INFOSEC ALERT - NOTICE TO THE DEFENSE INDUSTRIAL BASE

The U.S. Army Corps of Engineers (USACE) has released a notice regarding the Cybersecurity Maturity Model Certification (CMMC) Program, which establishes requirements for defense contractors and subcontractors to implement prescribed cybersecurity standards for safeguarding Federal Contract Information (FCI) and Controlled Unclassified Information (CUI). The program aims to ensure defense contractors are properly safeguarding FCI and CUI that is processed, stored, or transmitted on defense contractor information systems. Key aspects of the program include: • Implementation of cybersecurity practices for defense contractors • Assessment of compliance with applicable cybersecurity standards • Protection of FCI and CUI to meet evolving threats • Utilization of security standards set forth in 48 CFR 52.204-21 and NIST Special Publications 800-171 and 800-172 • Mandatory CMMC level certification for all DIB contractors in solicitations issued by the USACE starting October 1, 2025.