DoD Meets Contractors Half-Way at Industry Information Day
Client Alert | 1 min read | 06.28.17
On June 23, the Department of Defense hosted its highly anticipated Industry Information Day to respond to feedback received from the contracting community regarding last year’s finalization of DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting. Top of mind for many in attendance was the looming end-of-year deadline to implement NIST SP 800-171, including its requirements regarding multifactor authentication. By the end of the session, however, DoD representatives repeatedly stated that contractors may use system security plans (SSPs) and plans of action and milestones (POAMs) to document their anticipated implementation of the required controls and thus comply with the Clause – even if the actual implementation of those controls extends beyond 2017. A revised set of FAQs is expected next month, which should provide additional details regarding this new guidance.
Contacts
Senior Counsel
She/Her/Hers
Insights
Client Alert | 14 min read | 05.03.24
On April 24, 2024, President Biden signed into law the National Security Supplemental fiscal package, which includes significant new sanctions and export controls authorities. Although the U.S. foreign aid commitments for Ukraine, Israel, and Taiwan headline the new law, it also (1) expands the statute of limitations for U.S. sanctions violations; (2) includes new authorities for the President to coordinate sanctions efforts with the European Union and the United Kingdom; (3) expands sanctions and export controls on Iran (including some targeted at Chinese financial institutions); and (4) includes new sanctions authorities targeting terror groups.
Client Alert | 3 min read | 05.03.24
EEOC’s New “Enforcement Guidance on Harassment in the Workplace” Hits Hot-Button Issues
Client Alert | 11 min read | 05.03.24
FDA Moves Forward on Laboratory Developed Tests while Stakeholders and Congress Weigh Next Steps
Client Alert | 1 min read | 05.03.24
