IMPORTANT NOTICE regarding JCP and Cybersecurity
If you have a JCP certification, are intending to get one, have a government contract, or are bidding on a contract, you need to be aware of the following and consider immediate action.

• If you have a JCP, you will be receiving a letter shortly from DLA advising that you have 30 days to perform a DoD Cybersecurity Assessment or your JCP certification may be suspended.
• If you are applying for a JCP, you must have posted a DoD Cybersecurity Assessment score.
• If you are renewing your JCP, you must have posted a DoD Cybersecurity Assessment score.

DoD Cybersecurity Assessment is not difficult. Performing the assessment involves three steps:

1. Do a cybersecurity self-assessment. Review and respond to each of 110 cybersecurity potential vulnerabilities. You respond with Implemented, Not Yet Implemented or Not Applicable. Each response carries a numeric score. The total of these is your Assessment Score. You submit ONLY the total score to the government.
2. Create a System Security Plan (SSP). This is simply your written notes regarding your status with each of the 110 vulnerabilities. You DO NOT submit the SSP to the government. The SSP is intended to be your plan for cybersecurity improvement.
3. Submit your Assessment score to SPRS. You can do this either by setting up accounts in the PIEE and SPRS systems and posting directly. Or you can simply submit your score by email. This is by far the quickest and easiest.

As a subscriber to DIBBS Navigator or SAM Navigator, you have FREE access to our CMMC Navigator website. The site will explain the DoD Cybersecurity Assessment in detail and provide you with a very handy tool that logs and calculates your Cybersecurity Assessment score. It also provides you with a printable fill-in-the-blank template for your SSP.

You can access CMMC Navigator here. Login with your DIBBS or SAM Navigator username and password. If you are not a subscriber click here to purchase.

As always, contact us if you have any questions.