Business Development and Support Division

Increased enforcement of federal and DoD cybersecurity regulations is putting many Hawaii contractors and their future eligibility for DoD contracts at risk. To help Hawaii’s defense community adapt to the challenges presented by these regulations, DBEDT and the Hawaii-based national cybersecurity firm eResilience present the Hawaii Defense Economy Cyber Compliance Education Program. This online program addresses prime contractor and subcontractor responsibilities and explains the actions contractors must take to achieve and maintain compliance.

To sign up for free cybersecurity education and assistance at www.eresilience.com/hde before the state-sponsored program closes on September 30, 2022. 

A limited number of NIST SP 800-171 Compliance Gap Analysis packages remain available and will be awarded on a first-come, first-served basis to qualifying contractors and subcontractors working on DoD projects in Hawaii.  

Current DoD regulations stipulate that NO NEW CONTRACTS OR SUBCONTRACTS involving Controlled Unclassified Information (CUI) can be awarded to companies unless they have filed a NIST SP 800-171 Basic Assessment report with the U.S. Government’s Supplier Performance Risk System (SPRS). In order to file the report, contractors must have a NIST-conformant System Security Plan (SSP) in place.