Townsend L. Bourne

3 weeks ago | natlawreview.com | Townsend L. Bourne |Daniel Alvarado |Lynn L. Bergeson |Carla N. Hutton

On March 24, 2025, the Federal Risk and Authorization Management Program (“FedRAMP”) announced a major overhaul of the program, which is being called “FedRAMP 20x.” The FedRAMP 20x announcement stated there are no immediate changes to the existing authorization path based on agency sponsorship and assessment against the FedRAMP Rev 5 baseline.[1] However, once the initiative kicks off, we expect major changes to speed up and streamline that authorization path that likely will be welcomed by...

2 months ago | mondaq.com | Townsend L. Bourne |Jonathan Meyer |Jordan Mallory

On January 8, 2025, the Department of Justice ("DOJ") published its final rule addressing Executive Order (E.O.) 14117, "Preventing Access to Americans' Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern." With the final rule, the DOJ National Security Division's Foreign Investment Review Section ("FIRS") defines prohibited and restricted data transactions, and outlines trusted data flows for companies with overseas operations involving countries of...

Jan 7, 2025 | openlegalblogarchive.org | Townsend L. Bourne |Nikole Snyder |Daniel Alvarado |Jordan Mallory |Daniel Alvarado

To kick off the New Year (and as is now tradition, since we put out a similar Recap & Forecast last year), Sheppard Mullin’s Governmental Practice Cybersecurity & Data Protection Team has prepared a cybersecurity-focused 2024 Recap (highlighting major updates and including links to the resources we put out over the past year) and a 2025 Forecast (previewing what we expect to see in 2025).

Jan 7, 2025 | natlawreview.com | Townsend L. Bourne

To kick off the New Year (and as is now tradition, since we put out a similar Recap & Forecast last year), Sheppard Mullin’s Governmental Practice Cybersecurity & Data Protection Team has prepared a cybersecurity-focused 2024 Recap (highlighting major updates and including links to the resources we put out over the past year) and a 2025 Forecast (previewing what we expect to see in 2025).

Dec 16, 2024 | jdsupra.com | Townsend L. Bourne

[co-author: Sidney Howe*]On November 15, 2024, the Department of Defense (“DoD”) issued a long-awaited Proposed Rule to implement Section 1655 of the National Defense Authorization Act for Fiscal Year 2019. Section 1655 prohibits DoD from acquiring technology, cybersecurity, industry control, or weapon system products or services unless the contractor provides certain disclosures.