This page provides steps how to access and navigate Trading Partner Management (TPM) and Supplier Management (SM) applications. In addition this page walks through the process of updating your Cybersecurity Compliance Attestation (CCA) survey.
Please see the TPM SM Guide for detailed instructions on how to access and complete the CCA.
IMPORTANT! You MUST use a PC and Google Chrome to access the Supplier Management application.
Need access to Supplier Management (SM) and the CCA?
Lockheed Martin has transitioned to the new Cybersecurity Compliance Attestation (CCA) hosted on Exostar’s Supplier Management (SM) application, which has recently been rebranded from Onboarding Module (OBM).
The completion of the CCA Questionnaire is required annually. Please follow the instructions below to determine if your organization must complete the CCA questionnaire.
What if I haven’t been invited or migrated?
Suppliers that have not been system-migrated or invited to complete the new questionnaire, can still gain access to the SM application and the CCA survey by resubmitting their “Certifications and Representations” (Step 7 below) on the Self-Certification section of their TPM vendor profile. Upon recertification, it may take up to 45 minutes for the system to provision access to SM and the CCRA. If you are unable to access SM after certifying (1) to Applicability of Cyber DFARS or Yes to Handling Sensitive Information, please contact the Exostar Help Desk.
Step 1. Login to MAG
To access your TPM profile, you must first login to your Exostar’s Managed Access Gateway (MAG) account. For help resetting your MAG password or any other MAG-related questions, refer to the MyExostar self-help page, Managed Access Gateway.
NOTE: If you are the first user in your organization to access SM, you must accept the standard MAG Usage Service Agreement. If you see Agree to Terms on the Supplier Management tile in your MAG account, click the button and accept the service agreement.
1. Navigate to https://portal.exostar.com. Input your Email Address or User ID. Click Next.
2. Input your Password. Click Next to access the MAG Dashboard.
Step 2. Access TPM
Once you successfully log into your MAG account, ensure you authenticate with your credential. You can do this by selecting the Elevate Credential Strength button in the My 2FA Credentials section. The system also prompts you for your credential once you select to access TPM.
1. From the MAG Dashboard, select My Account tab, then select View Organization Details sub-tab.
2. Click the View in Trading Partner Management (TPM) link.
3. A notification will display, click Continue button to access the Organization’s profile.
Step 3. Cyber Security Section Review
The Cybersecurity Compliance Attestation (CCA) Questionnaire provides questions related to the applicability of cyber–Defense Federal Acquisition Regulation Supplement (DFARS) requirement, the handling of Sensitive Information, which is required annually, and Cybersecurity Maturity Model Certification (CMMC) attestation.
- To update the Cyber Security section, select Self-certification from the left-hand menu.
- Scroll down to the Cyber Security section. Review the information provided.
Step 4. Cybersecurity Compliance Attestation (CCA) Questionnaire
In the Supplier Management (SM) application, the CCA Questionnaire displays in the Pending Forms tab of the dashboard and displays important details for the form.
1. Select the highlighted Click here to submit or update your CCA in Exostar’s Supplier Management (SM) System link to open Supplier Management. NOTE: You can also access Supplier Management via Managed Access Gateway (MAG) dashboard and click Launch.
IMPORTANT! The verbiage in red provides a help link to learn more about the application and CCA. Please note, this verbiage still references Onboarding Module (OBM), which has been rebranded to Supplier Management (SM). This will be updated in TPM eventually. Locate the CCA Questionnaire in the Pending Forms tab from the SM Dashboard.
2. Locate the CCA Questionnaire in the Pending Forms tab from the SM Dashboard.
NOTES:
- Anyone with SM access and that is assigned to the form can: update or complete the questionnaire. The Assigned To section indicates the current user assigned to the form. Only one person can be assigned to a form at any given time.
- You can initiate work on the form only when the Request Status is at 40%.
IMPORTANT! If the Request Status is at 20%, it indicates either the form is not provisioned, or the invitee accepting the invitation and the designated organization administrator are two different users. In such cases, the designated organization administrator needs to re-assign the form to themselves. See Step 3 below.
