I2ACT Rollup Tool

​

The i2ACT Rollup Tool enables organizations to take extracts of i2ACT-800 assessments from multiple associated organizations, subcontractors and suppliers and aggregate (or “roll up”) their collective data into one whole for cybersecurity compliance verification, broad evaluation, analysis and collective reporting.

​

Product description:

 

The i2ACT Rollup tool is an effective and affordable Supply Chain solution.

 

The i2ACT Rollup Tool enables organizations to take extracts of i2ACT-800 assessments from multiple associated organizations, subcontractors and suppliers and aggregate (or “roll up”) their collective data into one whole for cybersecurity compliance verification, broad evaluation, analysis and collective reporting.  The Rollup Tool provides:

 

• Consistent data/information

• Standard formatting

• Digital information exchange

• Support throughout the process

• A solution for recurring supply chain risk assessment

 

The tool provides a method for managing the supply chain and their respective cybersecurity requirements.  Some examples of the tool’s value are:

​

• Prime contractors (in particular Department of Defense prime contractors) must perform due diligence to accept and manage subcontractors and suppliers and their DFARS and NIST 800-171 cybersecurity compliance.  The tool allows a prime contractor to rollup assessment and compliance data from subordinate organizations who utilized the i2ACT assessment tool at any time.  This is vital since DFARS flow-down clauses make prime contractors liable if any subcontractors or suppliers they share Controlled Unclassified Information who fail to properly protect that information.

• Prime contractors have the ability to provide aggregate reporting on of all of their suppliers and subcontractors to their Contracting Officers, if requested.

• An organization could aggregate data from multiple assessments they’ve done over a period of time and analyze them for trends, compliance progress, problem areas, etc.

• A group of partner companies could utilize this capability to ensure that each company is positively impacting their joint cybersecurity posture under the truism that, in security, you are only as strong as your weakest link.

 

In any usage, the Rollup tool allows an organization to aggregate information and review it on a broad scale, providing key insights into specific or collective security concerns.