The memo, titled “Cybersecurity Service Provider Definition Clarification,” issued Tuesday and signed by Davies establishes policy, assigns responsibilities and sets procedures for CSSP certification across the department. The memo directs CSSPs to continuously monitor DOW cyber terrain to detect, analyze and respond to anomalous, suspicious or malicious activity. Who Authorizes & Certifies DOW Cybersecurity Service Providers? Under the memo, the DOW CIO approves or disapproves all CSSP certification requests and forwards approvals to the commander of USCYBERCOM. The new CSSP memo also follows two other recent administration cybersecurity actions.