Latest Publications

Share:

DOD Crystalizes CMMC 2.0 Program Rule - UPDATED October 22, 2024.

WHAT: On October 15, 2024, the U.S. Department of Defense (DOD) published the final CMMC 2.0 Program rule. DOD’s final rule outlines the mechanisms that DOD will use to prescribe cybersecurity standards for safeguarding...more

DOD Crystalizes CMMC 2.0 Program Rule

WHAT: On October 15, 2024, the U.S. Department of Defense (DOD) will publish the final CMMC 2.0 Program rule. DOD’s final rule outlines the mechanisms that DOD will use to prescribe cybersecurity standards for safeguarding...more

[Webinar] Best Practices in Cyber Preparedness - October 23rd, 12:00 pm - 1:00 pm EDT

We invite you to join us for an insightful webinar on Best Practices in Cyber Preparedness for Government Contractors and Critical Infrastructure Operators on Wednesday, October 23, 2024, from 12:00 p.m. – 1:00 p.m. EDT....more

Athletes, Arenas, and Cyberattacks: The Evolving Landscape of Cybersecurity in Sports

As cybersecurity threats continue to evolve, the sports industry faces unique challenges in safeguarding its data, athletes, and events. During a recent panel discussion at the Aspen Cyber Summit, Reynold Hoover, CEO of the...more

[Webinar] Digital Trade in 2025 and Beyond: An Election Outlook - September 12th, 11:00 am - 12:00 pm EDT

The past two presidential administrations have seen major shifts in U.S. trade policy impacting all aspect of the digital ecosystem, from trade in physical technology products to new initiatives limiting data flows. Join...more

CMMC 2.0 Update: DOD Proposed Rule Introduces Standard Terms for Contracts Subject to CMMC 2.0, Including Yet Another 72-Hour...

WHAT: The U.S. Department of Defense (DOD) just published the second of two proposed rules setting forth key requirements for its long-anticipated Cybersecurity Maturity Model Certification (CMMC) 2.0 program. The earlier...more

Policy Patches: An Update on Software Security Regulation

So far, 2024 has been another very busy year for U.S. cybersecurity regulation. Among the top priorities has been software security, as we previewed early this year. Companies that sell software to the federal government or...more

How Bad Is It Out There? Our Thoughts on Verizon’s 2024 Data Breach Investigations Report (DBIR)

Verizon released its Data Breach Investigations Report (DBIR) for 2024, an annual treat that highlights some trends companies should be aware of as they manage their cybersecurity programs and respond to and anticipate new...more

Calls for Cybersecurity Regulatory Harmonization Ramp Up in Congress, White House

The proliferation of cybersecurity regulations has the White House and Congress calling for harmonization to streamline regulations, focus on reciprocity, and decrease compliance costs. Senator Gary Peters (D-MI), chair of...more

CYBER UPDATE: White House Seeks Regulatory Harmonization While Exploring a Pilot for Reciprocity Amid Proliferation of Regulations

Companies, particularly those in “critical infrastructure” sectors, have seen a dramatic increase in cybersecurity regulatory requirements in just the past few years – and the White House is looking to move faster. At the...more

Darned if You Do, Darned if You Don’t: Recent Lessons from the SEC On Cyber Reporting

The Security and Exchange Commission (SEC) Director of the Division of Corporate Finance, Erik Gerding, released a statement on May 21, 2024 that may have regulated entities scratching their heads about compliance and the...more

FAR Council Kicks Off Rulemaking to Ban Certain Semiconductor Purchases; Seeks Comment from Contractors

WHAT: The Federal Acquisition Regulatory Council (FAR Council) issued an advanced notice of proposed rulemaking (ANPR) to implement parts of Section 5949 of the James M. Inhofe National Defense Authorization Act (NDAA) for...more

[Webinar] The FCC’s Expanding Enforcement Reach: Five Things You Need to Know - May 30th, 12:00 pm - 1:00 pm EDT

While the FCC is well-known for broadcast and telecom regulation, the Commission regulates broadly, reaching communications networks, the marketing and sale of electronic devices, space-based services, diverse grant and...more

FCC Releases Draft NPRM to Secure Equipment Authorization Testing Labs

On May 1, the Federal Communications Commission (FCC or Commission) released a draft Notice of Proposed Rulemaking (draft NPRM or Draft) regarding the Commission’s equipment authorization program. The bipartisan proposal –...more

Not So Fast, NIST: DOD Issues Class Deviation to Retake Control Over What Cybersecurity Requirements Apply to its Contracts

WHAT: On May 2, 2024, the U.S. Department of Defense (DOD) issued a Defense Federal Acquisition Regulation Supplement (DFARS) class deviation related to the cybersecurity standards required for covered contractor information...more

New White House Policy Previews Increased Cybersecurity Oversight and Regulation

On April 30, 2024 the White House updated the foundational U.S. government policy that defines critical infrastructure (CI) sectors and establishes a coordination structure within the federal government to support owners and...more

DOJ Kicks Off Work to Regulate Foreign Access to Sensitive Personal Data Under New EO

On March 5, 2024, the Department of Justice (DOJ) issued an Advance Notice of Proposed Rulemaking (ANPRM) regarding Access to Americans’ Bulk Sensitive Personal Data and Government-Related Data by Countries of Concern. The...more

Commerce Considers Regulating Connected Vehicles to Protect Against Foreign Adversaries

On March 1, 2024, at the direction of President Biden, the U.S. Department of Commerce’s Bureau of Industry and Security (BIS) published an Advanced Notice of Proposed Rulemaking (ANPRM) seeking public comment on the proposed...more

NIST Cybersecurity Framework 2.0 Reveals Major Shifts in Federal Guidance

On February 26, 2024, the National Institute of Standards and Technology (NIST) released the Cybersecurity Framework version 2.0 (CSF 2.0). CSF 2.0 is a generational update to NIST’s foundational cybersecurity guidance, which...more

Lawsuits Continue to Impact State Laws Regulating the Internet

States around the country have been enacting laws to regulate the internet in the name of children’s safety. Several of these regulatory schemes have been preliminarily enjoined because they burden free speech and raise other...more

FCC Continues Push to Establish IoT Cyber Trust Mark Program

On February 22, 2024, the Federal Communications Commission (FCC or “Commission”) released a Public Draft of a Report and Order that, if adopted, would establish a voluntary labeling program for Internet of Things (IoT)...more

194 Results
 / 
View per page
Page: of 8

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide