1. Home
  2. |Insights
  3. |CMMC Proposed Rule: What to Know

CMMC Proposed Rule: What to Know

Webinar | 01.09.24, 1:00 PM EST - 2:00 PM EST

Address

Virtual

The Department of Defense (DOD) has released the highly anticipated proposed rule for the Cybersecurity Maturity Model Certification Program (CMMC). CMMC is a unified assessment model released by the DoD in response to the growing threat of cyberattacks and data theft from its supply chain vendors. As proposed, this program requires every Federal contractor that handles DoD sensitive data to comply with certain cybersecurity controls. CMMC will bring greater scrutiny to contractors’ cybersecurity compliance and greater risks associated with failure to comply. To achieve certification, you’re required to prove that your organization can meet a myriad of security control obligations, a process that can be daunting if you’re not familiar with the policies, procedures, and practices that may be required when the program is finalized.

Join us as we discuss CMMC in a live panel webinar featuring Privacy & Cybersecurity and Government Contracts attorneys Evan Wolff, Michael Gruden, Nkechi Kanu, Jacob Harrison and Alexis Ward. Topics will include:

  • Overview of the CMMC proposed rule for CMMC.
  • The CMMC certification process and what to expect.
  • Recommendations for organizations to achieve CMMC certification.
  • Impact of CMMC attestations on other cyber disclosure regulations (e.g, FCA, SEC, etc.).
  • CMMC effects on supply chain management.

For more information, please visit these areas: Privacy and Cybersecurity, Government Contracts

Participants

Insights

Webinar | 10.28.26

AI Governance & Vendor Diligence for Providers

Health care providers are deploying AI at an unprecedented pace—from ambient documentation and AI-assisted diagnostics to remote patient monitoring—but rapid adoption brings significant legal, regulatory, and reputational risk. A growing patchwork of state AI laws, evolving federal frameworks, and emerging litigation are reshaping what providers must do to deploy these tools responsibly.