Mission

Support the warfighter by assessing the Defense Industrial Base compliance in the protection of DoD Controlled Unclassified Information, ensuring contractors implement appropriate cybersecurity requirements, in support of acquisition decision making.

Vision

Security-focused, highly-trained cybersecurity professionals providing comprehensive and repeatable assessments for risk-based decision making.

Commitment

Integrity, Service, Excellence.

Welcome to the Defense Industrial Base Cybersecurity Assessment Center (DIBCAC) Contractor Resource Page.

The DCMA DIBCAC is leading the Department of Defense's (DoD) contractor cybersecurity risk mitigation efforts. DIBCAC assesses DoD contractors' compliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, and the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations," as well as the DFARS clause 252.204-7020’s NIST SP 800-171 DoD Assessment Requirements.

The DIBCAC is proud to be a recipient of the 2021 DoD CIO Cyber and IT Excellence Award.

DoD CIO Award: https://www.dcma.mil/News/Article-View/Article/2981222/tech-team-wins-cybersecurity-award/

Resources for Your Upcoming DIBCAC assessment

Pre-assessment package for candidate C3PAO assessments
Pre-assessment documents for NIST SP 800-171 assessments
DIBCAC SAFE Drop instructions. Ensure all files are appropriately marked.

Publically Releasable Resources

Additional Resources

Video: Cybersecurity Compliance: An Introduction to DFARS 252.204-7012 and NIST SP 800-171 Requirements
Procurement Integrated Enterprise Environment
Supplier Performance Risk System (SPRS)
SPRS - Frequently Asked Questions
DoD SAFE: Safe Access File Exchange (SAFE) and DoD Safe Access File Exchange (SAFE) Help. Ensure all files are appropriately marked. *Instructions included above**
CUI References:
CMMC References:
DFARS 252.204-7012 and NIST SP 800-171 References:

Contact Information

Interested in working for DIBCAC as a cybersecurity assessor? Please find details here and watch USAJOBS for any future job opportunities.

If you have general questions, please email DIBCAC Business Operations Inbox: DCMA_7012_Assessment_Inquiry@mail.mil.

If you have DIBCAC training questions, please email our Training Group Inbox: dcma_dibcac_training@mail.mil.

If you have CMMC questions, please email our CMMC Inbox: dcma_dibcac_cmmc@mail.mil.

If you’re part of another government entity, and would like to partner with DIBCAC for a joint assessment or join a DIBCAC Boot Camp, please email: DCMA_7012_Assessment_Inquiry@mail.mil.

DIBCAC Director, Nicholas J. DelRosso Jr.

As the DIBCAC Director for the Defense Contract Management Agency, Nicholas (Nick) DelRosso Jr. oversees DCMA's cybersecurity assessments of the Defense Industrial Base (DIB) based upon DFARS 252.204-7012. Prior to this position, he served as a Team Chief for the DIBCAC. In this capacity, he supervised a team which conducted cybersecurity assessments of the DIB. DelRosso has also served as Software Surveillance Specialist, Computer Engineer, and Support Program Integrator within DCMA. He has software development experience with a defense contractor and program experience as part of a Federally Funded Research and Development Center (FFRDC).

DelRosso earned a Bachelor of Science in Computer Science from The University of Scranton and his Master of Science in Computer Engineering from Villanova University.

Current as of June 2022