As of 11 April 2024, DoD contractors are no longer required to have a medium assurance ECA certificate for access to DIBNET to report cyber incidents. Instead, contractors need only have access to the DoD’s Procurement Integrated Enterprise Environment (PIEE), and the contractor will use PIEE credentials to access the DIBNET reporting site.
What follows are the instructions to obtain an ECA, still relevant for contractors that would like to have an ECA certificate anyway.
Who are responsible for issuing DoD medium assurance certificates?
There are two External Certification Authorities that can issue DoD ECA certificates: WidePoint (formerly Operational Research Consultants, Inc. (ORC)), and IdenTrust, Inc. Both offer the same prices for DoD medium assurance certificates. The IdenTrust website seems to have a simpler interface, but both ECAs will require your organization to submit the same information, as well as to “snail-mail” a notarized form to the ECA. The ECAs use these notarized forms to authenticate your organization’s identity. The entire process can take a week or more, so plan accordingly.
How to obtain an ECA
The following instructions will be for obtaining an ECA through IdenTrust:
- Choose a person who will apply for the ECA certificate. This certificate can be uploaded into CMMC Space after it is obtained.
- Choose whether you want to order a 1, 2, or 3 year certificate.
- Go to the DISA IASE site: https://public.cyber.mil/eca/obtainan-eca-certificate/
- Click the IdenTrust link.
- Click OK at the Exit Notice.
- Toward the middle of the page, click the Buy Now button.
- Scroll down the list of DoD ECA Programs. Click the box for DIB CIR (Defense Industrial Base Cyber Incident Reporting). Then click Next.
- Click the box for Yes to indicate you live in the US. Then click Next.
- Click the box for ECA Medium Assurance (installed on a single machine). Then click Next
- Choose the duration of the certificate.
- Verify your selection by clicking Buy Now.
- Continue through the application process. Here is a list of what you will need:
- An official Photo ID: Driver’s license or State ID Card
- A Credit Card: In your name for address verification (not necessarily for payment)
- Personal Information: Your FULL name (no nicknames or abbreviations), home address, and Social Security Number
- Payment Information: Credit Card number or Payment Voucher number
Useful tips and frequently asked questions are located here: https://www.identrust.com/support/faq/24
Turn-around time: "Generally, certificate processing time takes 3-5 business days after your application is submitted and/or your required paperwork is received. If during the validation phase IdenTrust requires additional information, the process may take longer."
Comments
0 comments
Article is closed for comments.