Pentagon finalizes rulemaking directing contracting officers to consider supplier risk during evaluation process

The Defense Department has finalized a rulemaking to revise the use of its supplier risk system platform for acquisition officials when evaluating bids for contracts, making a move that stakeholders see as a precursor for the Pentagon’s Cybersecurity Maturity Model Certification program becoming part of the formal acquisition process.

“This final rule is necessary to revise the Defense Federal Acquisition Regulation Supplement (DFARS) to incorporate the expanded capabilities of the Supplier Performance Risk System (SPRS), made possible by recent technical...