News United States Air Force
 CROWS recognized for System Security Engineering Cyber GuidebookPublished April 6, 2021
                        
                        By Raoul Fischer
                        
                        
                        Cyber Resiliency Office for Weapon Systems
                **HANSCOM AIR FORCE BASE, Mass. (AFNS) --**
                A newly published **Government Accountability Office** report on **Weapon Systems Cybersecurity** identified the U.S. Air Force as the only service that has issued service-wide guidance detailing how acquisition programs should define cybersecurity requirements and incorporate those requirements in contracts.
The report, which was a follow-up to a 2018 report on weapon system cybersecurity, called out the U.S. Air Force’s Cyber Resiliency Office for Weapon Systems, or CROWS. It specifically cited the office for developing the System Security Engineering Cyber Guidebook to “consolidate references to different DoD and Air Force instructions and guidance into a single document and provide more detailed explanations and suggestions for implementation.”
The 40-page report, which was addressed to congressional committees, underscored the importance of DoD's plan for implementing cybersecurity protections early and often throughout a program’s lifecycle. Report authors noted that it is easier, less costly and more effective than attempting to add, or bolt-on, cybersecurity protections late in the development cycle once a system is fielded. It also reminded committees that, due to contractors playing a pivotal role in designing and building DoD weapon systems, DoD must communicate its cybersecurity requirements in its acquisition program contracts.
“This is a significant milestone for the Air Force and our broader cyber resiliency mission,” said Joe Bradley, CROWS director. “Singling out the Air Force and CROWS approach, and noting other services could benefit from it, is a remarkable affirmation of the work our team is doing to bake cyber resiliency into new weapons systems.”
Bradley added that it also helps advance his team’s long-term vision of changing the Air Force culture on cyber.
Katie Whatmore, a CROWS systems security engineering lead who oversaw the development of the guidebook, noted that the Air Force’s approach can assist in program development.
“The Air Force’s SSE Cyber Guidebook serves as a single source reference that enables program offices to address system security engineering as an integrated part of systems engineering,” she said. “By following the approach within the guidebook, programs will ensure appropriate requirements are included on contract and necessary analyses are accomplished in order to minimize cyber risks to our weapon systems.”
The CROWS team has worked across the enterprise to ensure all stakeholder organizations are in full support of its approach in creating a common starting point to reference when considering cyber resiliency best practices for their programs.

To reach out to the CROWS office, contact **CROWS@us.af.mil**.FS 



USAF 



AF 



Air Force 



Government Accountability Office 



GAO 



reports 



contracts 



Cyber Resiliency Office For Weapon Systems 



CROWS 



cyber 



acquisition programs 



cybersecurity protections 



weapon systems 



Program Development