1. Home
  2. |Insights
  3. |DoD Previews New Third-Party Cyber Certification Requirements

DoD Previews New Third-Party Cyber Certification Requirements

Client Alert | 1 min read | 06.17.19

The Department of Defense is moving closer to a third-party certification to ensure compliance with its standard cybersecurity requirements – what is being called the “Cybersecurity Maturity Model Certification” (CMMC). While still in the early stages of development, the CMMC would likely require all contractors subject to DFARS 252.204-7012 to obtain a certification issued by an independent third party stating that the contractor has sufficiently implemented its required cybersecurity controls. Holding this certification would be a “go/no-go” condition to compete for relevant DoD work. Although NIST SP 800-171 is the default cybersecurity standard currently required under -7012, DoD is also exploring the creation of a new standard that would govern the certification. DoD is projecting that the CMMC will start appearing in solicitations as early as Fall 2020, but much work remains to be done – including potential revisions to -7012 – and will no doubt be informed by extensive industry engagement. 

Contacts

Insights

Client Alert | 3 min read | 06.03.26

Important EU Court Judgment Clarifies Rules on Interest Due in Cartel Damages Cases

In a judgment that will have direct and immediate consequences, the Court of Justice of the European Union (CJEU) has clarified that for all competition damages actions brought after 26 December 2014, interest runs from the date on which the harm occurred. The ruling addressed two important questions: (1) whether national provisions implementing Article 3(2) of the EU Damages Directive — which requires interest to run from the date harm occurred —apply to cases in which the harm preceded the adoption of those provisions; and (2) how the date of harm should be determined in cartel cases involving the purchase of goods at inflated prices....

View All Insights