DOD to Facilitate Supplier Cybersecurity Standard Compliance Under Proposed Bill

Lawmakers have introduced legislation that would direct the Department of Defense to issue grants for small manufacturers to help them comply with cybersecurity guidelines.

The bipartisan Small Manufacturer Cybersecurity Enhancement Act authorizes the secretary of defense to provide grants to Manufacturing Extension Partnership Centers or cybersecurity services to small defense manufacturers, FedScoop reported.

"Cyber vulnerabilities in the defense supply chain pose a significant threat to U.S. national security. MEPS Centers, public-private partnerships located in all 50 states, are uniquely positioned to assist small businesses with cybersecurity requirements and have worked closely with the Pentagon to bolster defense supply chain resiliency," Democratic Rep. Jimmy Panetta said.

According to Panetta's website, grants under the bill may be used to promote awareness, evaluation, preparation and implementation of cybersecurity services; achieve compliance with DOD cybersecurity requirements; and hire trained personnel.

The bill was introduced by Panetta and Republican Rep. Joe Wilson. Its other sponsors are Elissa Slotkin, Paul Mitchell, Dutch Ruppersberger, Guy Reschenthaler, Haley Stevens, Salud Carbajal and Tom Suozzi.

"This legislation will further develop the Department of Defense's ongoing work with Manufacturing Extension Partnership Centers. DOD is increasingly concerned about cyber vulnerabilities in the defense supply chain, specifically among small- and medium-sized manufacturers," Wilson said.

The legislation is associated with standards such as the Cybersecurity Maturity Model Certification, a program that unifies cybersecurity standards and best practices to map out the cybersecurity maturity levels of defense suppliers.

While no authority has published cost analysis for CMMC compliance, the standard is set to be incorporated into contracts later in 2020.