News & Analysis as of

Comment Period Cybersecurity

McDermott Will & Emery

Are We There Yet? DoD Issues Final Rule Establishing CMMC Program

McDermott Will & Emery on

The US Department of Defense (DoD) published a final rule codifying the Cybersecurity Maturity Model Certification (CMMC) Program. The final CMMC rule will apply to all DoD contractors and subcontractors that will process,...more

Holland & Knight LLP

Major Export Controls Revisions and the AUKUS Trilateral Security Partnership

Holland & Knight LLP on

The U.S. Department of Commerce and U.S. Department of State have been continuously easing restrictions on export-controlled trade between the United States, United Kingdom and Australia to foster technological innovation...more

Woods Rogers

DOD’s CMMC 2.0 Program Takes Step Forward with Release of Contract Rule Proposal

Woods Rogers on

The United States Department of Defense (DoD) took another big step on the path to instituting its highly anticipated Cybersecurity Maturity Model Certification 2.0 program (CMMC 2.0). Once finalized, CMMC 2.0 will establish...more

Sheppard Mullin Richter & Hampton LLP

The CMMC Rule To Update the DFARS is Here!

The proposed rule to implement the Cybersecurity Maturity Model Certification (“CMMC”) program in the Defense Federal Acquisition Regulation Supplement (“DFARS”) was published in the Federal Register on August 15, 2024 and...more

Lewis Roca

Nevada Gaming Control Board Workshop on Public Regulation

Lewis Roca on

The Nevada Gaming Control Board (“Board”) will hold a workshop on May 23, 2024, to solicit comments on proposed amendments to Nevada Gaming Commission (“NGC”) Regulations regarding, without limitation, Regulations 5, 7A, 8,...more

Parker Poe Adams & Bernstein LLP

Feds Focus on Data Privacy and Cybersecurity in Latest Legislative and Rule Proposals

By now, companies that collect, process, and store the personal data of consumers are used to a fast pace of state privacy and cybersecurity legal activity. This year, companies should also expect increased activity from...more

Wiley Rein LLP

Wireless Roundup (May 2024)

Wiley Rein LLP on

FCC Solicits Comment on a Proposed New Framework for Licensing Space Stations Engaged in In-Space Servicing, Assembly, and Manufacturing: In this Notice of Proposed Rulemaking (NPRM) the Federal Communications Commission (FCC...more

Sheppard Mullin Richter & Hampton LLP

Not an April Fools Joke – FAR Part 40 Final Rule Has Been Published

On April 1, 2024, the FAR Council published a new Final Rule that establishes FAR Part 40 – but without any new provisions of substance. This Final Rule becomes effective on May 1, 2024. Subsequently, the FAR Council...more

McDermott Will & Emery

CMMC Level 3: Strict Scoping and Expansive Requirements

McDermott Will & Emery on

In this series of articles, we explore the different certification requirements of CMMC Levels 1, 2 and 3; the impact on contractors and external service providers; and proposed next steps... On December 26, 2023, the US...more

King & Spalding

Department of Homeland Security Proposes Rule for Reporting of Cyber Incidents

King & Spalding on

On April 4, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) published for public comment a long-awaited proposed rule to implement the Cyber Incident Reporting for Critical Infrastructure Act of 2022...more

BakerHostetler

Key Export Control Developments During the First Quarter of 2024

BakerHostetler on

The first quarter of 2024 saw numerous developments on the export control front. This report summarizes the key developments and provides links to the relevant Federal Register notices and/or agency announcements....more

Schwabe, Williamson & Wyatt PC

Comments Sought on Proposed Requirements of the Cyber Incident Reporting for Critical ‎Infrastructure Act

On March 15, 2022, the Cyber Incident Reporting for Critical Infrastructure Act of 2022 was signed into law. Generally, CIRCIA requires “covered entities,” defined as entities in certain critical infrastructure sectors, to...more

Foley Hoag LLP - Security, Privacy and the...

