Category: news

By: Jan Fourman, PhD, EdD, MBA

Do you currently have a DoD contract? Do you want one soon? If you say “yes” to either question, you need to know important cyber legal requirements if you handle Controlled Unclassified Information (CUI).

The important update is that CMMC Revision 3, along with its companion assessment publication NIST SP 800-172A Revision 3, is now live. This is a phased rollout that has already started. On November 2026, most contractors handling CUI will not be able to self-certify your cyber readiness. After that date, you’ll need to use a third-party auditor.

But let’s go back in time a bit to address any revision questions. CMMC Revision 2 was published in February 2021. This update added 39 requirements focused on confidentiality. So, why update again? Revision 3 expands the coverage to, not only confidentiality, but integrity and availability. 

Now here’s the confusing part. Revision 2 will still be used alongside Revision 3. The Revision 2 is your baseline, so nothing changes operationally.  In CMMC, Revision 3, Level 2 is the core enforceable baseline. What changes is the assessment choices stated previously – from self-assessment to having a formal third-party audit.

We shouldn’t be surprised. The DoD has been preparing us for this revision since their publication of a memorandum defining exact Organization-Defining Parameters (ODPs) for updated NIST SP 800-171,Revision 3. The memo, released on April 15, 2025, set specific values that defense contractors must use for their cybersecurity controls. Key areas outlined standardized values for criteria of invalid logon attempts, threat/vulnerability reporting, cryptographic key management and system auditing.

Key Steps for Contractors

First, understand your requirements. Over 90% of us are required to fully comply with the 110 controls outlined in NIST SP 800-171 Revision 2. Second, understand that the changes in assessment will be a phased rollout. Phase 1 is now through November 10, 2026. Self-assessment is allowed now through November 10 for Level 2 CUI contracts. Phase 2 starts after November 10, 2026, when no more self-assessments will be allowed. However, between now and November 10, the DoD can still require a full third-party audit. Plus, you are still required to fill out an annual affirmation regardless of self-assessment or formal third-party audit. This annual assessment is the DoD’s Supplier Performance Risk System (SPRS).

Wait! Do I really need CMMC Level 2?

Yes. CMMC Level 2 is now your cybersecurity readiness requirement. But what if I already have a Plan of Action and Milestones (POA&M)? For those of you that don’t know about POA&Ms – In cybersecurity, this is a document that identifies tasks needed to address security vulnerabilities. POA&Ms outline the control gaps caused by the weaknesses with corrective actions to be taken. In addition, you are required to follow strict POA&M rules. For example, you’re permitted to take fewer than 10 risk-based gaps that need to be filled within a specific timeframe.

While the POA&M is an important tool in the CMMC framework, it won’t let you put off the assessment deadline this coming November. Misunderstanding these rules can put eligibility for current or future DoD contracts at a risk. POA&Ms must be completed before any assessments can be initiated.

What are my next steps?

Continue pursuing or maintaining Level 2 certification against NIST SP 800-171 Revision 2. It is still current and your enforceable baseline. However, familiarize yourself with CMMC Revision 3, as this is where requirements are heading.

We welcome your questions and comments. We’ll keep you updated. Contact us at industryworkforcesolutions.com.

References

CMMC. (2026). CMMC POA&Ms and critical requirements: What you can and can’t defer as the enforcement deadline approaches. Retrieved from cmmc.com/

CMSCyberGeek. (2026). Plan of Action & Milestones (POA&M). Retrieved from security.cms.gov/

Cyberxgov Solutions. (2026). CMMC Rev. 3 compliance in 2026: What defense contractors must know before it’s too late. Retrieved from cyberxgovsolutions.com/

DoD. (2025). Memorandum for senior Pentagon leadership Commanders of the Combatant Commands, Defense Agency and DoD Field Activity Directors. Retrieved from dodcio.defense.gov/

Ecuron. (2026). NIST SP 800-172 Rev.3 is final: DOD can now update both CMMC levels at once. Retrieved from CMMC@ecuron.com/ 

Supported through a NICE RAMPS Award from the National Institute of Standards and Technology

Northwest Indiana — Industry Workforce Solutions (IWS) today announced the launch of the CyberReady® 2.0 Supply Chain Initiative, supported through a NIST NICE RAMPS award. CyberReady® 2.0 is the only RAMPS-funded initiative awarded in Indiana through this national program during the current funding cycle. The initiative is designed to strengthen cybersecurity readiness across Northwest Indiana’s critical manufacturing and industrial supply chains. 

Manufacturing consistently ranks as one of the most targeted industries for cyberattacks, with approximately 25% of all global cyber incidents impacting manufacturers — and as many as 80% of U.S. manufacturing companies found to have critical vulnerabilities that put operations and supply chains at elevated risk.

