Cyber Regs Toughened Up
Client Alert | less than 1 min read | 03.13.12
As Congress continues to mull competing proposals for new cyber legislation, federal agencies have moved ahead under existing statutory authority to tighten and toughen the regulations and standards governing cybersecurity for government contractors. In a recent Briefing Paper published by Thomson West, David Bodenheimer and Jon Baker of Crowell & Moring address the escalating cyber threats driving this trend, the existing statutory and regulatory framework imposing information security requirements, and the fundamental elements necessary for a sound cybersecurity program -- including compliance procedures, continuous monitoring, and security controls specified by the National Institute of Standards and Technology (NIST).
Contacts
Insights
Client Alert | 5 min read | 07.20.26
On July 6, 2026, the U.S. Department of Justice (DOJ) and the U.S. Department of Homeland Security (DHS) published an Interim Final Rule (IFR) setting up a new federal framework that allows state, local, Tribal, and territorial (SLTT) law enforcement and correctional agencies to detect, track, and, in some cases, disable or seize drones. The rule directly affects SLTT agencies looking to stand up counter-drone programs, as well as drone and counter-drone technology companies whose products will be subject to federal review and approval. Although the IFR bypassed the Administrative Procedure Act’s standard notice-and-comment process on good cause grounds — citing the statutory 180-day deadline and urgent public safety needs — the rule is already legally binding and effective as of July 1, 2026. The Departments are nonetheless accepting post-promulgation comments through September 4, 2026.
Client Alert | 3 min read | 07.20.26
QFMA Introduces International Licensing Regime for Financial Services Firms
Client Alert | 3 min read | 07.17.26
Client Alert | 2 min read | 07.15.26
CMMC Phase II Suspension Requires Reconsideration of Such Requirements in Solicitations

