The 2021 Quarter 1 issue of Impact includes industry articles on topics such as

  • DQS Cyber Security Inc.
  • Phoenix Lighting Assisting with Pandemic Efforts
  • SQF and FSSC Version Updates
  • DQS Inc. Multi-site certificates
  • MEP National Supplier Scouting

Introducing DQS Cyber Security Inc. (DQS CSI)

You may or may not be aware that the Department of Defense (DoD) has rolled out a new requirement known as the Cybersecurity Maturity Model Certification (or CMMC).  CMMC is designed to provide increased assurance to the DoD that a Defense Industrial Base (DIB) contractor can adequately protect Controlled Unclassified Information (CUI) at a level commensurate with the risk, accounting for information flow down to its subcontractors in a multi-tier supply chain.  

The CMMC measures maturing with five levels and aligns a set of process and practices with the type and sensitivity of information to be protected and the associated range of threats.  The model encompasses the basics safeguarding requirements for Federal Contract Information (FCI) specified in Federal Acquisition Regulation (FAR) Clause 52.204-21 and the security requirements for (CUI) specified in NIST 800-171.  The framework adds a certification element to verify the implementation of processes and practices associated with the achievement of a cybersecurity maturity level. 

The DoD is working with a set of Pilot Organizations and has provided an update in the form of an Interim Rule, Assessing Contractor Implementation of Cybersecurity Requirements, on September 29, 2020 (effective November 30, 2020) to implement:  NIST SP 800-171 DoD Assessment Methodology and The Cybersecurity Model Certification (CMMC) Framework.  

In preparation for the CMMC certification rollout, DQS created DQS Cyber Security Inc. (DQS CSI), a wholly-owned subsidiary of DQS Inc., to provide 3rd party management system assessments and cyber security certifications focused on the CMMC market and has applied for C3PAO as a Certification Body Provider.  

DQS CSI will have a key focus on CMMC and the needs of the DoD supply chain.  A dedicated Project Manager as well as a Cross Functional Team have been created along with a Master Project Timeline and Cadence to support the success of this initiative.  DQS CSI has completed its initial CMMC Gap Analysis and is in the process of completing actions for both CMMC Level 3 and ISO 27001 compliance, which will be required of C3PAO organizations 
DQS Inc. and DQS CSI started working with our existing clients and those that have approached us for CMMC Certification needs by holding webinars in 2020 and will schedule as well as partner with OMNEX on additional webinars on cyber security topics throughout 2021.  

To help us understand our clients current and future Information Security Management System needs, including CMMC, we will be sending out a Survey that consists of 15 quick questions.  The goal is to be in a position by 3Q2021 to fully support our clients’ certification needs and the DoD goals for CMMC as well as other Information Security needs.

For additional information –  Ravi Maewall (Ravi.Maewall@dqsus.com).

 

Phoenix Lighting Assists with Pandemic Relief

It’s been a year since the pandemic has turned the way we do business upside down. Many companies, including us at DQS, had to pivot and find ways to continue on. We are so proud that we were able to adapt quickly, but we are even more proud of the work some of our customers have done. Some companies even shifted some of their business to help with the recovery of the pandemic, and so we wanted to highlight one of them here.

Phoenix Products, LLC has been ISO 9001 certified with DQS since 2014. During their audit this year, the auditor found out how they were able to assist with the US Navy’s urgent request to upgrade lighting so the USNS Comfort could provide relief to New York’s land-based hospitals that were over-capacity and struggling to keep up with the number of critical patients toward the beginning of the pandemic. The USNS Comfort is a Navy hospital ship with all the amenities of a land-based medical facility deployed to help ease the burden on New York hospitals at the time. 

Phoenix Lighting has been a longstanding lighting supplier for the US Navy since the 1970s, specifically with the Aircraft Carriers and Littoral Combat Ships. When the Navy turned to them with the need to update the lighting, they were able to customize, build and deliver ModCom 2 floodlights in a matter of four days so the USNS Comfort would have the lighting quality, safety and efficiency requirement for its deployment. They worked with distribution partners Federal Resources and Resource Lighting and controls to meet the Navy’s needs in time. 

Well done Phoenix Products! We love when our auditors relay stories like this about how our customers are helping to make a difference. 
 

FSSC Version 5.1 Starts April 1, 2021

It’s been a year since the pandemic has turned the As you may be already aware, FSSC 22000 issued the new version 5.1 on November 2020.

The Scheme documents are available in the webpage www.fssc22000.com.
Several resources are available in the FSSC 22000 website for your reference and effective implementation as soon as possible of the changes that may apply to your organization.

Your current certificates will need to be upgraded to version 5.1 starting from April 1st, 2021 and up to March 31st, 2022- depending on the status of your audit cycle.

We look forward to partner with your organization to audit your upgraded Food Safety management system FSSC 22000 version 5.1 soon. 

 

MEP National Network Supplier Scouting

In the 2020 Quarter 3 newsletter, we discussed the benefits of Manufacturing Extension Partnerships (MEPs) for small and medium sized manufacturers. Then in January this year, President Biden signed an executive order aimed at strengthening American manufacturing. During his speech, he mentioned the government will be using the MEP network to help government agencies connect with new domestic suppliers across the country. 

We again encourage our small and medium size manufacturing customers to work with their local MEP to see how they can help their business practices and connect them to the right customers. One way the MEP National Network™ can assist manufacturers is with the Supplier Scouting assistance, which can be applied on a local, regional, or national scale.  

According to NIST, the Supplier Scouting Partnerships include: 

  • U.S. Department of Transportation
  • Federal Railroad Administration
  • Federal Transit Administration (intra-city public transportation systems)
  • Federal Highway Administration
  • Maritime Administration
  • U.S. Department of Energy, including alternative and renewable energy technologies
  • U.S. Department of Commerce, including the National Institute of Standards and Technology
  • U.S. Department of Defense, including Defense Logistics Agency and Naval Air Systems Command

MEPs are able to use their relationships and knowledge of U.S. manufacturer capability to identify manufacturers’ capabilities, both in production and technology, and connect them with supply chains of larger companies and government agencies. This is especially helpful for the hard-to-source items and finding new suppliers of them. 

MEPs can even help to identify an ability for some manufacturers to pivot production for critical supplies. 

According to the NIST website, the result of the MEP National Network Supplier Scouting has been identifying hundreds of domestic suppliers that represent domestic manufacturers of critical supply chain products and thus the tens of millions of supply chain production dollars kept in the U.S.
 

Multisite Certificates

When searching to verify DQS Inc. multisite certificates, only the main Business Relation (BR) number of a multi-site certificate will have the certificate uploaded.  When using the online public search tool, searching on a site BR will refer back to the parent company BR where the main certificate will be located.  

You can verify these certificates at https://www.dqs.de/en/customer-database/. 
 

Author
Sara Gulo

Sara Gulo is the Marketing Specialist for DQS Inc. in the USA. She's been with DQS for 10 years in various roles, including Verification and Customer Service Professional. 

Loading...