Supplier Welcome -

Collins Aerospace is committed to providing our suppliers with the information that is key to their success. The Supplier Portal provides a single interface that makes doing business with Collins Aerospace simple and convenient.

 RTX Corporation Supplier FASCA Notification Letter (posted October 23rd, 2026)

RTX Corporation (RTX) is notifying you that the U.S. Government (USG) via the Department of War, Department of Homeland Security and Director of National Intelligence, has issued orders under the Federal Acquisition Supply Chain Security Act (FASCSA) that may affect certain products, services, or sources within the federal supply chain.... (click here to continue reading)

 External RTX Supplier website refresh now live (posted October 23rd, 2026)

Our supplier website has been updated with improved navigation, clearer resource pathways, and a modernized design to better support your experience. Explore what's new from the refreshed supplier website.

 Critical Security Issues Identified for PHP (posted October 22, 2026)

On October 21, critical security issues were identified for PHP, a server-side scripting language. These flaws create a pathway for unauthenticated attackers to infiltrate and run their own code before the system can protect itself, creating a serious risk for anything that relies on PHP. Patches have been released to address this issue and are currently being deployed. 

We strongly urge all suppliers to immediately review their use of PHP, apply the necessary updates and ensure that any PHP components exposed to the internet are fully secured or mitigated. Report any cybersecurity concerns to [email protected].

This is an evolving situation, and swift action is essential to protect against potential threats.

RTX Supplier Cybersecurity Consortium on Wednesday, October 28, 1:00-2:30 pm Eastern

In collaboration with Supply Chain and Cyber teams from across RTX, the combined team will be hosting a virtual RTX Supplier Cybersecurity Consortium on Wednesday, October 28, 1:00-2:30 pm Eastern.  The Consortium is focused on Cybersecurity and the challenges we face in the current contested cyber environment. Over the last few years, we have all experienced the benefits of increased technology.  With that we have also witnessed the unprecedented threat environment and rise in Cyber-attacks. We must prioritize cybersecurity to stay ahead in this dynamic environment. 

This will be a most informative event and we invite all those interested to register and attend!

Agenda: 

• Welcome  
• Threat Overview – Focus on Fraudulent Workers
• Latest News on Cybersecurity Maturity Model Certification (CMMC) 2.0   
• Controlled Unclassified Information (CUI) Discussion
• Q&A 

Register here: 

https://www.zoomgov.com/webinar/register/WN_cApyF3AhTXuHsl_2DPwNUQ

Your mission is our mission!  

CMMC Phase II Suspension

On July 13, 2026, the Department of War (DoW) temporarily suspended CMMC Phase II requirements and initiated a 60-day program review. All Phase I CMMC Level 1 (Self) and Level 2 (Self) assessment requirements in DFARS 252.204-7021 remain in place. This temporary suspension does not alter DoW contractors’ and subcontractors’ foundational cybersecurity obligations. Suppliers must continue complying with all applicable contractual cybersecurity requirements, including NIST SP 800-171 Revision 2 and DFARS 252.204-7012, unless formally directed otherwise through an authorized contract amendment or modification.

For additional information please visit Supplier Cybersecurity | RTX.

Supplier Circular - Standardizing Submittals of Supplier NOPQEs
Effective June 8, 2026, Collins will be standardizing the submittal of Notifications of Potential Quality Escapes (NOPQEs) for suppliers. See more information on the new requirements here.