Part One

Part one of the workshop will introduce participants to the DFARS 252.204-7012 contract clause, which mandates contractors implement the NIST 800-171 cybersecurity standard and develop an incident response and reporting plan. The workshop will begin with an overview of the current DOW contractor cybersecurity requirements and methods that the DOW uses to hold contractors accountable for implementing those requirements. We will then explain in layman's terms the 17 "basic" cybersecurity requirements all federal contractors must implement. We will continue with an exploration of the first step on a cybersecurity compliance journey: scoping the covered IT system. Part one will conclude with an overview of the incident response and reporting requirements.

Part Two

Part two of the workshop will instruct participants in how to conduct a self-assessment in accordance with the DOW 800-171 assessment methodology. This part will begin with an overview of the contractual clauses that require such an assessment, continue with an exploration of the SPRS assessment reporting system, and conclude with a discussion about what assessment results are required to obtain a CMMC certification. Totem.Tech will demonstrate the tools we have developed to facilitate self-assessments and how to navigate the SPRS.

Register