-
Nov 22, 2024 | 
jdsupra.com | Megan Brown |Jon Burd |Teresita Regelbrugge
Part of the Biden Administration’s push to enhance U.S. cybersecurity capabilities has focused on imposing new requirements on government contractors.
-
Nov 22, 2024 | 
mondaq.com | Tracye Winfrey Howard |Teresita Regelbrugge
WHAT: The U.S. Department of Defense (DOD)
issued a proposed rule to implement
Section 1655(a) and (c) of the National Defense Authorization Act
(NDAA) for Fiscal Year (FY) 2019 (Pub. L. 115-232).
-
Nov 21, 2024 | 
jdsupra.com | Tracye Winfrey Howard |Teresita Regelbrugge
WHAT: The U.S. Department of Defense (DOD) issued a proposed rule to implement Section 1655(a) and (c) of the National Defense Authorization Act (NDAA) for Fiscal Year (FY) 2019 (Pub. L. 115-232).
-
Oct 14, 2024 | 
mondaq.com | Tracye Winfrey Howard |Teresita Regelbrugge
Last week, the U.S. Department of Defense (DOD) published a proposed rule that would amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement a statutory prohibition on DOD awarding contracts with NAICS codes beginning with 5416 – which includes certain management, scientific, and technical consulting services – to offerors that also perform consulting services for certain foreign entities related to the governments of China, Russia, and other countries of concern,...
-
Oct 11, 2024 | 
jdsupra.com | Tracye Winfrey Howard |Teresita Regelbrugge
Last week, the U.S. Department of Defense (DOD) published a proposed rule that would amend the Defense Federal Acquisition Regulation Supplement (DFARS) to implement a statutory prohibition on DOD awarding contracts with NAICS codes beginning with 5416 – which includes certain management, scientific, and technical consulting services – to offerors that also perform consulting services for certain foreign entities related to the governments of China, Russia, and other countries of concern,...
-
Aug 15, 2024 | 
jdsupra.com | Megan Brown |Teresita Regelbrugge |Joshua Waldman
So far, 2024 has been another very busy year for U.S. cybersecurity regulation. Among the top priorities has been software security, as we previewed early this year. Companies that sell software to the federal government or provide enterprise software or IT services, especially to U.S. critical infrastructure, are likely to be impacted by evolving regulations and policies.
-
May 7, 2024 | 
jdsupra.com | Megan Brown |Tracye Winfrey Howard |Teresita Regelbrugge
WHAT: On May 2, 2024, the U.S. Department of Defense (DOD) issued a Defense Federal Acquisition Regulation Supplement (DFARS) class deviation related to the cybersecurity standards required for covered contractor information systems. Class Deviation 2024-O0013 clarifies that DOD will continue to require contractors to comply with National Institute of Standards and Technology (NIST) SP 800-171 Revision 2, even though NIST intends to release Revision 3 later this month.
-
Apr 2, 2024 | 
jdsupra.com | Tracye Winfrey Howard |Teresita Regelbrugge |Joshua Waldman
WHAT: The U.S. Department of Homeland Security’s Cybersecurity and Infrastructure Security Agency (CISA) published the final version of its Secure Software Development Attestation Common Form (Common Form) and announced availability of the Repository for submission of software producers’ completed Common Form and any related artifacts. CISA has also released a User Guide for the Repository.
-
Feb 22, 2024 | 
jdsupra.com | Megan Brown |Tracye Winfrey Howard |Teresita Regelbrugge
WHAT: On February 16, 2024, the U.S. Department of Defense (DOD) posted a 40-minute video overview of DOD’s proposed requirements for the Cybersecurity Maturity Model Certification (CMMC) program. The video is available here, and there is an accompanying notice in the Federal Register with a link to the video. As many contractors get ready to work with and use the CMMC program, any guidance from the government may help them understand compliance challenges.
-
Jan 11, 2024 | 
jdsupra.com | Megan Brown |Tracye Winfrey Howard |Teresita Regelbrugge
WHAT: The U.S. Department of Defense (DOD) has issued a proposed rule setting forth key requirements for its long-anticipated Cybersecurity Maturity Model Certification (CMMC) 2.0 program. The proposed rule primarily addresses security, assessment, and affirmation requirements for contractors that handle federal contract information (FCI) and controlled unclassified information (CUI).
