defense Innovation Unit Wants Industry to Know About CSOs – Part 2

Stephanie MeloniEarlier this week we published Part 1 of “What the DIU Wants Industry to Know About CSOs”. Here, in Part 2, DIU answers additional questions, which delve deeper into the use of CSOs and possible future expansion as the need for adopting advanced commercial technologies continues.

A special thank you to DIU for the outreach and answering my questions!

SM: Do you think the spread of the CSO process is indicative that the Department is embracing a shift toward executing more OT agreements?
DIU: The past few NDAAs encouraged OT and CSO utilization. As more DoD partners experienced or witnessed the successes of DIU prototype projects as well as the capabilities of the non-traditional ecosystem, we have seen a groundswell in interest to adapt CSO procedures for different mission set use-cases. Additionally, OSD leadership issued a highly regarded OT guide and OT policy in November 2018 to help acquisition professionals leverage and demystify authority.

SM: Why use CSOs as opposed to traditional acquisition methods?
DIU: The ultimate goal of a CSO is to enable project teams the flexibility and freedom to execute purpose-driven contracts with best-of-breed companies, including traditional (subject to cost-sharing requirements) and non-traditional vendors. CSOs provide an opportunity for acquisition professionals to develop a deliberate based process focused on project outcomes instead of a default-driven process focused on compliance. CSOs and OTs in general are great acquisition instruments for experimenting and prototyping new technology, methodologies, etc. whereas the traditional acquisition authorities are geared towards procuring supplies and services. Truly, the authorities are highly complementary and should be used in conjunction with one another. Moreover, the potential to scale successful prototypes into production contracts provides a clear value proposition that incentivizes companies to seek out opportunities to work with the Department. Read more of this post

What the Defense Innovation Unit Wants Industry to Know About CSOs – Part 1

Stephanie MeloniBy Stephanie Meloni, Market Intelligence Manager

We received a tremendous response to my blog posting on Commercial Solutions Openings (CSOs) as another innovative option the government is using to quickly acquire commercial solutions—in fact, it was my most viewed blog ever!

In that blog, I mentioned that CSOs, a type of OTA designation, were initially piloted by the Defense Innovation Unit beginning in 2016. Defense Innovation Unit read my blog and offered to answer more in-depth questions I had about CSOs and OTAs and how they can help solve military challenges. I share their answers with you here, in a two-part series.

A special thank you to DIU for the outreach and answering my questions!

SM: What is DIU’s mission?
DIU: The Defense Innovation Unit (DIU) delivers advanced commercial technology into the hands of men and women in uniform to enhance national security. DIU partners with the services, combatant commands, and component organizations to seek out and rapidly prototype commercial solutions to military challenges while lowering barriers to entry for non-traditional companies interested in working with the Department of Defense (DoD).  There has never been a more important time for the military to leverage commercial technology. Former Secretary of Defense Ash Carter established DIU in August 2015 to capitalize on U.S. businesses’ growing investment in research and development (R&D) and venture capital funding of high-tech startups. Rapid technology developments led by the private sector and the global diffusion of emerging dual-use capabilities are changing the character of warfare. It is DIU’s mission to ensure the Department has a pathway for integrating these commercial capabilities at the speed of relevance to maintain a decisive military advantage over our adversaries. Read more of this post

Data Centricity: The Heart of Federal IT

Tom O'Keefe

By Tom O’Keefe, Consultant

If there’s been a common theme I’ve been hearing lately, it’s data centricity.

It’s a fundamental shift in federal IT that’s been building for a few years that could have broad implications for the types of technology investments agencies will look to make in the future. Federal agencies are beginning to realize that not only is data their core asset, they know they need to make start making investments in the stewardship and utilization of that data. It’s not enough to just have data or protect data, that data needs to be operationalized and transformed from data to knowledge to action – and support the execution of the mission.

