Finally Heard – Cyber Help for Small Businesses is on Its Way
Client Alert | 1 min read | 08.22.18
New cybersecurity legislation was recently passed that aims to help smaller government contractors in their efforts to safeguard sensitive customer data. The NIST Small Business Cybersecurity Act requires the National Institute of Standards and Technology (NIST) to issue guidance and resources, within the next year, to help small- and medium-sized businesses identify, assess, and reduce cybersecurity risks. Partly in response to the rising number of cyberattacks targeting small businesses, the legislation is the latest in a series of efforts more broadly focused on supply chain security throughout the procurement process. Under the Act, NIST must also:
- Ensure future resources can vary with the nature and size of the small business, as well as the nature and sensitivity of the data handled.
- Encourage the use of technology neutral, commercial off-the-shelf (COTS) solutions.
- Promote awareness of basic controls, a workplace cybersecurity culture, and third-party stakeholder relationships.
Contacts
Partner, Crowell Global Advisors Senior Director
- Washington, D.C.
- D | +1.202.624.2698
- Washington, D.C. (CGA)
- D | +1 202.624.2500
Insights
Client Alert | 12 min read | 03.10.26
On 26 February 2026, the EU published Directive (EU) 2026/470 (the Omnibus I Directive). Adopted as part of the European Commission's (Commission) simplification agenda and after a year of debates and negotiations between the Commission, the Council, and the European Parliament, this text effectuates far-reaching changes to both the Corporate Sustainability Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CS3D).
Client Alert | 3 min read | 03.10.26
Client Alert | 15 min read | 03.06.26
Client Alert | 6 min read | 03.06.26
Tri-Agencies Release Fourth Mental Health Parity Report to Congress