In Indiana, where manufacturing accounts for nearly 17% of the state’s gross domestic product — significantly higher than the national average — cybersecurity vulnerabilities represent both an economic and national security concern.

CyberReady® 2.0 is a business resilience and supply chain competitiveness initiative designed to elevate cybersecurity governance and risk awareness across critical manufacturing sectors. The program equips small and mid-sized manufacturers with applied resources, actionable risk insight, and a clear understanding of their current cybersecurity posture. Through structured assessments and guided strategy sessions, participants gain practical pathways to close compliance gaps, protect existing contracts, and strengthen their position within federal and corporate supply chains, enhancing their ability to grow market share and profitability.

Supported by the NIST NICE RAMPS program, CyberReady® 2.0 advances the NICE Strategic Plan at the regional level within a manufacturing-intensive state.

“Cybersecurity compliance has become a defining requirement for manufacturers and suppliers operating in today’s supply chains,” said Doreen Gonzalez-Gaboyan, President and CEO of Industry Workforce Solutions. “CyberReady® 2.0 helps democratize cybersecurity by giving small and mid-sized manufacturers clear visibility into their risk exposure and a structured path to strengthen resilience, safeguard contracts, and compete with confidence in federal and corporate markets.”

CyberReady® 2.0 is supported by a coalition of workforce, industry, and academic partners committed to strengthening Northwest Indiana’s industrial resilience. Key stakeholders include the Center for Workforce Innovations (CWI), NWI Forum, NIPSCO, and the Purdue University Northwest Center for Visualization and Simulation (CIVS). Together, these institutions anchor workforce strategy, economic leadership, energy infrastructure, and applied research across the region, reinforcing a unified response to cybersecurity risks impacting manufacturers and critical supply chains.

The CyberReady® 2.0 framework integrates executive governance and federal compliance alignment into a structured, business-driven model — enabling manufacturers to move from fragmented cybersecurity efforts to disciplined, documented risk management.

The initiative will operate through a selective, invitation-based cohort of manufacturers and industrial suppliers critical to regional and national supply chains. Initial participation, including executive-level sessions and a structured cybersecurity assessment, is provided at no cost to selected companies through federal support. Through these sessions, participants will identify risk exposure and develop prioritized action plans aligned with federal cybersecurity requirements, including NIST SP 800-171 and the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC).

CyberReady® 2.0 is designed for sustained engagement rather than one time instruction. Participating companies will advance through defined milestones that reinforce disciplined execution and measurable progress. The program will culminate in a regional convening that strengthens peer accountability and reinforces documented cybersecurity governance across participating firms.

Manufacturers and industrial suppliers committed to strengthening governance, protecting contract eligibility, and demonstrating disciplined cybersecurity risk management are encouraged to register for consideration at industryworkforcesolutions.com/cyber-ready. Cohort participation will be limited to ensure strategic focus and executive-level engagement.

For updates and participation information, visit: 

industryworkforcesolutions.com or write to us at media@industryworkforcesolutions.com  

---

About Industry Workforce Solutions

Industry Workforce Solutions, Inc. (IWS) is a strategic architect of cybersecurity readiness initiatives serving critical manufacturing and industrial supply chains. Through its CyberReady® framework, IWS integrates executive governance, workforce alignment, and federal compliance strategy into structured implementation models that enable small and mid-sized manufacturers to strengthen resilience, protect contracts, and demonstrate disciplined risk management. IWS specializes in translating complex federal cybersecurity standards into practical, business-driven actions.

Media Contact:
Mark LaCien 

VP of Marketing
Industry Workforce Solutions
media@industryworkforcesolutions.com 

Crown Point, IN – Industry Workforce Solutions (IWS) and Xperteks, two nationally recognized leaders in cybersecurity and IT services, have formed a strategic alliance to deliver comprehensive cybersecurity solutions for small and medium-sized enterprises (SMEs). The partnership is designed to accelerate compliance with federal cybersecurity mandates, enhance IT infrastructure, and strengthen America’s supply chain resilience.

End-to-End Cybersecurity and IT Services for Regulated Industries

---

This alliance connects IWS’s deep expertise in cybersecurity compliance and workforce development with Xperteks’ experience in managed IT services, cloud security, and digital infrastructure. Together, they provide scalable solutions tailored to help businesses meet the stringent requirements of frameworks like CMMC Level 1, NIST 800-171, and ISO 27001.

Why This Partnership Matters for Small Businesses

---

Industry Workforce Solutions (IWS), led by cybersecurity strategist Doreen Gonzalez-Gaboyan, has helped over 1,000 companies build cyber readiness and achieve government contracting eligibility. Its flagship CyberReady® program simplifies complex security frameworks into actionable strategies for growth, especially for small and medium enterprises who sometimes lack the resources and expertise in cybersecurity.