At an AFCEA Bethesda breakfast I attended in March, speakers from the Departments of Defense and Homeland Security affirmed the increasing understanding within their agency of the value of the data they capture throughout the course of their operations. It’s fair to note here that agencies have been talking about making better use of their data for years, but much like we’ve seen the slow and steady progression to cloud adoption, I believe we’re seeing a steady progression toward realizing the importance of data and turning it into actionable intelligence to enable the mission. Read more of this post

Changes Coming for IT at DOD Fourth Estate Agencies

Stephanie Meloni

By Stephanie Meloni, Market Intelligence Manager

The DOD CIO office continues to put a strong emphasis on moving as many IT functions as possible to an enterprise construct. This includes efforts like milCloud, JEDI, data and network consolidation.

A newer consolidation and standardization project that will be picking up steam this year is the Fourth Estate network consolidation. Fourth Estate agencies consist of 28 Pentagon agencies outside of the Service branches. Combined, these agencies are responsible for about a fifth of the DOD’s budget.

The FY19 NDAA initially requested budget cuts for the Fourth Estate, and a GAO report which came out last September requested some efficiency initiatives around consolidation for the Fourth Estate. As a result of these budget and efficiency recommendations, DOD plans to consolidate network and other IT functions.

Read more of this post

AI in DOD: Three Places to Get Started

Stephanie Meloni

By Stephanie Meloni, Market Intelligence Manager

The Department of Defense is considering artificial intelligence for everything from improved maintenance and repair of weapons systems to supply chain management and improving business processes. Industry can expect to see exponential growth once implementation takes off.

Consider Project Maven, for example. The DOD’s AI solution for analyzing imagery for intel purposes, has seen funding grow from $16 million in fiscal 2018 to $93 million in fiscal 2019 — a 480 percent increase!

Central to DOD’s AI implementation efforts is the Joint Artificial Intelligence Center. JAIC was created quickly to ensure that DOD effectively and ethically builds out its AI capabilities. The organization will look at AI cross-domain solutions across the service branches, as well as specific component projects.

Read more of this post

The CSO: DOD’s New Way to Acquire Commercial Technology

Stephanie MeloniBy Stephanie Meloni, Market Intelligence Manager

As the use of Other Transactional Authority grows across the Department of Defense as a way to cut back on the time and cost of traditional acquisition programs, a new breed of OTA is emerging. The Commercial Solutions Opening, or CSO, has the potential to have significant value to commercial technology vendors and will give government procurement officers more flexibility in making commercial technology awards.

What are CSOs?

CSOs are a type of OTA designation aimed at buying new and innovative commercial technology. Whereas OTAs are designed for researching, developing and prototyping technology projects, CSOs are aimed specifically at commercial technology that already exists, but will be new to the Department.

Initially, the CSO was piloted only to be used by the limited number of buying activities with OTAs already in place, but a memo released last summer expanded their use across the entire DOD.

Read more of this post

DEOS FY19 Update

By Ryan Granato, Analyst

In October the DOD announced it was moving the $8 billion back-office cloud solutions procurement to the GSA Schedule 70 contract, a move to make enterprise information technology services for office productivity available to not only DOD, but to other government agencies as well.

At a recent industry day, representatives from DISA and the General Services Administration provided an updated outlook on the Defense Enterprise Office Solution (DEOS). Dr. Brian Hermann, Unified Capabilities Portfolio Manager at DISA, provided insight into DEOS and how industry can participate.

DEOS will help create a simpler, defensible perimeter by reducing the DOD IT footprint and provides full integration across the DOD, while minimizing security risks and reducing costs. The DOD is continuing to see less data stored locally, meaning that an increased number of employees will be provided only with mobile equipment and a docking station that has access to enterprise services and data.

Read more of this post

FY19 Advice From DISA Industry Day

By Ryan Granato, Analyst

At their recent forecast to industry, DISA outlined a future built around mobility, cybersecurity, small businesses and the importance of targeted industry pitches. Here are key insights from DISA leaders for securing FY19 business:

Selling to DISA
When selling to DISA, it is paramount for industry to tailor their pitch to how their solutions can work specifically for outlined requirements and referenced pain points. According to Dave Bennett, director of DISA’s operations center, nine out of ten times what worked for industry commercially will not work for DISA. Even more so, he says that any pitches that reference past performance for industry will not be met with open arms. Bennett goes so far as to say, “I will zero my mind out. I will be singing la la la in the back of my head.” For best practices, Bennett says that industry must come armed with knowledge directly associated to the area they are looking to support.

Read more of this post

%d bloggers like this: