-
Feb 14, 2024 | 
mondaq.com | Marcia G. Madsen |Evan Williams
The National Defense Authorization Act for Fiscal Year 2024
("NDAA"), signed into law on December 26, 2023, contains
a number of important changes to federal procurement law and
policy.1
Section 813 of the NDAA directs the Secretary of Defense
to—at least four times per Fiscal Year
("FY")—exercise the authority under 10 USC 3458 to
acquire innovative commercial products and services using general
solicitation competitive procedures, known as a commercial
solutions opening ("CSO").
-
Feb 5, 2024 | 
lexology.com | Marcia G. Madsen |Evan Williams
The National Defense Authorization Act for Fiscal Year 2024 (“NDAA”), signed into law on December 26, 2023, contains a number of important changes to federal procurement law and policy.1Section 813 of the NDAA directs the Secretary of Defense to—at least four times per Fiscal Year (“FY”)—exercise the authority under 10 USC 3458 to acquire innovative commercial products and services using general solicitation competitive procedures, known as a commercial solutions opening (“CSO”).
-
Jan 25, 2024 | 
mondaq.com | Marcia G. Madsen |Evan Williams |Jason C. Coffey |Adam Hickey
On December 26, 2023, the Department of Defense
(“DoD”) published the long-awaited Proposed Final Rule for the Cybersecurity
Maturity Model Certification (“CMMC”) program. At a
high level, the CMMC program is a mechanism by which the DoD can
verify that contractors and subcontractors have implemented
security measures to protect Controlled Unclassified Information
(“CUI”) and Federal Contract Information
(“FCI”).
-
Jan 19, 2024 | 
jdsupra.com | Jason C. Coffey |Adam Hickey |Marcia G. Madsen
On December 26, 2023, the Department of Defense (“DoD”) published the long-awaited Proposed Final Rule for the Cybersecurity Maturity Model Certification (“CMMC”) program. At a high level, the CMMC program is a mechanism by which the DoD can verify that contractors and subcontractors have implemented security measures to protect Controlled Unclassified Information (“CUI”) and Federal Contract Information (“FCI”).
-
Jan 16, 2024 | 
mondaq.com | Marcia G. Madsen |Jason C. Coffey |Luke Levasseur |Evan Williams
On December 22, 2023, President Joe Biden signed into law the
National Defense Authorization Act for Fiscal Year 2024
("NDAA" or the "Act"). This year's NDAA
authorizes a total of $883.7 billion to address the most
significant national security priorities for the United States. Title VIII includes a series of statutory changes to federal
acquisition policy, acquisition management and numerous related
matters.
-
Oct 17, 2023 | 
lexology.com | Angela Giancarlo |Justin Herring |Adam Hickey |Timothy J. Keeler |Stephen Lilley |Marcia G. Madsen | +2 more
Cybersecurity Awareness Month is a good time to highlight one trend in federal efforts to address cyber risk: proscriptive regulation of the information and communications technology and services (“ICTS”) supply chain. Supply chain risk management is a broad field encompassing, among other things, federal efforts to improve software security, and proposals to revise the FAR to standardize cybersecurity and incident reporting requirements for US government contractors.
-
Oct 12, 2023 | 
lexblog.com | Rajesh De |Stephen Lilley |Adam Hickey |Marcia G. Madsen
Raj De serves on Mayer Brown’s global Management Committee. He was previously the Managing Partner of Mayer Brown’s Washington DC office, which is comprised of more than two hundred lawyers. He leads the firm’s global Cybersecurity & Data Privacy practice, as well as the firm’s National Security practice, and serves as a member of the firm’s Congressional Investigations & Crisis Management team.
-
Oct 12, 2023 | 
mondaq.com | Marcia G. Madsen |Stephen Lilley |Adam Hickey |Luke Levasseur
Last week, the government announced two sets of proposed
revisions to the Federal Acquisition Regulation (FAR) to improve
the cybersecurity of the government's information systems. Both
sets of revisions relate to President Biden's May 2021 Executive Order 14028 on Improving the
Nation's Cybersecurity.
-
Oct 12, 2023 | 
lexology.com | Rajesh De |Stephen Lilley |Adam Hickey |Marcia G. Madsen |Paul Chandler |Ana Hadnes Bruder | +2 more
Recent high-profile cyber incidents involving exploitation of software vulnerabilities—such as the SolarWinds and MOVEit incidents—have increased scrutiny of the security of the software upon which corporate and government customers rely. Though phishing and social engineering continue to be leading causes of cyber incidents, there is growing potential legal exposure for companies from security vulnerabilities in software.
-
Oct 10, 2023 | 
lexology.com | Marcia G. Madsen |Stephen Lilley |Adam Hickey |Luke Levasseur |Jason C. Coffey
Last week, the government announced two sets of proposed revisions to the Federal Acquisition Regulation (FAR) to improve the cybersecurity of the government’s information systems. Both sets of revisions relate to President Biden’s May 2021 Executive Order 14028 on Improving the Nation’s Cybersecurity.
