IPC Survey Finds Many May Exit Defense Market Due to Cyber Certification Costs

Reading time ( words)

John Mitchell, president and CEO of IPC, a global electronics manufacturing association, released the following statement in advance of the U.S. House Small Business Subcommittee on Oversight, Investigations, and Regulations hearing on the Department of Defense's (DOD) Cybersecurity Maturity Model Certification (CMMC):

"Cybersecurity is a must for U.S. national security, but the CMMC is an insurmountable hurdle for many small and medium-sized electronics manufacturers that do business with the Department of Defense. A recent IPC survey found CMMC may weaken the U.S. defense electronics industrial base even as it seeks to bolster the security of those that remain in it. The high costs and compliance burdens will push many companies out of the defense market unless DoD takes steps to support the industry's assessment and compliance. Even more worrisome, the risk to industrial base resiliency may be greater than currently realized as most companies are not fully aware of the heavy costs associated with CMMC compliance.

"IPC thanks Chairman Dean Phillips and Ranking Member Beth Van Duyne for carefully evaluating the impacts of CMMC on the small business community. We urge the DoD to continue its ongoing efforts to provide the DoD supply chain greater clarity, support, and opportunity to leverage existing standards to help reduce the costs and burdens of CMMC compliance."

On June 8, IPC released an industry survey and report, which found that one-quarter (24 percent) of electronic manufacturers say the costs and burdens of compliance with CMMC may force them out of the DoD supply chain. The survey also found that 33 percent of respondents said the CMMC would weaken the U.S. defense electronics industrial base, while 18 percent were unsure, highlighting the uncertainties involved. And 41 percent believe applying the CMMC clause to their suppliers will create other problems in the supply chain.

Most suppliers expect and are willing to spend upwards of $50,000 on CMMC readiness, and nearly one-third (32 percent) report that it will take them one to two years to prepare to undergo CMMC assessment. However, more than half of the suppliers say implementation costs of more than $100,000 would make CMMC readiness too expensive. DoD's own cost analysis estimated the cost of a CMMC Maturity Level 3 (ML3) certification to be more than $118,000 in the first year. This means DoD's own estimate of CMMC compliance costs is too high for 77 percent of the IPC survey respondents.


Suggested Items

Uncovering the Electronics Ecosystem

04/08/2022 | Nolan Johnson, I-Connect007
Nolan Johnson speaks with Will Marsh, vice president of TTM Technologies and president of the Printed Circuit Board Association of America, about the work the PCBAA has been doing in Washington, D.C., to get the industry better recognized by the country’s decision-makers. Marsh is optimistic, not only about the companies and individuals joining the effort, but in the recognition by Capitol Hill to secure the nation’s defense systems.

I-Connect007 Editor’s Choice: Five Must-Reads for the Week

01/08/2021 | Nolan Johnson, I-Connect007
It’s a new year, and time for new resolutions and new beginnings. “New year, new you” certainly is reflected in this past week’s news. We saw several announcements regarding mergers, acquisitions, and organizational changes, plus some government legislation to help kick off the new year. Based on viewing activity, readers were keen to keep up on the changes under way.

Defense Speak Interpreted: Defense Electronic Supply Chain Issues

10/09/2018 | Dennis Fritz, Fritz Consulting
On October 5, 2018, the Department of Defense (DoD) highlighted issues with the release of the 146-page report “Assessing and Strengthening the Manufacturing and Defense Industrial Base and Supply Chain Resiliency of the United States” from President Donald J. Trump.

Copyright © 2022 I-Connect007. All rights reserved.