The Issue
More and more, contract language requires the contractor to conduct tasks in support of Program Protection Plans (PPP) and develop Program Protection Implementation Plans (PPIP). These requirements are difficult to understand for those unaccustomed. Many times contactors are unsure of how to apply the contractual requirements or flow them down. Even more difficult if determining what goes into the PPIP and how to deliver it.
The Solution
Thrive Analysis Group specializes in meeting and exceeding these requirements. We know what is expected, because it’s our niche; what we do. You could say that we “thrive” doing what we do best.
Let us help you.
Don’t Settle For Less
Partner with us to meet PPP requirements
Many contractors are required to support and develop Program Protection Plans (PPP). Our solution:
- Satisfies Milestone progression needs
- Identifies required items in order to complete Program Protection Implementation Plan (PPIP)
TAG executes Program Protection Plan (PPP) tasks to identify and prioritize Critical Components (CC) and Critical Program Information (CPI) and protect them throughout the acquisition lifecycle. Our work is aligned with DoD and Army guidance.
- Program Protection Planning Outline and Guidance
- DoDI 5000.02 – Operation of the Defense Acquisition System
- DoDI 5000.83 – Technology and Program Protection to Maintain Technological Advantage
- DoDI 5200.39 – CPI Identification and Protection Within RDT&E
- DAG Chapter 9
- DoDI 5200.44 – Protection of Mission Critical Functions to Achieve Trusted Systems and Networks (TSN)
- AR 70-77- Research, Development, and Acquisition Program Protection
- DoD Report to Congress – Framework to Enhance Cybersecurity of the United States Defense Industrial Base Office of the Under Secretary of Defense for Acquisition & Sustainment
Charge Forward
Tailored efforts for Program Protection Plan Requirements
We perform end to end program protection at any Milestone phase:
- Manage program protection planning
- Perform required analyses
- Identify Critical Program Information (CPI) and Critical Components (CC)
- Quantify risk to CPI and CC
- Recommend risk mitigations
- Document results in the Program Protection Plan for Milestone Decision Authority approval
- Develop Program Protection Plan (PPP) for CC and Critical Program Information (CPI)
Security Compliance
We provide tailored solutions to help defense contractors meet compliance requirements under:
- FOCI Mitigation
- ITAR / EAR
- NISPOM
- National Security Presidential Memorandum (NSPM-33)
Outsourced FSO Solutions
It’s not easy to understand the requirements for becoming a cleared defense contractor or for newly cleared companies to navigate security clearance requirements.
Security Policy Analysis
It’s not enough to be NIST or CMMC compliant or certify information systems for processing CUI and classified information. We will review your corporate policies, make recommendation, write new policies or develop programs to ensure your organization is compliant.
Services
What We Can Do For You
Our specialty is our capability to interpret requirements and how they should be implemented for your unique situation. We apply program protection, write and tailor processes, procedures and policies so that they will fit within the constraints of your enterprise.
Your enterprise is made up of many moving parts and business units, but none should stand alone. We believe each requirement should be part of the corporate body and not a stove piped solution. We conduct analyses for entity wide application so that burden and opportunities are shared:
- Corporate Policy
- Program Protection Planning
- Supply Chain Risk Management
- Criticality Analysis
- OPSEC Analysis
- Security Classification Guidance
- NISPOM Compliance
