Assured Platform

This effort seeks to create a frictionless collaboration environment to allow small innovative government contractors to easily collaborate with their government program management counterparts. Current DFARS requirements and adherence to NIST800-171/CMMC requires a relatively significant level of effort (often additional FTEs) to ensure contracts are being executed in compliance with this regulations and standards. Additionally, government systems for managing STTRs/SBIRs are siloed and do not currently ease contracts oversight and more importantly easing collaboration between the government and performer teams. Under this effort a “compliance in a box” style approach will be taken to create a single installation package that brings commodity systems to a compliant state within the scope of technical controls without the need for typical high overhead IT oversite or expertise. Innovative concepts will be employed and integrated to maximize both confidentiality of data within spirit of NIST800-171/CMMC as well as ensure usability and collaboration opportunities are create by design. This will be accomplished using data loss prevention and protection techniques to ensure performer related data is protected at time of creation and access is only allowed for an authorized set of actions (e.g. specific user, process, time/place) while not disrupting research, engineer, or developer toolsets and workflows. Data communications will be protected in-transit using an inherent protect model that ensures sensitive data is only ever transmitted over verified channels and an audit/approval log tracks exceptions where needed (e.g. share approved content outside of “the system”). At the user and collaboration process level highly usable and adaptable cloud-based tracking, ticketing, and triage system will be used to create workflows that lend to the government/contractor relationship and collaboration needs. Approved for Public Release | 22-MDA-11102 (22 Mar 22)