Security of Department of Defense Acquisition Ecosystem Presented by: Katie Arrington HQE Cyber for ASD (A) Katherine.e.Arrington@mail.mil Driving accountability to the people doing the work.

Security of Department of Defense Acquisition Ecosystem The Office of the Under Secretary of Defense for Acquisition and Sustainment (OUSD A&S) provides policy and governance, for the Department of Defense (DoD) and the national security innovation base, which enables the delivery and sustainment of critical capabilities to the U.S. Service Members and allies. Safe and secure acquisition of goods and services must be done in conjunction with strong cybersecurity throughout the Defense Industrial Base (DIB) and the DoD Supply Chain. As our leaders have said, economic security is National security. Because this is a complex global challenge, protecting the DIB and the DoD Supply Chain will be addressed through multiple solutions within the DoD Acquisition Ecosystem. The diagram shown below represents the Department’s ongoing efforts to provide security and cybersecurity to the DIB and DoD Supply Chain.

Security of Department of Defense Acquisition Ecosystem Offense 1 NDAA 16 1647 & 1650 Assessments/Wargames Vulnerability of Weapon Systems Vulnerability of Critical Infrastructure DIB Cybersecurity /Supply Chain Unified Stakeholder Cybersecurity Standard Metrics /3rd Party Auditors Independent Cybersecurity Score Secure & Resilient DevSecOps 5G Standards HW Infrastructure Harden Business System USCyberCom New Authorities CIO R&E A&S USDI Policy Mitigation Harden Weapon Systems Harden Critical Infrastructure Software Provenance PROCUREMENT Source Selection Criteria NIST 171 DFARS 252.204-7012 Block Change Acquisition Reform DoD 5000.02 rewrite & 809 DCMA Contract Monitoring Dashboard to view Supply Chain Security Defense Security Service (DSS) NISP, NCSS, OBMS DAU Education