2024 DOD Cybersecurity Compliance for Contractors

Wednesday, June 19, 8:30am -12:30pm
Registration Fee: $195

Let's be honest, cybersecurity compliance is not an easy task. We can help! This workshop is geared towards Small Business DoD Contractors.

Participants in the Workshop will leave with an understanding of the requirements and knowledge of and access to tools that they can use to meet the obligations to protect the DoD information they will either receive or generate as part of the SBIR process.

Part One of the Workshop will introduce participants to the DFARS 252.204-7012 contract clause, which mandates contractors implement the NIST 800-171 cybersecurity standard and develop an incident response and reporting plan. The Workshop will begin with an overview of the current DoD contractor cybersecurity requirements and methods that the DoD uses to hold contractors accountable for implementing those requirements. We will then explain in layman's terms the 17 "basic" cybersecurity requirements all Federal contractors must implement. We will continue with an exploration of the first step on a cybersecurity compliance "journey": scoping the "covered" IT system. Part One will conclude with an overview of the incident response and reporting requirements.

Part Two of the Workshop will instruct participants in how to conduct a self-assessment in accordance with DFARS 252.204-7019 and 7020. This part will begin with an overview of the clauses themselves, continue with an exploration of the SPRS scoring and score-reporting systems, and conclude with a discussion about how the SPRS scores will evolve into the CMMC. Totem Tech will demonstrate two tools we have developed to facilitate self-assessments, and participants will have access to these tools during this portion of the Workshop.

2024 Registration Closed

Workshop Instructor

Adam Austin
Co-owner and Cybersecurity Lead, Totem.Tech

Adam Austin is the Co-owner and Cybersecurity Lead at Totem.Tech, a minority veteran-owned Prime DoD contractor. Mr. Austin has over a decade of experience securing classified, unclassified, and HIPAA-environment US Government IT systems, having worked with NASA, the Center for Medicare and Medicaid Systems (CMS), and all branches of the Department of Defense. Adam holds a Master's in information assurance from Capitol Technology University, is CISA, CISM, and Security+ certified, and is a CMMC Registered Practitioner (CMMC-RP). Adam's mission is to leverage his experience to help small businesses in regulatory environments implement affordable, compliant, risk-based cybersecurity programs.