Xperteks, a leading managed services provider (MSP) recognized by CRN and Channel Futures, is led by Marcial Velez, a 2024 EY Entrepreneurs Access Network honoree. The company delivers high-performance IT solutions with a strong focus on cybersecurity protection, cloud optimization, and technology modernization for SMEs and enterprise clients.

What Clients Gain from the IWS-Xperteks Partnership

---

CMMC and NIST Compliance Support
Get audit-ready with expert-guided implementation.

Turnkey Cybersecurity Services
From risk assessments to full-stack IT security.

Scalable Infrastructure
Secure cloud, endpoint, and network solutions tailored for growth.

Continuous Monitoring and Improvement
Proactive support that evolves with your business.

Federal, State and Corporate Readiness
Meet contract requirements and stand out in the supply chain.

“Cybersecurity and compliance are no longer optional they’re business imperatives. At IWS, we help SMEs not only meet federal standards but build the long-term capabilities needed to succeed in a digital-first economy. This alliance with Xperteks brings those goals within reach for more companies.”
— Doreen Gonzalez-Gaboyan, CEO, Industry Workforce Solutions

“True cybersecurity goes beyond tools it requires the right partners. By teaming up with IWS, we’re enabling clients to achieve both compliance and operational resilience through a unified approach to IT and security.”
— Marcial Velez, CEO, Xperteks

About Industry Workforce Solutions (IWS)

---

Industry Workforce Solutions is a national leader in cybersecurity readiness and third-party risk management for small businesses in regulated industries. Through its CyberReady® program, IWS provides training, tools, and compliance guidance to help companies meet the standards of CMMC, NIST 800-171, and ISO unlocking new opportunities in federal and corporate supply chains.

Follow IWS: LinkedIn, YouTube, X

About Xperteks

---

Founded in 2001, Xperteks is a New York-based cybersecurity-focused managed service provider (MSP) offering advanced IT infrastructure, cloud management, and digital transformation services. With a national client base and award-winning solutions, Xperteks helps organizations maximize uptime, secure operations, and scale for the future.

Follow Xperteks: LinkedIn, X, Facebook

Empowering Small and Medium Enterprises with Essential Cybersecurity Knowledge and Strategies

Crown Point, IN – October 1, 2024 – Industry Workforce Solutions (IWS) announces the release of a must-have guidebook for businesses navigating today’s complex digital landscape: “CyberReady Strategies in Cybersecurity for Skill Enhancement, Access Expansion, and Sustainable Business Growth,” co-authored by visionary leader Doreen Gonzalez-Gaboyan and renowned cybersecurity expert Jan Fourman. This guidebook empowers businesses to strengthen their cybersecurity, meet national standards, and unlock growth opportunities by mastering cybersecurity readiness.

This guidebook, along with the CyberReady program, is a game-changer for developing robust information security management programs. Offering practical approaches to address risks associated with external vendors, suppliers, and partners, ensuring compliance with national standards, meeting client mandates for cyber readiness, and aligning with industry norms. For businesses seeking compliance with regulations like NIST SP 800-171 and CMMC, they are crucial.

The book incorporates the groundbreaking CyberReady® program content that was developed and designed by the IWS team, industry supporters, and with government guidance. The CyberReady program has already transformed cybersecurity for businesses across the nation. It outlines a well-organized journey, starting with the basics of cybersecurity readiness and ending with the creation of a System Support Policy that integrates workforce readiness and industry-specific responsibilities. 

Miguel Villarreal, CEO and Founder of VILLA-TECH, Inc., shares in the book’s foreword, “The CyberReady program and the guidebook were the perfect fit for us. Doreen and her team provided invaluable guidance, mapping out the controls and bringing in subject matter experts. Thanks to their support, we achieved NIST SP 800-171 Rev2 compliance and are now working toward becoming a defense industrial base contractor.”

Dr. Chris Golden, one of the creators of the CyberReady program and current cybersecurity instructor, provides a compelling foreword for the book. “First and foremost, it’s all about pure knowledge. Increasing one’s comprehension of cybersecurity challenges and solutions is advantageous. Once you comprehend the fundamentals, you’ll discover that cybersecurity is not as insurmountable as you previously imagined. By acquiring this knowledge and skill set, you’ll be able to complete the CyberReady program successfully, meet compliance requirements, and finally gain access to the procurement table you’ve been denied previously.

