What L3Harris Requires
- The DFARS cyber clauses. Purchase terms LGL-50.F1 flow down DFARS 252.204-7012, 7019, 7020 and 7021. The CMMC clause doesn't apply to COTS orders. LGL-50.F1 Article 29, Rev. 05/2026
- All 110 controls. Suppliers with covered defense information must comply with all NIST SP 800-171 controls. L3Harris supplier cybersecurity page
- An SSP and a posted score. Missile Solutions requires an adequate System Security Plan and a self assessment score in SPRS from suppliers under DFARS 7012. Missile Solutions SupplierNet
How L3Harris Checks
- Exostar attestation. Attest to each NIST SP 800-171 control in Exostar's Partner Information Manager. L3Harris supplier cybersecurity page
- Audits. Support checklists, certifications, outside verification and onsite security audits. Article 29(e)
- DoD assessments. Submit to DoD assessments under DFARS 7019 and 7020. Article 29(f)
Incidents and Questions
Report cyber incidents to SOCC@l3harris.com and to DoD through DIBNet, and report a breach of L3Harris data within 72 hours (Article 29(b)). The supplier cybersecurity page has a contact form for questions.