NIST Finalizes Enhanced Security Requirements for Combating Advanced Cyber Threats
Client Alert | 1 min read | 02.09.21
The National Institute of Standards and Technology (NIST) recently released the final version of NIST Special Publication (SP) 800-172, Enhanced Security Requirements for Protecting Controlled Unclassified Information. Designed to supplement the requirements in NIST SP 800-171—the applicable standard under DFARS 252.204-7012—800-172 provides 35 enhanced security requirements to protect controlled unclassified information (CUI) associated with critical programs and high value assets from sophisticated adversaries referred to as advanced persistent threats (APTs).
Although expected to impact relatively few contractors, where applicable, agencies may include select enhanced security requirements from 800-172 in their contract provisions. The Department of Defense (DoD) has also incorporated several of the requirements identified in prior drafts of 800-172 into maturity levels 4 and 5 of the Cybersecurity Maturity Model Certification (CMMC).
Contacts
Senior Counsel
She/Her/Hers
Insights
Client Alert | 6 min read | 12.09.24
Eleven States Sue Asset Managers Alleging ESG Conspiracy to Restrict Coal Production
On November 27, 2024, a group of eleven state attorneys general (the “AGs”) sued three of the world’s largest asset managers (the “Asset Managers”), accusing them of anticompetitive stock acquisitions, deceptive asset management practices, and an antitrust conspiracy to restrict coal output. The states seek declaratory and injunctive relief including divestitures, as well as fines under state laws, although the allegations could provide a basis for follow-on private treble damages claims under the antitrust laws.
Client Alert | 3 min read | 12.09.24
New York Department of Labor Issues Guidance Regarding Paid Prenatal Leave, Taking Effect January 1
Client Alert | 4 min read | 12.06.24