CyberReady Strategies in Cybersecurity cover key topics, including:

• Understanding Cyber Threats: Insights into the most pressing cyber threats facing small businesses today.
• Skill Enhancement in Cybersecurity: Strategies to build and expand your team’s cybersecurity skills.
• Access Expansion and Compliance: How to expand your market access by ensuring compliance with regulations like NIST SP 800-171 and CMMC.
• Develop a System Support Policy: Guidance in creating policies that address workforce readiness and industry-specific responsibilities.
• Plan for Cybersecurity Remediation: The importance of gap assessments and effective remediation planning.
• Leverage the CyberReady Designation: Using this designation for ongoing capacity building, community impact, and economic growth.

Position yourself as a game changer by demonstrating your cyber readiness with these essential resources. If you’re a corporation looking to enhance the cyber readiness of your supply chain, this book and program will aid your supply chain of all sizes, particularly those in heavily regulated industries. 

CyberReady Strategies in Cybersecurity for Skill Enhancement, Access Expansion, and Sustainable Business Growth are available along with your registration to the CyberReady program. Enrollment is currently open for the 5-week virtual program which begins on March, 3^rd, 2025. Seats are limited, so register today.

Register Here: https://industryworkforcesolutions.com/cyber-ready/registration/ 

---

About the Authors

Doreen Gonzalez-Gaboyan is a visionary business executive and consortium builder with deep expertise at the intersection of cybersecurity, workforce development, and supply chain resilience. As President and CEO of Industry Workforce Solutions, she has successfully convened corporations, government agencies, and academic institutions to strengthen U.S. supply chains—especially by advancing opportunities for small and mid-sized companies.

Jan Fourman, PhD, EdD, MBA, RAC, CSSBB is an expert in regulatory compliance with experience in the pharmaceutical, medical device, and cybersecurity industries. A certified Six Sigma Black Belt and auditor, she has a strong background in global quality systems, cybersecurity, and project management. 

---

About Industry Workforce Solutions (IWS)

Industry Workforce Solutions specializes in cybersecurity compliance and workforce development for small and medium sized companies or SMEs. IWS offers programs like CyberReady, regulatory affairs guidance, and quality compliance services to help businesses thrive in highly regulated industries

Featured in the INFLDiCOTA June 2023 Issue

Industry Workforce Solutions prepares small and medium sized businesses or SMEs to enter large supply chains by addressing their cyber readiness and connecting them to buyers.

National security is of dire importance, now more than ever. Companies that do not have industry-recognized cyber controls in place put all of us at risk. All businesses, in every sector, have a critical role to play to combat the issue: to protect their data and the data of their clients. To compete, a company must demonstrate cyber hygiene.

To address this national crisis, and diversify the supply chain, Doreen Gonzalez-Gaboyan launched Industry Workforce Solutions (IWS) in 2020. Industry Workforce Solutions’ flagship program, CyberReady, prepares small and medium sized businesses or SMEs with the tools to compete for contracts in large federal, state, and corporate arenas. The program is offered directly to companies or in collaboration with corporations who are working to secure their supply chain.

Gonzalez-Gaboyan’s past effort while working on cyber- security with prime contractors in the defense industry led her to understand barriers for companies, the lack of cybersecurity controls, access to resources needed to obtain them, and how these issues are preventing small and medium sized businesses or SMEs from being able to compete. She also realized a pipeline was needed between these companies and the buyers.

The professionals at Industry Workforce Solutions have backgrounds in cyber risk assessments, defense contracting, and workforce development – providing all sides necessary to build a cyber- safe company fully qualified to join the supply chain with no limitations.

“The most important part of what we do is the end result for small and medium sized businesses or SMEs,” she said, “which is allowing them to stand shoulder-to-shoulder with businesses of every size, and in every sector, ready and able to participate in the supply chain”.

The National Minority Supplier Development Council (NMSDC) partnered with Industry Work- force Solutions to bring access to the CyberReady program to their members. It leveraged its base of business enterprises and the corporations that support them and offered the program free to its certified MBEs. To date, hundreds of NMSDC’s members have begun a journey to cyber readiness.

The CyberReady program is self-paced, offering face-to-face time with the instructors via virtual online sessions, followed by a cyber gap assessment allowing companies to identify their gaps and a pathway to close those gaps. The program is full cycle – from awareness, to readiness, to opportunities – for a company.

Driven by a desire to get into federal contracting, many of the companies who have engaged with IWS are achieving the full CyberReady Designation, which serves as a badge of compliance. Justice Cassel, of the Silicon BlackGroup (SBG) enrolled in the Cyber- Ready program. He recently went as far as achieving the full CyberReady Designation.

The program is aligned with the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC) and other assessment tools used to determine a company’s level of cybersecurity. “As SBG’s Cybersecurity Product Lead and professional with over 12 years of industry experience, I know security – and can attest, the CyberReady Designation is a true difference-maker. Industry Workforce Solutions is a verifiable CMMC- ready program that levels up the playing field to ensure small and medium sized businesses or SMEs are qualified to compete for federal contracts”.

