News & Analysis as of August 2, 2025

Cybersecurity › Federal Contractors › Comment Period

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

What’s New – FAR Council Publishes Proposed Rules Concerning CUI and OCIs

White & Case LLP on 2/5/2025

On January 15, 2025, the Federal Acquisition Regulatory Council (FAR Council) proposed two significant rule changes that could reshape compliance obligations for government contractors: one establishing standardized...more

FedRAMP Releases New Draft Authorization Boundary Guidance

Sheppard Mullin Richter & Hampton LLP on 1/30/2025

Over the last few years, the Federal Risk and Authorization Management Program (“FedRAMP”) Program Management Office (“PMO”) has released two draft guidance documents related to defining the applicable boundary for security...more

The DoD’s CMMC Rule Is Out: What Comes Next?

BakerHostetler on 11/15/2024

On October 15, 2024, the Department of Defense (DoD) published the final rule for the Cybersecurity Maturity Model Certification (CMMC) Program that not only finalizes the long-anticipated CMMC Rule but also foreshadows what...more

Are We There Yet? DoD Issues Final Rule Establishing CMMC Program

McDermott Will & Emery on 10/17/2024

The US Department of Defense (DoD) published a final rule codifying the Cybersecurity Maturity Model Certification (CMMC) Program. The final CMMC rule will apply to all DoD contractors and subcontractors that will process,...more

DOD’s CMMC 2.0 Program Takes Step Forward with Release of Contract Rule Proposal

Woods Rogers on 8/21/2024

The United States Department of Defense (DoD) took another big step on the path to instituting its highly anticipated Cybersecurity Maturity Model Certification 2.0 program (CMMC 2.0). Once finalized, CMMC 2.0 will establish...more

The CMMC Rule To Update the DFARS is Here!

Sheppard Mullin Richter & Hampton LLP on 8/16/2024

The proposed rule to implement the Cybersecurity Maturity Model Certification (“CMMC”) program in the Defense Federal Acquisition Regulation Supplement (“DFARS”) was published in the Federal Register on August 15, 2024 and...more

Not an April Fools Joke – FAR Part 40 Final Rule Has Been Published

Sheppard Mullin Richter & Hampton LLP on 4/30/2024

On April 1, 2024, the FAR Council published a new Final Rule that establishes FAR Part 40 – but without any new provisions of substance. This Final Rule becomes effective on May 1, 2024. Subsequently, the FAR Council...more

CMMC Level 3: Strict Scoping and Expansive Requirements

McDermott Will & Emery on 4/26/2024

In this series of articles, we explore the different certification requirements of CMMC Levels 1, 2 and 3; the impact on contractors and external service providers; and proposed next steps... On December 26, 2023, the US...more

CMMC 2.0: Defense Contractors Get Ready

Goodwin on 1/24/2024

The US Department of Defense (DoD) has issued a proposed rule to implement its long-awaited Cybersecurity Maturity Model Certification program (CMMC 2.0). This proposed rule — released on December 26, 2023, and published in...more

Happy New Year From DoD – The Proposed CMMC Rule Is Here

Cohen Seglias Pallas Greenhall & Furman PC on 1/17/2024

On December 26, 2023, the U.S. Department of Defense (DoD) published the much anticipated proposed rule for the revamped Cybersecurity Maturity Model Certification (CMMC) 2.0 Program....more

New Year, New Rules: The CMMC Proposed Rule is Here

Sheppard Mullin Richter & Hampton LLP on 1/3/2024

Well, the wait is over. Just as 2023 came to a close, on December 26, 2023, the Department of Defense (“DoD”) published the much-anticipated Proposed Rule for the DoD’s Cybersecurity Maturity Model Certification (“CMMC”)...more

Department of Defense Publishes Long-Awaited CMMC Proposed Rule

Bass, Berry & Sims PLC on 1/3/2024

On December 26, the Department of Defense (DoD) published its long-awaited Cybersecurity Maturity Model Certification (CMMC) Program proposed rule, which places comprehensive cybersecurity and information security...more

The New CMMC Rule: FAQs for Federal Contractors and Subcontractors

Venable LLP on 1/2/2024

The Department of Defense (DoD) delivered its proposed Cybersecurity Maturity Model Certification Program rule (CMMC) the day after Christmas this year, including several related guidance documents (listed here). The proposed...more

