-
Oct 24, 2024 | 
lexology.com | Nooree Lee |Robert Huffman |Ryan Burnette |Moushmi Patil |August Gweon
On October 3, 2024, the White House Office of Management and Budget (“OMB”) released Memorandum M-24-18, Advancing the Responsible Acquisition of Artificial Intelligence in Government (“October 2024 OMB Memo” or “Memo”), providing detailed new guidance and requirements for federal agency procurement of Artificial Intelligence (“AI”).
-
Oct 1, 2024 | 
nationaldefensemagazine.org | Ryan Burnette |Susan B. Cassidy |Robert Huffman
The Cybersecurity and Infrastructure Security Agency, or CISA, released a new guide on Aug.
-
Aug 29, 2024 | 
nationaldefensemagazine.org | Ryan Burnette |Susan B. Cassidy |Ashden Fein
The Office of Management and Budget released a memorandum on July 25 outlining several changes to the Federal Risk and Authorization Management Program. FedRAMP, as it is called, is a government-wide program that imposes security requirements on cloud service offerings that are being used by federal agencies. FedRAMP was originally established by the Office of Management and Budget through a Dec. 8, 2011, memorandum from the Federal Chief Information Officer.
-
Jul 3, 2024 | 
lexology.com | Robert Huffman |Susan B. Cassidy |Ashden Fein |Ryan Burnette
This is part of an ongoing series of Covington blogs on implementation of Executive Order 14028, “Improving the Nation’s Cybersecurity,” issued by President Biden on May 12, 2021 (the “Cyber EO”). The first blog summarized the Cyber EO’s key provisions and timelines, and subsequent blogs described the actions taken by various government agencies to implement the Cyber EO from June 2021 through April 2024.
-
Apr 8, 2024 | 
lexblog.com | Robert Huffman |Susan B. Cassidy |Ashden Fein |Ryan Burnette
This is the thirty-fourth in a series of Covington blogs on implementation of Executive Order 14028, “Improving the Nation’s Cybersecurity,” issued by President Biden on May 12, 2021 (the “Cyber EO”). The first blog summarized the Cyber EO’s key provisions and timelines, and the subsequent blogs describes described the actions taken by various government agencies to implement the Cyber EO from June 2021through January 2024.
-
Mar 25, 2024 | 
lexblog.com | Robert Huffman |Ryan Burnette
On March 11, 2024 the Cybersecurity Infrastructure Security Agency (CISA), released the much anticipated final version of its common Secure Software Development Attestation Form. Finalization of the form is a notable development for developers of software that is sold to the U.S. Government for two reasons.
-
Mar 25, 2024 | 
lexology.com | Robert Huffman |Ryan Burnette
On March 11, 2024 the Cybersecurity Infrastructure Security Agency (CISA), released the much anticipated final version of its common Secure Software Development Attestation Form. Finalization of the form is a notable development for developers of software that is sold to the U.S. Government for two reasons.
-
Oct 26, 2023 | 
lexblog.com | Susan B. Cassidy |Ashden Fein |Michael Wagner |Robert Huffman |Ryan Burnette
-
Oct 26, 2023 | 
lexology.com | Susan B. Cassidy |Ashden Fein |Michael Wagner |Robert Huffman |Ryan Burnette
On October 5, 2023, the Federal Acquisition Regulatory Council (FAR Council) issued an interim Federal Acquisition Regulation rule (FAR rule) that implements the Federal Acquisition Supply Chain Security Act (FASCSA). This FAR rule implements the requirements of the Federal Acquisition Supply Chain Security Act of 2018 and the Federal Acquisition Security Council (FASC) final rule for complying with exclusion or removal orders.
-
Oct 9, 2023 | 
lexology.com | Robert Huffman |Michele Pearce |Susan B. Cassidy |Stephanie Barna |Ryan Burnette
Following our recent overview of topics to watch in the National Defense Authorization Act (“NDAA”) for Fiscal Year (“FY”) 2024, available here, we continue our coverage with a “deep dive” into NDAA provisions related to cybersecurity and software security in each of the Senate and House bills. For the past three years, the NDAA has dedicated a separate Title to cyber and cybersecurity, reflecting the increased importance of these issues in Department of Defense (“DoD”) operations.