The National Minority Supplier Development Council and Industry Workforce Solutions, Inc. have partnered once again to launch the second cohort of the CyberReadyMBE® program.  The program gives minority business enterprises (MBEs) the tools to implement cyber controls and practices to become a stronger, more resilient company.

The program kicked off in February with another successful Cyber Summit, an impressive lineup of experts who laid out the state of cybersecurity in today’s supply chain.  

This summit came with a new element that participants had been awaiting – a panel discussion made up of the program’s alumni. Hearing directly from MBEs who had been through the journey and could speak to the benefits of the program, the nearly 150 participants clamored to the session’s chat section to flood the panel with questions. 

“This has enhanced the learning and the entire experience for MBEs,” said Doreen Gonzalez-Gaboyan, president and CEO of Industry Workforce Solutions.

CyberReadyMBE® is a virtual program designed to take minority business enterprises through 17 cybersecurity controls required to do business with most major governments and corporations in today’s risky digital environment.  It’s being provided free to the certified MBEs of NMSDC.

“A CyberReadyMBE® designation is recognized by our NMSDC corporate members, and you can align your cyber readiness with the Dept. of Defense guidelines,” Lisa Miller, NMSDC’s vice president of strategic partnerships, programs, conferences, meetings and events, told the summit attendees. “At the end of the day, that is what we really want — more contract opportunities for our MBEs.”

The course provides a combination of required and optional sessions that are led by instructors, including Chris Golden, who worked on designing the very rules the Department of Defense uses to vet their suppliers; and Jan Fourman, who guides small business owners through designing a workforce and company processes that support the kind of cyber defenses demanded in today’s supply chain.

Sandra Cardenas of Advanced Foam and Packaging, enrolled in the program because her company already had a defense contract but in order to align with their cyber standards, she needed the templates, checklists and guidance that CyberReadyMBE® provides.

“In the gap assessment, everything is explained in detail,” she said. “I used it to put together my security system. Now I have a plan. Now, we can show that we have a working procedure.”

Jetheda Hernandez, senior director of strategic alliances and programming for the NMSDC, praised the MBEs for embarking on a journey to cyber resiliency, thus ensuring their future economic vitality. Outlining the next steps in the process, including joining the MBE Slack Community, completing all the modules, and attending the session with corporate suppliers, she emphasized the need to commit to the final step, a gap assessment that will lock in a CyberReadyMBE® Designation, recognized by government and corporate entities as a badge of cyber hygiene.Enrollment for Cohort 2 is open until April 30. Learn more and register at inwsinc.com.

More than 500 minority business enterprises (MBEs) participated in the first cohort of CyberReadyMBE®, an impressive number considering the program just began its rollout with the National Minority Supplier Development Council (NMSDC). The program, designed to improve cyber readiness for small businesses, will be offered to NMSDC’s certified MBEs four more times in the next 18 months, with registration happening now and the kick-off Cyber Summit set for February 21, 2023.

“The CyberReadyMBE® program is designed to bring MBEs on a journey of awareness, to capacity building, and then on to new opportunities.,” said Doreen Gonzalez-Gaboyan, president and CEO of Industry Workforce Solutions. “Our intent is to provide MBEs with future impact and economic gains by connecting them to new markets that would have not been available to them otherwise. The program is a hybrid of virtual live sessions with the keynotes and instructors, along with self-paced modules and study guides.”

After a high-profile National Cyber Summit to kick off the program’s first cohort in September, Chris Golden, who serves as chief advisor to IWS’s cybersecurity training programs, gave MBEs an overview of basic cyber hygiene practices in CyberReadyMBE®’s first module.

The program was designed to align with the federal standards used in the Department of Defense’s CMMC level 1 cybersecurity training. Golden is known as the “father of CMMC,” which stands for cybersecurity maturity model certification, the standard the government uses to safeguard sensitive national security information. He works to enhance the overall security and resilience of the supply chain for the defense industrial base and the U.S. Dept. of Defense.

In the three-hour session, Golden gave an overview of basic cyber hygiene practices in preparation for Module 2, which focuses on getting a small business’s workforce prepared to handle the cybersecurity requirements necessary to compete for contracts in the federal government and large corporations.

Golden emphasized that if, after going through these sessions, an MBE answers the post-course questionnaire with a series of “no, we don’t have that measure in place” answers, they have the most to gain because now a customized road map for achieving level 1 cybersecurity training can be set in motion.

