Pentagon Expands Cybersecurity Program to Shield More Defense Firms
The Pentagon is widening its cybersecurity programme to include more companies in its defence efforts. Originally limited to cleared contractors, the scheme now welcomes non-cleared firms that handle sensitive information. Officials aim to bolster protection against growing digital threats. The Defense Industrial Base Cybersecurity Program, run by the Department of Defense Cybercrime Center (DC3), was first restricted to cleared defence contractors. In 2024, it expanded to include non-cleared contractors that process controlled unclassified or other sensitive data. Terry Kalka, director of the DOD Defense Industrial Base Collaborative Information Sharing Environment, oversees the initiative.
To qualify, companies must hold an active contract with the Department of Defense and manage sensitive but unclassified information. They also need a medium assurance certificate to exchange encrypted emails with DC3. There is no cap on the number of firms that can participate.
The programme addresses rising risks, including nation-state cyber threats and ransomware attacks. DC3 works alongside the Cybersecurity and Infrastructure Security Agency (CISA) to share critical threat intelligence. Interested businesses can find details at dc3.mil or by emailing [email protected]. The expanded programme allows more firms to access cybersecurity support and threat intelligence. Companies meeting the criteria can now apply without restrictions on participant numbers. The move reflects ongoing efforts to secure the defence industrial base against evolving digital dangers.