Defense Industrial Base | South Carolina Critical Infrastructure Cybersecurity

The Defense Industrial Base Sector meets the U.S. military’s requirements for the research and development, design, production, delivery, and maintenance of military weapons systems, subsystems, and components or parts.

The Defense Industrial Base is made up of partnerships between:

U.S. Department of Defense
Foreign and domestic companies and their subcontractors
Government-owned facilities self-operated and run through contractors

The sector provides products and services that are essential to mobilize, deploy, and sustain military operations.

SC CIC supports the Defense Industrial Base Sector by facilitating two-way cybersecurity intelligence sharing with its network of Cyber Liaison Officers (CLOs), which can result in new threat trends to report up to the federal level, and by offering incident response (IR) capabilities. In addition to providing direct IR support with its internal team of analysts, SC CIC can request resources from task force members, engaging the appropriate state and federal agencies as needed.

Resources for the Defense Industrial Base Sector:

Man walking up the outside stairs of a government building.

CISA | Defense Industrial Base Sector Webpage

CISA’s Defense Industrial Base Sector webpage contains detailed information on what types of organizations belong to the Commercial Facilities Sector in the U.S. along with federal plans for the sector (Commercial Facilities Sector-Specific Plan) and all critical infrastructure in the country (National Infrastructure Protection Plan (NIPP)). Sector-specific plans address how the NIPP should be utilized while considering each sector’s unique perspective.

Military person working at a dual-monitor computer within a control center.

National Defense ISAC (ND-ISAC)

Information Sharing & Analysis Centers (ISACs) help critical infrastructure professionals protect their infrastructure and employees from cybersecurity threats through the collection, analysis, and dissemination of threat information. ISACs help increase situational awareness across the critical infrastructure sectors through information sharing, partnerships, and networking opportunities.

Government official working at a dual-monitor computer in an office within a control center.

DoD Cybersecurity Maturity Model Certification (CMMC)

The U.S. Department of Defense (DoD) has created the Cybersecurity Maturity Model Certification (CMMC), which aligns contractors and subcontractors with the DoD’s information security requirements. The CMMC program provides its contractors and subcontractors with a tiered model of cybersecurity standards that must be implemented, along with assessment requirements. The CMMC model is designed to protect Federal Contract Information (FCI) and Controlled Unclassified Information (CUI) shared with defense contractors and subcontractors during contract performance.

Military person operating a remote drone control center.

DoD Directive 8140.01

U.S. Department of Defense (DoD) Directive 8140.01- Cybersecurity Workforce Management unites the overall cyberspace workforce and establishes specific workforce elements (i.e., cyberspace information technology (IT), cybersecurity, cyberspace effects, intelligence (cyberspace), cyberspace enablers) to align, manage, and standardize cyberspace work roles and baseline qualification requirements.