MEP's Role
The Tennessee MEP team performed a NIST Cybersecurity Framework for Manufacturers Gap assessment. This framework included assessment project-planning and management, a review of the NIST gap assessment methodology and establishment of milestones. A cybersecurity remediation project followed to assist with compliance to the Department of Defense DFARS 252.204-7012 and NIST 800-171 Interim Rule Gap Assessment.
The cybersecurity assessment and remediation projects resulted in compliance portal configuration and assignment of roles, the deployment of network scanning tool along with an initial scan for evidence collection. Worksheets and forms were created and delivered to address policy, process and evidence documentation. Subsequently guidance and consultation services were provided related to the assessment. This led to an additional cyber security remediation project which focused on improving communications protection, configuration management and access control.
The key deliverable for the AS9100D Gap assessment were the key steps required to gain AS9100D certification. The key resulting deliverables of the cybersecurity project were a NIST auditor checklist, a risk analysis, a risk treatment plan, evidence of compliance, a policies and procedures template, an application and asset inventory, and an external vulnerability scan report, along with supporting worksheet and forms. The client also received access to the compliance portal for 60 days. Guidance and assistance were provided to help bring TEC into compliance in the key areas of communications protection, configuration management and access control.
