§ 236.7 - DoD's DIB CS program requirements.

§ 236.7 DoD's DIB CS program Program requirements.

Cross Reference

Link to an amendment published at 89 FR 17749, Mar. 12, 2024.

(a) To participate in the DIB CS programProgram, a contractor must be a CDC and shall:

(1) Have an existing active FCL to at least the Secret level granted under the NISPOM (DoD 5220.22-M); and

(2) Execute the

own or operate a covered contractor information system and shall execute the standardized FA with the Government (available during the application process), which implements the requirements set forth in §§ 236.5

through

and 236.

7, and allows the CDC to select their level of participation in the voluntary DIB CS program

6.

(

3

b) In order for

participating CDCs

DIB CS Program participants to receive classified cyber threat information electronically,

they must

the company must be a cleared defense contractor and must:

(

i

1) Have an existing active facility clearance level (FCL) to at least the Secret level in accordance with 32 CFR part 117;

(2) Have or acquire a Communication Security (COMSEC) account in accordance with

the NISPOM Chapter 9, Section 4 (DoD 5220.22-M),

32 CFR part 117, which provides procedures and requirements for COMSEC activities;

and

(

ii

3) Have or acquire approved safeguarding for at least Secret information, and continue to qualify under

the NISPOM

32 CFR part 117 for retention of its FCL and approved safeguarding; and

(

iii

4) Obtain access to DoD's secure voice and data transmission systems supporting the voluntary DIB CS

program

Program.

(b) [Reserved]

[80 FR 59584, Oct. 2, 2015, as amended at 81 FR 68317, Oct. 4, 2016[89 FR 17749, Mar. 12, 2024]