Registration for the second cohort opened on October 17, 2023 with the kick Cyber Summit on February 21, 2023. The program is a hybrid of virtual live session with the keynotes, instructors, with self-paced modules and study guides.

Workforce needs are topic of CyberReadyMBE®’s Module 2 

Stepping in to educate MBEs on how to build a workforce equipped to achieve cyber readiness for small businesses is Jan Fourman, a Purdue University research scientist who advises Industry Workforce Solutions on workforce and curriculum development for its CyberReady® programs.

In Module 2, Fourman taught certified MBEs of the National Minority Supplier Development Council, how to administer and maintain 17 controls from a workforce perspective. She outlined the six sections a cyber plan should have, as well as the roles and responsibilities of a dedicated employee to oversee the plan and train required personnel.

Fourman, an expert in program development, teaches organizations how to remain compliant with the statutory and regulatory standards of their industries. In Module 2, she built upon Module 1’s foundational requirements for basic cybersecurity by instructing MBEs on how to oversee their cybersecurity plan, how to train employees, develop applications, and more.

Fourman advised students to return to the recorded session to build their own plan for a CyberReady® workforce, step-by-step, using the template and checklists to acquire the needed tools and personnel. Ultimately, all these measures are necessary for any small business with aspirations of gaining contracts with the federal government.

Module 3 puts MBEs in position to work with corporations and government

Aligning MBEs with government and corporate cybersecurity standards and setting them on a path to achieve cyber readiness for small business has been the goal of CyberReadyMBE®’s first two modules. In the third module, three instructors joined the session to tell MBEs exactly what they need to do to win contracts at this level.

Tammy Thompson and Brian McHugh of Bank of America, along with Matt Burkett of NSWC Crane, talked about the cyber requirements and public polices of various sectors and what it takes to do business with the federal government and corporate organizations.

Module 4 teaches MBEs how to leverage resources and match with suppliers

The instruction portion of Industry Workforce Solutions’ CyberReadyMBE® program is wrapping up with the completion of Module 4. Many MBEs who have completed the course up to this point are getting ready to initiate the gap assessment portion of the training.

In this session, Matchmaking and Leveraging Resources, Purdue University’s Jan Fourman came back to guide MBEs through completing their cybersecurity policy and capabilities statements before turning the session over to representatives of GE who outlined the process that small businesses must follow in order to work as a government or corporate supplier.

Bethani Clever, of GE Aviation and GE Edison Works, helps her company meet small business reporting and growth goals. This means that in helping GE diversity their supplier base, she also walks small businesses through the process of joining GE’s supplier network. She simplified that complex process during the session, providing a checklist of what products and services her company needs as well as the qualifications required to contract with GE.

Kent Sharp, who is the military sourcing compliance leader at GE Aviation, spoke about the government side of contracting, specifically, complying with federal acquisition regulations.

Next steps for the MBEs include returning to the learning platform to finish any modules they have missed, taking a post-course quiz, register for the optional but recommended gap assessment.

*  *  *

Certified MBES of the National Minority Supplier Development Council, who signed up for the training, but have missed sessions, can catch up and remained enrolled. Simply return to the CyberReadyMBE® learning platform to access the previous sessions.

To learn more about CyberReady® programs for small and minority businesses, visit inwsinc.com.

Partnership between Industry Workforce Solutions and the NMSDC is underway with MBES on their way to cyber compliance suitable for government contracts

Experts in cybersecurity, along with corporate and government partners, gathered in September to present the 2022 National Cyber Summit to an audience of minority business owners and their staffs.

The virtual event kicked off CyberReadyMBE®, a five-week training program designed by Industry Workforce Solutions (IWS). Its goal is to help small and medium sized companies or SMEs develop the infrastructure they need to meet cybersecurity protocols demanded in larger, more regulated markets. The CyberReadyMBE® designation will enable them to join larger supply chains and compete for contracts.

The National Minority Supplier Development Council (NMSDC), together with corporate sponsors GE, Bank of America and Truist, have partnered with IWS to provide the training to the council’s 15,000+ certified minority business enterprises over the next year.

The summit, attended by about 150 MBEs, welcomed cyber experts from every corner of the cybersecurity discipline. From the largest corporations to the federal government, the speakers and panelists discussed current issues in cybercrime, how to insulate a business from cyberattacks, what entities require in order to work with suppliers, the process of shaping up a small business’s cyber readiness, and more.

Once the presentation was made available to the MBEs who committed to the program but couldn’t attend that morning, the number of registrants who attended Module 1 had exploded. To date, more than 550 MBEs intend to go through the training, ultimately preparing them to achieve a Cyber Maturity Model Certification (CMMC) Level I certification.

