CMMC Center of Excellence Announces Engagement Agreement with DRAGOS Adopting CMMC for ICS/OT Cybersecurity

The Cybersecurity Maturity Model Certification Center of Excellence ( CMMC COE ), hosted by the Information Technology Acquisition Advisory Council (IT-AAC), a public-private partnership serving the public and private sectors for more than 15 years is excited to announce a partnership with Dragos, Inc., the global leader in cybersecurity for industrial controls systems (ICS)/operational technology (OT) environments.

This unique partnership will extend efforts to identify and include proven capabilities within the CMMC COE Marketplace to improve cybersecurity protection and resilience for the global defense industrial base network of contractors, vendors, and suppliers. Far too often, the cybersecurity protection and resilience discussion fails to include any true focus on industrial control systems or operational technology. Dragos has a deep bench of expert ICS/OT cybersecurity practitioners committed to helping its customers detect, prevent, investigate and respond to attacks from threat actors.

“This is exciting opportunity for us”, said Mr. John Weiler, Chairman of the Board at CMMC Center of Excellence, “This new partnership will further help advance the goals and objectives for improving the supply chain security and resilience of the US Department of Defense (DoD)”.



“Dragos believes the adoption of the CMMC model for ICS / OT cybersecurity is a critical step in our mission to safeguard civilization,” said Steve Applegate, Chief Information Security Officer, Dragos, Inc. “We are excited to join the CMMC COE Global Cyber Policy & Governance Working Group and lend our expertise to this vital initiative.”

The executed Engagement Agreement establishes a collaborative engagement between Dragos and the CMMC COE to partner in the furthering of their respective and complementary missions and objectives regarding the adoption, use, and expansion of CMMC-based cybersecurity practices, risk management, and compliance for the DIB contractor, vendor, and supplier community of providers creating a broader CMMC ecosystem globally to improve security and resilience.

Specific actions will include:

• Co-sponsor symposiums, training programs and podcasts leveraging their combined cyber and IT expertise.
• Host regular working groups, with other partners, to enable collaboration and communications.
• Work across industry, government, and academia to build on CMMC requirements to include and focus on attention to security and resilience of industrial control systems and operational technology.



The CMMC-COE and Dragos partnership will focus on bringing together the many disparate cyber and national security communities of interest to reduce complexity, improve awareness, and accelerate industry effort to become more cyber resilient against the growing threats from nation states and criminal enterprises.

The CMMC-COE establishes both a Market Place and Knowledge Clearinghouse that will include resources that support the overall effort, including white papers; tutorials; recorded webcasts; presentations; and more that will help reduce the cost and burden on small and medium size contractors already struggling from the impact of COVID.

For more information on the CMMC COE, please visit http://cmmc-coe.org email info@cmmc-coe.org or call 703-863-3766



About Dragos, Inc

Dragos has a global mission: to safeguard civilization from those trying to disrupt the industrial infrastructure we depend on every day. The practitioners who founded Dragos were drawn to this mission through decades of government and private sector experience.

Dragos codifies the knowledge of our cybersecurity experts into an integrated software platform that provides customers critical visibility into ICS and OT networks so that threats are identified and can be addressed before they become significant events. Our solutions protect organizations across a range of industries, including electric and water utilities, energy, and manufacturing, and are optimized for emerging applications like the Industrial Internet of Things (IIOT).

Dragos is privately held and headquartered in the Washington, DC area with regional presence around the world, including Canada, Australia, New Zealand, Europe, and the Middle East.

For more information on Dragos, please visit https://www.dragos.com/