FAR Pushes Proposed Rules Comments Deadline Further

Paul Hastings LLP on 12/22/2023

On October 3, 2023, the Federal Acquisition Regulatory (“FAR”) Council released two draft rules which would impose new cybersecurity requirements for federal contractors. Comment periods for both proposed rules were slated to...more

Cyber Incident Reporting May Be “Material” for Federal Contractors

Bass, Berry & Sims PLC on 11/29/2023

Last month, the Federal Acquisition Regulatory Council proposed new cybersecurity and incident reporting regulations for federal contractors on behalf of the Department of Defense (DoD), the General Services Administration...more

New FAR Cybersecurity Requirements for Federal Contractors

Schwabe, Williamson & Wyatt PC on 11/3/2023

This is an advisory update of key responsibilities for contractors under a proposed new Federal Acquisition Regulation (FAR) rule that standardizes cybersecurity requirements for a Federal Information System (FIS). The...more

“FAR” Reaching Consequences: Proposed FAR Cybersecurity Requirements Will Add New Obligations for Contractors

Paul Hastings LLP on 10/25/2023

Earlier this month the Federal Acquisition Regulation (“FAR”) Council released two draft rules which would impose new cybersecurity requirements for federal contractors. The proposed rules, Cyber Threat and Incident Reporting...more

Two New Cybersecurity Proposed Rules Mean Big Changes for Federal Contractors

Sheppard Mullin Richter & Hampton LLP on 10/5/2023

On October 3, 2023, the FAR Council released two long-awaited proposed rules for federal contractor cybersecurity stemming from the Biden Administration’s Cybersecurity Executive Order from May 2021 (Executive Order 14028)....more

New Cybersecurity FAR Rules Poised to Have a Major Impact on Contractors

Holland & Knight LLP on 10/5/2023

The Federal Acquisition Regulatory (FAR) Council on Oct. 3, 2023, issued two proposed rules to partially implement President Biden's Executive Order on Improving the Nation's Cybersecurity. The first proposed rule imposes...more

NIST Wants Your Input – Updating NIST’s Controlled Unclassified Information (CUI) Guidelines

Sheppard Mullin Richter & Hampton LLP on 7/28/2022

On July 19, 2022, the National Institute of Standards and Technology (NIST) released a Pre-Draft Call for Comments, seeking feedback on improving its Controlled Unclassified Information (CUI) series of publications. The...more

SEC Issued Proposed Rule on Cybersecurity Risk Management, Strategy, Governance, and Incident Disclosure

Stinson - Government Contracting Matters on 4/22/2022

Increasingly, the Federal government implements a rule for government contractors which then makes its way in some form into all of US industry. Cybersecurity regulations, mandating that government contractors, grant and...more

DoD’s Long Awaited Rule on CMMC – Plus a New Cybersecurity Assessment Methodology for Contractors to Start Right Now

Sheppard Mullin Richter & Hampton LLP on 9/30/2020

At long last, the Department of Defense (“DoD”) has provided its interim rule, published in the Federal Register on September 29, 2020, amending the Defense Federal Acquisition Regulation Supplement (“DFARS”) to set forth...more

DoD’s Squeeze of Chinese Telecom Equipment Continues

Sheppard Mullin Richter & Hampton LLP on 1/31/2020

At the end of 2019, the Department of Defense (“DoD”) took another step to limit the potential cyber risks posed by telecommunications equipment manufactured by Chinese companies (and potentially Russian ones too). We...more

Weekly Update Newsletter - January 2020 #2

PilieroMazza PLLC on 1/14/2020

PODCAST: Ex Rel. Radio – False Claims Act: The Risks to Small Business Government Contractors “False Claims Act: The Risks to Small Business Government Contractors” is the fifth episode of “Ex Rel. Radio,” our multi-part...more

Weekly Update Newsletter - October 2019 #4

PilieroMazza PLLC on 10/23/2019

LABOR & EMPLOYMENT LAW - DoL Collected a Record Amount in Discrimination Settlements in Fiscal Year 2019 - According to Bloomberg Government, the Department of Labor (DoL) collected more than $27 million from federal...more

30 Results

/

View per page

Page: of 2

Next »