Compliance & Authorization
Critical Program Information & Program Protection
Program Protection Plans that preserve the integrity of your supply chain and critical program information.
Overview
Protect the program, not just the network.
Components sourced outside the United States and embedded in mission systems pose significant security risk. The federal government treats information about their sourcing, transport, storage and use as Critical Program Information (CPI), and DoDI 5200.39 defines the protection responsibilities. CDT applies cybersecurity and logistics expertise to develop CPI protection plans, execute the strategy, and audit ongoing performance.
What's included
Capabilities
CPI identification
Identifying and documenting critical program information.
Program Protection Plans
Plans developed to DoDI 5200.39 requirements.
Implementation
Executing the protection strategy across the supply chain.
Performance audits
Ongoing audits that maintain supply chain integrity.
How we work
A proven, repeatable process.
-
1
Gap analysis
We measure where you are against the framework and document every gap, with evidence.
-
2
Roadmap
A prioritized plan: what to do first, what it takes, and what it will cost.
-
3
Remediate & document
We implement controls, harden components and write the policies, procedures and system security plans.
-
4
Assessment support
We prepare you for the assessor or inspector and stand with you through the review.
-
5
Continuous compliance
Ongoing monitoring and updates keep you compliant after the authorization.
Related services
Often paired with
Security Engineering
Embedded & Critical System Protection
Protection for the embedded systems inside critical infrastructure and weapon systems.
Compliance & Authorization
RMF, A&A & Authorization to Operate
NIST Risk Management Framework support from gap analysis through Assessment & Authorization to a full ATO.
Let's talk
Let's talk about critical program information & program protection.
Talk with a CDT engineer about your mission, your systems and your deadlines. We'll tell you honestly what it takes.