[vc_row][vc_column][vc_column_text]The APCO (Approved Products Certification Office), which governs the Department of Defense Information Network Approved Products List (DoDIN APL), has taken action to suggest stronger enforcement of regulations regarding how companies address their open Plan of Action and Milestones (POA&Ms) within the APL listing process.<\/p>\n
As directed under the Cybersecurity POA&M Rules of Engagement within the Unified Capabilities Requirements (UCR), companies must follow strict and specific guidance on creating, addressing, and solving open POA&Ms, or they could face, among other actions, removal from the APL.<\/p>\n
In recent weeks, the APCO began to actively reach out to those companies coming up on their expiration date, notifying them of approaching deadlines; if missed, these past due actions could result in costly set backs and delays in listing.<\/p>\n
Remaining On The APL<\/u><\/b>:<\/b><\/span><\/p>\n If one of the three options is met prior to the expiration date, the POA&M will be closed out and the product will remain on the APL:<\/p>\n Failure To Address Open POA&Ms<\/u>:<\/b><\/span><\/p>\n If none of the options to close the POA&Ms have been met by the expiration date, the following will be applied at IE (Infrastructure Directorate) leadership\u2019s discretion:<\/p>\n Still Have Questions:<\/u><\/strong><\/b><\/span><\/p>\n If you are unsure as to the status of your POA&Ms, how the enforcement of this policy may affect your listing, or need additional assistance meeting your expiration timeline,\u00a0Contact Corsec<\/a><\/span>\u00a0and we can help you get back on track and selling into the DoD.[\/vc_column_text][vc_separator color=”black”][vc_column_text]<\/p>\n\n
\n