FY 2019 NDAA – Cyber Focus
Client Alert | 1 min read | 08.20.18
The 2019 National Defense Authorization Act (NDAA) includes a robust set of cybersecurity provisions impacting the Defense Industrial Base, including:
- Encouraging federal agencies to avoid using lowest price technically acceptable source selection criteria in procurements predominately for the acquisition of information technology and cybersecurity services.
- Establishing a pilot program to oversee Controlled Unclassified Information (CUI) handled by contractors with foreign ownership, control, or influence.
- Requiring DoD to notify Congress of data breaches involving significant losses of Personally Identifiable Information (PII) or other forms of CUI.
- Encouraging DoD and the National Institute of Standards and Technology (NIST) to assist small businesses in the Defense Industrial Supply Chain by enhancing cyber threat awareness and training, and helping to conduct voluntary cybersecurity self-assessments.
- Requiring DoD to obtain disclosures from vendors regarding foreign government access to products or source codes, before acquiring their cybersecurity or information technology products and services.
Contacts

Partner and Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 6 min read | 04.29.26
CMS Seeks to Expand Interoperability Requirements to Drug Pre-Authorization (FAQ)
On April 10, 2026, the Centers for Medicare and Medicaid Services (CMS) issued a proposed rule (2026 CMS Interoperability Standards and Prior Authorization for Drugs, or CMS-0062-P) outlining the agency’s plans to impose new interoperability requirements on payors participating in certain Medicare and Medicaid programs. As described by the agency in a recent press release, the proposed rule “builds on” prior rulemaking by clarifying and enhancing interoperability requirements for payors’ prior authorization processes, specifically those associated with coverage requests for pharmaceutical therapies.
Client Alert | 8 min read | 04.27.26
Client Alert | 5 min read | 04.27.26
Drift Protocol Exploit: Why “Social Trust” Is the Newest Cybersecurity Gap
Client Alert | 4 min read | 04.27.26
Gaming Addiction Litigation: Turner v. Epic Games & Roblox and What It Means for the Industry

