# Lockheed Martin Reinstates Supplier Cybersecurity Assessments

Lockheed Martin has reinstated its Cybersecurity Compliance and Risk Assessment (CCRA) process for all active suppliers, requiring them to submit updated Cybersecurity Maturity Model Certification (CMMC) information and cyber risk status through the Exostar platform. This process replaces the previous interim Cybersecurity Compliance Attestation (CCA) form and introduces a standardized approach to evaluating cybersecurity compliance and risk across Lockheed Martin's supply chain. Suppliers must complete the CCRA – Compliance survey, and depending on their responses, some will be required to complete an additional CCRA – Risk survey to further assess cyber risk exposure.

- **Why this matters:** Lockheed Martin's renewed emphasis on cybersecurity assessments signals heightened supply chain security requirements for contractors and subcontractors.
- Suppliers should prepare to provide detailed CMMC documentation and participate in risk surveys to maintain eligibility for Lockheed Martin contracts.
- Procurement professionals must ensure their supply chain partners comply with these updated cybersecurity protocols to avoid disruptions.
- Organizations can leverage this standardized assessment process to benchmark and improve their cybersecurity posture in alignment with prime contractor expectations.

**Jurisdictions:** federal
**Industries:** Defense & Military
**Topics:** Cybersecurity
**Published:** June 29, 2026

### Government Entities
- Lockheed Martin

### Sources
- [Cybersecurity Compliance and Risk Assessment | Lockheed Martin](https://www.lockheedmartin.com/en-us/suppliers/news/features/2026/cybersecurity-ccra.html) - Lockheed Martin