Survey: Reasons U.S. Electronics Manufacturers May Exit Defense Market
June 9, 2021 | IPCEstimated reading time: 2 minutes
In a new IPC industry survey and report, one-quarter (24 percent) of electronic manufacturers say the costs and burdens of compliance with the Cybersecurity Maturity Model Certification (CMMC) may force them out of the U.S. Department of Defense’s (DoD) supply chain.
The survey conducted by IPC, the global electronics manufacturing association, also finds that for many small- to medium-size businesses (SMB), the costs and burdens of CMMC compliance may outweigh the benefits of doing business with the DoD.
In addition, 33 percent of respondents say the CMMC will weaken the U.S. defense electronics industrial base, while 18 percent are unsure, highlighting the uncertainties involved. And 41 percent believe applying the CMMC clause to their suppliers will create other problems in the supply chain.
“Cybersecurity is a must for U.S. national security, but the costs and burdens of achieving CMMC compliance under the current approach will likely force many small and medium-sized manufacturers out of the DoD supply chain, negatively impacting national security,” said John Mitchell, IPC president and CEO. “The objectives of CMMC are well-intentioned, but they must not be achieved at the expense of other key aspects of supply chain health.”
Most suppliers expect and are willing to spend upwards of $50,000 on CMMC readiness, and nearly one-third (32 percent) report that it will take them one to two years to prepare to undergo CMMC assessment. However, more than half of the suppliers say implementation costs of more than $100,000 would make CMMC readiness too expensive. DoD’s own cost analysis estimated the cost of a CMMC Maturity Level 3 (ML3) certification to be more than $118,000 in the first year. This means DoD’s own estimate of CMMC compliance costs is too high for 77 percent of the IPC survey respondents.
“The Pentagon needs to take into consideration that most SMBs do not have dedicated cybersecurity personnel to achieve the prerequisites, and while many commercial electronics manufacturers have considerable business with the defense community, they themselves do not consider themselves a defense contractor,” added Mitchell.
The study’s author, cyber security expert Leslie Weinstein, says the DoD can reduce the costs and uncertainties of CMMC compliance by leveraging existing industry standards and certifications, such as IPC-1791, the electronics industry’s “Trusted Supplier” standard, which was designed in collaboration with the DoD; or the certifications offered by HITRUST or the International Standards Organization.
“The DoD recognizes a variety of respected, industry-driven certifications when it comes to hiring cybersecurity professionals,” says Weinstein. “Taking the same approach to certifying suppliers would allow companies to invest more in security than in redundant audits, and it would quickly create a pool of companies who are able to bid on DoD solicitations containing the CMMC DFARS clause. And importantly, it would prevent further erosion of the U.S. defense industrial base.”
IPC fielded the survey between February 25 and March 5, 2021 and garnered 108 responses from contract manufacturers, printed circuit board fabricators, original equipment manufacturers and suppliers who self-reported they are planning to undergo a CMMC assessment in the next five years.
Suggested Items
IDTechEx Examines the Opportunities for Wearables in Digital Health
04/19/2024 | IDTechExIDTechEx’s report, “Digital Health and Artificial Intelligence 2024-2034: Trends, Opportunities, and Outlook”, covers this ongoing trend in the consumer health wearables market and includes analysis of the opportunities and roadmap for biometric monitoring.
ZESTRON Welcomes Whitlock Associates as New Addition to their Existing Rep Team in Florida
04/19/2024 | ZESTRONZESTRON, the leading global provider of high-precision cleaning products, services, and training solutions in the electronics manufacturing and semiconductor industries, is thrilled to announce the addition of Whitlock Associates to its esteemed network of sales representatives.
IPC Bestows Posthumous Hall of Fame Award to Industry Icon Michael Ford
04/18/2024 | IPCIPC honored the late Michael Ford, Aegis Software, for his extraordinary contributions to the global electronics manufacturing industry with the IPC Raymond E. Pritchard Hall of Fame Award at IPC APEX EXPO 2024. IPC’s most prestigious honor, the Hall of Fame Award is given to individuals who have provided exceptional service and advancement to IPC and the electronics industry. Ford, an industry leader and valued IPC volunteer, died suddenly in January 2024.
SEMI Applauds U.S. Chips Act Award for Samsung Electronics Facilities to Strengthen Domestic Semiconductor Supply Chain
04/17/2024 | SEMISEMI, the industry association serving the global electronics design and manufacturing supply chain, applauded the United States Department of Commerce’s announcement of a Preliminary Memorandum of Terms for an award under the CHIPS and Science Act to support the expansion of Samsung Electronics’ presence in Texas and the company’s development and production of leading-edge chips.
Northrop Grumman honors Calumet Electronics with Supplier Excellence Award
04/17/2024 | Calumet ElectronicsNorthrop Grumman Corporation has recognized Calumet Electronics during the company’s 2024 Supplier Excellence Awards for “exceptional performance and unwavering commitment to delivering with excellence.” Calumet is one of 70 suppliers recognized from across the globe. In its award category of “Supplier Strategic Excellence,” Calumet was honored alongside global corporations such as Amazon Web Services, Dell Technologies, and Eaton Corporation.