The Form Progress for a new form starts at 0% and the revision is 0.1 for a form that has never been started. In the provided screenshot, the user has already submitted the form once and is now renewing it for the second time. Therefore, the Form Progress is at 100%, and the Revision is 1.1.
3. Select the three dots (ellipsis) button located to the right. Select Edit from the menu.
NOTE: You can also reassign the form by selecting the three dots (ellipsis) button.
IMPORTANT! If the Edit button is not displayed, the form is not currently assigned to you. Use the Reassign option to assign the form to the correct user. Only one person can be assigned to a form at any given time. Review the Cybersecurity Compliance question. Click Next.
4. Review the Cybersecurity Compliance question. Click Next.
NOTE: Once the supplier begins working on the form, they have the flexibility to save the form and exit at any point. All information entered will be saved during this process.
5. Complete all questions in the form. Then click the Save button.
IMPORTANT! Users must ensure they click the Save button prior to clicking the SUBMIT button at the end of the survey to complete the questionnaire. The Save button does not submit the survey for scoring or updates. The Submit button remains greyed out until ALL questions are answered and the form has been saved.
7. A success message will display, click OK to confirm the form is saved.
8. Then click the Submit button.
NOTE: Please see the Submitter’s Page Detail Guidance section below for guidance on completing these fields.
9. Click OK to confirm form submission.
Please note as you progress through the form request, you will see the following Request Status percentages:
- Pending Provisioning: Request Status 20%
- Provisioned: Request Status 40%
- First Time Access: Request Status 60%
- Form Started: Request Status 80%
NOTES:
- Once the user submits the form, the form displays under the Completed Forms tab.
- The score summary details are displayed on the bottom right of the Forms Details page.
- Recent Request will be updated to include expiration date of the form.
- Revision History will display the latest revision. Additionally, you will have the ability to download all the revisions. The answers will display along the right-hand side of the PDF
Submitter’s Details Page Guidance
| Field Name | Guidance |
|---|---|
| Vendor Name | Company / Organization Name |
| Vendor Primary POC Name | First Name, Last Name (i.e., John Doe) |
| Vendor Primary POC Email | Primary POC Email Address |
| Vendor IT Security POC Name | First Name, Last Name (i.e., John Doe) |
| Vendor IT Security POC Email | IT Security POC Email Address |
| Vendor Local DUNS Number(s) | If more than one, use a comma and a space to separate values (i.e., 007505491, 000665432) |
| Vendor CAGE Code(s) | If more than one, use a comma and a space to separate values (i.e., 3T456, 56789) |
NOTE: If the response on this form is applicable to more than one of your organization’s business units/divisions, provide all the Local DUNS Number and CAGE Codes that apply. You’ll be able to export a single form for multiple DUNS/CAGE Code.
Update Completed Form
To update the submitted form, you must renew the form. Follow the steps below:
1. Navigate to the Completed Forms tab.
2. Click Renew from the action button or from the Forms Details pages.
NOTE: This action will move the form back to the Pending Forms tab
3. Select to Edit the form and complete the steps as outlined above.
Form Upgrade
It is possible for your partner to upgrade a form from its previous version (i.e., add or remove questions). Once the form has been upgraded, you must edit the form and complete the upgraded questions.
To upgrade a form:
1. Navigate to the desired Form Details page. Click the Edit Form button.
2. An upgrade notification displays. Click the Next button.
NOTE: The system can take up to five minutes to upgrade the form. You do not have to wait for form to upgrade and can Exit and come back later. If you do wait, a confirmation screen displays.
3. If you wait for the form to upgrade, click Continue from the confirmation screen to begin editing the upgraded form.
4. If you do not wait for the form to upgrade, you can Exit and come back later. Navigate to the Form Details page and click the Edit Form button to edit the upgraded form. Complete the form as you would normally.
Additional Resources
See the TPM Training Resources page and the SM Training Resources page for detailed user guides.