The modules cover 17 controls of cyber maturity and coach MBEs through developing a workforce equipped to handle cybersecurity issues. In the latter part of the training, IWS connects MBEs directly with government and corporate suppliers to facilitate future contracts. Finally, MBEs who opt for the personalized gap assessment, will receive individual consulting designed to close all cyber gaps.

Doreen Gonzalez-Gaboyan, president and CEO of IWS, said the diversity and level of expertise provided by the keynote speakers and the panelists exceeded her expectations.

“The certified MBEs had an opportunity to hear about cybersecurity from every angle, with more to come,” Gonzalez-Gaboyan said. “We’ve designed this program in such a way that every MBE that commits to this process will be on path to earn a CyberReadyMBE® designation which will enable them to join some of the largest and most regulated supply chains in the country.”

The NMSDC and IWS are planning a series of opportunities to take the CyberReadyMBE® course throughout the year. The next opportunity begins February 21, 2023.

Regional NMSDC affiliates and the NMSDC office can provide information about available dates.

NEW YORK – The National Minority Supplier Development Council (NMSDC) will extend critical cybersecurity training to its 15,000+ certified minority business enterprises (MBEs) across 23 regions.

CyberReadyMBETM is a five-week program developed by Industry Workforce Solutions (IWS) to provide pathways for companies to increase their cyber capabilities and resiliency, allowing them to become integrated into corporate and public-sector supply chains.

The move is part of a nationwide effort to strengthen the nation’s supply chain and give businesses the infrastructure they need to compete effectively in the global marketplace.

“We are proud to offer this innovative program to our certified-MBEs, to not only meet basic cybersecurity standards to protect themselves and their partners, but more so to give them a competitive edge when they bid on contracts,” said Ying McGuire, CEO and president of NMSDC. “Being certified has first mover advantages, and we hope programs like this will show other MBEs the value of NMSDC certification.”

The launch comes on the heels of a successful pilot program implemented with the Chicago Minority Supplier Development Council last summer. Now, the partners are launching the program on a national scale. The first session, which starts Sept. 13, will register certified MBEs through Sept. 12. Four subsequent sessions will be offered over the next year to ensure all the MBEs can achieve the designation.

The program kicks off with a cyber summit in which participants will hear from industry experts about their risks, followed by four instructor-led sessions, then onto a gap assessment with the goal of helping MBEs stabilize their systems, thereby increasing their opportunities with NMSDC corporate partners and federal agencies.

When complete, the MBEs will hold a CyberReadyMBETM designation, recognized by the entire NMSDC corporate member network. The program concludes with a virtual recruitment fair attended by corporate sponsors and supporters to help MBEs cultivate relationships with corporate and governmental entities.

The U.S. Department of Defense and corporations recognize that small businesses have a crucial role in the nation’s efforts against cybersecurity attacks. Using their standards as a model, the program is aligned with the NIST NICE Cyber Framework and the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC), which are required for all entities doing business with the DoD.

“We consulted with academic researchers, cybersecurity experts, corporations, and government agencies to build a program that aligns with national standards of cybersecurity,” said Doreen Gonzalez- Gaboyan, president of Industry Workforce Solutions. “The result is a pathway for MBEs to increase their cybersecurity capabilities and resiliency. In addition to giving them the tools to be compliant with the standards outlined by the U.S. Department of Defense, the program will also help MBEs address their unique risks and gaps and provide guidance on addressing them.”

The program is sponsored, in part, by Bank of America, GE, and Truist. It is backed by the Naval Surface Warfare Center Crane Division, which counseled IWS and NMSDC on the tools MBEs need to effectively and safely compete for business in the corporate and government realms.

Brent Voigtschild, corporate operations department director at Naval Surface Warfare Center shared that NAVSEA is in constant need of qualified and prepared companies who can support the critical needs of the U.S. Navy.

“This program gives MBEs access to federal opportunities that they previously couldn’t access because of their cyber immaturity,” Voigtschild said. “This program not only helps the MBE join the global supply chain ecosystem but it strengthens the entire country’s ability to compete globally.”

For more information, send an email to info@billyw15.sg-host.com.

About Industry Workforce Solutions

Industry Workforce Solutions, Inc. brings together the brightest minds in business, government, and academia to address the cyber and workforce maturity issues that inhibit the nation’s supply chain resiliency. The collective expertise of these players is key to solving the nation’s supply chain gaps and related cybersecurity issues. IWS is dedicated to ensuring small and medium sized companies or SMEs play a critical role in protecting the nation’s data and security. For more information, please visit industryworkforcesolutions.com.

