Forget The Showers. April Brings Flurry of New Cyber Guidance.
Client Alert | 1 min read | 05.01.18
April has marked a busy month for those following the DoD’s approach to contractor cybersecurity. Earlier in the month, the DoD published a much-anticipated revision to their Frequently Asked Questions regarding DFARS 252.204-7012 and other cybersecurity requirements, reflecting feedback on various questions posed by industry over the past year and including new information regarding:
- COTS and commercial items
- Scope of covered defense information
- Conflicts with foreign laws
- Subcontractor flowdowns
- System security plans (SSPs) and plans of action & milestones (POAMs)
- Requirements for FIPS-validation, multifactor authentication, and marking
- Cybersecurity requirements beyond NIST SP 800-171
- Cloud service providers
- Examples of cyber incidents
- Guidance for small businesses
- DCMA oversight
Then just weeks later, the DoD issued proposed guidance for evaluating contractor cybersecurity, including implementation of NIST SP 800-171. Importantly, contractors may comment on the draft guidance through May 31 – and would be well-served to familiarize themselves with the new FAQs before doing so.
Contacts
Partner, Crowell Global Advisors Senior Director
Insights
Client Alert | 8 min read | 09.09.25
On September 5, 2025, the Federal Trade Commission (“FTC”) withdrew its appeals of decisions issued by Texas and Florida federal district courts, which enjoined the FTC from enforcing a nationwide rule banning almost all noncompete employment agreements. Companies, however, should not read this decision to mean that their noncompete agreements will no longer be subjected to antitrust scrutiny by federal enforcers. In a statement joined by Commissioner Melissa Holyoak, Chairman Andrew Ferguson stressed that the FTC “will continue to enforce the antitrust laws aggressively against noncompete agreements” and warned that “firms in industries plagued by thickets of noncompete agreements will receive [in the coming days] warning letters from me, urging them to consider abandoning those agreements as the Commission prepares investigations and enforcement actions.”
Client Alert | 12 min read | 09.09.25
Client Alert | 7 min read | 09.08.25
California’s Climate Disclosure Laws Continue to Roll Forward
Client Alert | 3 min read | 09.08.25
RADV Audits: Implications and Recommendations for Medicare Advantage Organizations