Deadline to Comment on Proposed Rules Impacting Infrastructure as a Service Providers Approaching

On January 29, 2024, BIS proposed a rule that would impose new requirements for U.S. providers of Infrastructure as a Service (“IaaS”) products and their foreign resellers. The proposed rule would require U.S. IaaS providers...more

Woods Rogers

Proposed Federal Cyber Incident Reporting Rule Adds Hefty Federal Reporting Requirements to Critical Infrastructure Sector and...

Woods Rogers on

The federal Cybersecurity and Infrastructure Security Agency (CISA) released a draft of its proposed rule detailing how covered entities operating in critical infrastructure sectors report cyberattacks and ransomware payments...more

Skadden, Arps, Slate, Meagher & Flom LLP

Commerce Department Seeks Comment on Restrictions on ‘Connected Vehicle’ Components From ‘Foreign Adversaries’

The U.S. Department of Commerce is soliciting comment on possible restrictions on “connected vehicle” components obtained from “foreign adversaries.” On March 1, 2024, the department’s Bureau of Industry and Security (BIS)...more

Mayer Brown

Department of Commerce Seeks Comment on Proposed CIP Requirement and Foreign Access Restrictions for US Infrastructure as a...

Mayer Brown on

On January 29, 2024, the US Department of Commerce’s Bureau of Industry and Security (the “Department”) issued a notice of proposed rulemaking seeking comment on a proposed regulation in response to the Executive Order (E.O.)...more

Goodwin

CMMC 2.0: Defense Contractors Get Ready

Goodwin on

The US Department of Defense (DoD) has issued a proposed rule to implement its long-awaited Cybersecurity Maturity Model Certification program (CMMC 2.0). This proposed rule — released on December 26, 2023, and published in...more

Cohen Seglias Pallas Greenhall & Furman PC

Happy New Year From DoD – The Proposed CMMC Rule Is Here

On December 26, 2023, the U.S. Department of Defense (DoD) published the much anticipated proposed rule for the revamped Cybersecurity Maturity Model Certification (CMMC) 2.0 Program....more

Sheppard Mullin Richter & Hampton LLP

New Year, New Rules: The CMMC Proposed Rule is Here

Well, the wait is over. Just as 2023 came to a close, on December 26, 2023, the Department of Defense (“DoD”) published the much-anticipated Proposed Rule for the DoD’s Cybersecurity Maturity Model Certification (“CMMC”)...more

Bass, Berry & Sims PLC

Department of Defense Publishes Long-Awaited CMMC Proposed Rule

On December 26, the Department of Defense (DoD) published its long-awaited Cybersecurity Maturity Model Certification (CMMC) Program proposed rule, which places comprehensive cybersecurity and information security...more

Venable LLP

The New CMMC Rule: FAQs for Federal Contractors and Subcontractors

Venable LLP on

The Department of Defense (DoD) delivered its proposed Cybersecurity Maturity Model Certification Program rule (CMMC) the day after Christmas this year, including several related guidance documents (listed here). The proposed...more

Jones Day

FTC Seeks to Strengthen Privacy Protections of Children Online

Jones Day on

On December 20, 2023, the Federal Trade Commission ("FTC") announced a Notice of Proposed Rulemaking ("NPRM") to revise the Children's Online Privacy Protection Act ("COPPA") Rule to reduce the amount of information...more

Robinson+Cole Data Privacy + Security Insider

CPPA Proposes More Revisions to CCPA

The California Privacy Protection Agency (CPPA) recently met to discuss automated decision-making technology, privacy risk assessments and cybersecurity audits under the California Consumer Privacy Act (CCPA) as amended by...more

Paul Hastings LLP

FAR Pushes Proposed Rules Comments Deadline Further

Paul Hastings LLP on

On October 3, 2023, the Federal Acquisition Regulatory (“FAR”) Council released two draft rules which would impose new cybersecurity requirements for federal contractors. Comment periods for both proposed rules were slated to...more

Sheppard Mullin Richter & Hampton LLP

Update: CISA Seeks Additional Input from Software Providers on Security Attestation Form

The Cybersecurity and Infrastructure Security Agency (“CISA”) recently revised its Secure Software Development Attestation Common Form (after receiving over 110 comments on the initial draft), and is seeking additional...more

261 Results
 / 
View per page
Page: of 11

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
- hide
- hide