
QUALITY
KWD is ISO 9001:2015 certified and also carries the CMMC Level 2 certificate for cybersecurity.
Operating in continuous quality management environments, our employees are cross-trained and perform individual quality conformance checks prior to final inspection from the quality manager(s). In addition, our companies bring decades of experience in the administration of government source inspection contracts.
All suppliers must comply with DFARS 252.204-7012 in the handling of Controlled Unclassified Information to ensure proper safeguarding and cyber incident reporting. Suppliers must also share SPRS score upon request and submit to an audit if needed.

DFARS 252.204-7012
Purchase Order Requirements for Suppliers of
KWD Aircraft Support Equipment
-
DFARS 252.204-7012 requires defense contractors to protect Controlled Unclassified Information (CUI) by implementing NIST SP 800-171 security requirements, developing a System Security Plan (SSP), and reporting cyber incidents within 72 hours.
-
All subcontractors must fully adhere to DFARS 252.207-7012 and have complete cybersecurity controls and reporting procedures in place.
-
Cloud service providers critical to defense contractors must meet stringent security standards including obtaining FedRAMP authorization and implementing additional DFARS 252.204-7012 specified security measures for Covered Defense Information protection.
-
Defense contractors must ensure subcontractor compliance with DFARS 252.204-7012 through flow-down requirements and are also responsible for CMMC certification which includes third-party assessment and overlaps with some DFARS requirements but introduces additional data protection controls.