About NMSDC

Founded in 1972, NMSDC is the longest-operating business growth engine for the broadest group of systematically excluded communities of color (Asian-Indian, Asian-Pacific, Black, Hispanic, and Native American), and our impact goes far beyond the supply chain. It’s about upward mobility for the emerging majority of Americans, an equal shot at participating in the American experiment of free- market capitalism and entrepreneurship. Our work is about correcting the unequal access to wealth- building opportunities. For more information, please visit nmsdc.org.

Cyber readiness is a crucial first step in winning contracts with the government, corporations

Industry Workforce Solutions provides training, positions small companies to leverage resources and join U.S. supply chain

Small businesses need opportunities in larger sectors, and those supply chains need the diversity smaller companies bring. Minority-owned small businesses have additional challenges getting into the pipeline, yet they are perhaps the group that needs to be there the most.

At the same time, earning a spot in this competitive ecosystem can feel overwhelming for smaller companies trying to meet the strict protocols required of large corporations and the federal government.

Achieving cyber readiness is a critical first step that can help companies find their way into those contracts. Industry Workforce Solutions is a consulting firm that specializes in preparing businesses to achieve Cyber Maturity Model Certification (CMMC), an important cybersecurity milestone and soon a requirement from federal agencies.

To be eligible for government contract set-asides, small businesses ought to be shaping up their cybercrime defenses to protect their business. Sixty percent of small companies close within six months of an attack, as reported by Cybercrime magazine, and the estimated cost of one data breach is roughly $3.62 million.

One organization that has taken action to fill this gap is the National Minority Supplier Development Council (NMSDC), an advocacy organization focused on correcting unequal access to wealth-building opportunities.

In order to bring critical cybersecurity readiness to its 15,000+ certified minority business enterprises (MBEs), the NMSDC has partnered with IWS to help their minority business enterprises (MBES) with cyber awareness and readiness training. The training, a five-week virtual program called “CyberReadyMBE®,” is offered to certified MBEs at no charge, except for a highly recommended gap assessment that will provide the MBE with a national designation.

The first opportunity for NMSDC’s certified MBEs to take advantage of this program begins September 13, with its National Cyber Summit 2022, followed by four modules and a cyber gap assessment. The program is supported in part by corporate sponsors GE, Bank of America, and Truist Financial Corporation. More opportunities will follow through 2023, and in the future, the consultants of IWS intend to offer the training to other groups.

One unique feature about this training is the direct relationship-building that comes in the latter modules of the training. After addressing the protocols a business needs to have in place, and how to structure the personnel required to maintain cybersecurity, the experts will provide one-on-one opportunities for the small businesses to interact, giving them the necessary guidance to become cyber ready.

Matt Burkett is on the roster of professionals who will speak to the MBEs, providing a session about how to do business with the U.S. Navy. Burkett serves as deputy director of small business at Naval Surface Warfare Center, Crane Division, a U.S. Navy federal laboratory.

He says the U.S. Navy buys more than $12 billion in goods and services each year from small business partners. Among the most crucial first steps, he says, is making sure the company meets cybersecurity requirements, a must to even be considered for government contracts.

Doreen Gonzalez-Gaboyan, president and CEO of IWS said, “Our long-standing partnership with NSWC Crane has given us an understanding of the needs of Department of Defense and the Navy and allowed us to build courses like CyberReadyMBE® to help address cyber-ready supply chain issues that are aligned and relevant.”

Burkett says small and minority-owned businesses have much to gain from becoming cybersecurity ready.

“Who are the businesses that typically struggle with cyber requirements and becoming compliant to work with us? Oftentimes, it’s the small businesses. They are thinking about ‘how do I perform successfully? How do I buy the product or service that is needed in an efficient and cost-effective manner?’ That is typically what they are thinking about, rather than, ‘am I cyber compliant and ready to do business with the federal government?’ ”

Burkett said the importance of cyber readiness cannot be overstated, especially when it comes to government acquisitions. And, sticking with the complex process is worth the investment because of a limited pool of cyber -compliant competitors.

“We have to make sure the contractors are safeguarding the information they have,” Burkett says. “To have knowledgeable people with valuable information on what being cyber ready means can set you apart from others who work in the government space, but aren’t willing to take the steps that you are about to. It is important because a lot of our large Department of Defense suppliers and our DoD industry partners are requiring their small business subcontractors to be cyber compliant,” Burkett says.

To learn more about becoming CyberReady®, visit billyw15.sg-host.com.

About Industry Workforce Solutions
Industry Workforce Solutions, Inc. brings together the brightest minds in business, government, and academia to address the cyber and workforce maturity issues that inhibit the nation’s supply chain resiliency. The collective expertise of these players is key to solving the nation’s supply chain gaps and related cybersecurity issues. IWS is dedicated to ensuring small and medium sized companies or SMEs play a critical role in protecting the nation’s data and security. For more information, visit industryworkforcesolutions.com