About NYS Cybersecurity Assistance
The task I objective is to establish a marketing and outreach plan which includes leveraging regional assets across the state and coordinating outreach to maximize the potential company assistance.
Our goal is to hold webinars highlighting DFARs requirements and provide other pertinent information to assist manufacturers in their cybersecurity efforts.
The task II objective, is to plan and execute webinars and workshops for New York State defense companies to introduce the assistance program and answer questions regarding cybersecurity needs and regulations.
These webinars and workshops will train companies to perform a NIST SP 800-171 self-assessment and determine if they need additional resources to help perform the assessment and potential remediations. At the end of the webinars and workshops the trainees will have the option to take a self-assessment. A minimum of 250 DoD companies will be engaged through workshops and webinars.
The task III objective, is to assist companies that don’t have the financial resources or the staff available to perform assessments. Follow on implementation projects will be on an as needed basis, determined by the assessment and if the company is ready to take on such tasks at the time. At least 67 defense related companies will be assisted with assessments.
Cybersecurity Assistance Grant Cohort
Manufacturers need to meet cybersecurity standards in order to do business with the U.S. Department of Defense (DoD). Companies that do not work with DoD directly but are still part of the DoD supply chain also need to meet cybersecurity requirements.
Today, a clause in the Defense Federal Acquisition Regulation Supplement (DFARS) allows manufacturers to self-attest to their cybersecurity compliance according to the NIST SP 800-171 Special Publication (SP). In the future, companies will be required to meet an appropriate level of Cybersecurity Maturity Model Certification (CMMC).
Because CMMC adds a verification component to DFARS 252.204-7012, companies that do not meet the DFARS cybersecurity requirements described in NIST SP 800-171 risk losing their ability to bid on new contracts or to complete existing contracts. To prevent this from happening, New York State is offering assistance to qualifying companies and seeking to increase the number of NYS defense contractors who are compliant.
The Cybersecurity Cohort
Mohawk Valley Community College (MVCC) and the Advanced Institute of Manufacturing (AIM) have been awarded a DoD Cybersecurity Assistance Grant from Empire State Development (ESD) to help small-to-medium manufacturers, who are part of the DoD supply chain, learn how to perform a cybersecurity self-assessment based on NIST SP 800-171 and meet their current DFARS cybersecurity requirements.
Under this grant, AIM has partnered with FuzeHub to create a cohort of 320 DoD supply chain manufacturers that will receive cybersecurity assistance and training. There is no cost for qualified manufacturers to join this cohort. All of these cohort manufacturers will participate in an on-line training program that will provide instruction about how to perform a cybersecurity self-assessment. This training will be supplemented by a series of five webinars and three workshops across the state that are designed to provide cybersecurity education and awareness as well as to encourage DoD manufacturers to join the cohort.
Of these 320 cohort manufacturers, 67 will be eligible for a grant for a personalized cybersecurity risk assessment according to the DFARS cybersecurity requirements detailed in NIST SP 800-171. This assessment will be performed by AIM, the Manufacturing and Technology Enterprise Center (MTEC), or one of their subcontractors.
The maximum award amount is $6,000. All grant recipients are required to pay a minimum of 20% of the project costs. For example, if a project costs $7,500 and the company is awarded $6,000, the company must pay $1,500, which represents 20% of the total.
Manufacturers that receive cyber assistance grants must pay the required 20% amount directly to the service provider. The project must be completed by September 30, 2021.
Learn More About Upcoming Events
Mohawk Valley Community College provides accessible, high-quality educational opportunities to meet the diverse needs of our students. We are the community’s college, committed to student success through partnerships, transfer and career pathways, and personal enrichment.
The Advanced Institute for Manufacturing, or AIM, has a mission to provide small and medium sized manufacturers in the Mohawk Valley Region with training, consulting, and technology services that will lead to new product development, cost reductions, increased efficiency and profits.
AIM is designated by NYSTAR and NIST as a Manufacturing Extension Partnership Center (MEP). MEP has 588 field locations throughout the United States and more than 1,200 technical field staff.
FuzeHub is a not-for-profit organization that connects New York’s small and mid-sized manufacturing companies to the resources, programs and expertise they need for technology commercialization, innovation and business growth.