Jessica R. Chao
Overview
Jessica advises clients on a wide range of internal and government-facing investigations, with a specialized focus on navigating the challenges arising at the intersection of government contracts and cybersecurity. She also supports clients with general compliance in government contract transactions, developing corporate policies, procedures, and governance, and conducting cybersecurity compliance reviews. Her practice also includes assisting clients with due diligence in transactions.
Career & Education
- University of Denver Sturm College of Law, J.D., Corporate and Commercial Law Certificate and Workplace Law Certificate
- Pepperdine University, B.A., cum laude
- Colorado
- Appellate Judicial Clerk to the Honorable Lino S. Lipinsky de Orlov, Colorado Court of Appeals
- Colorado Bar Association
- American Bar Association
-
-
- Young Lawyers Division
- Public Contract Law
-
-
- Colorado Asian Pacific American Bar Association
-
-
- Board of Directors
- Co-chair, Community Outreach Committee
- Member, Mentorship Committee
-
-
- Korean
Jessica's Insights
Client Alert | 4 min read | 04.14.26
FedRAMP Solicits Public Comment on Overhaul to Incident Communications Procedures
The Federal Risk and Authorization Management Program (FedRAMP) continues to advance its modernization agenda. On April 8, 2026, FedRAMP released RFC-0031, Updated Incident Communications Procedures for public comment. This RFC proposes replacing the current FedRAMP Incident Communications Procedures (ICP) with what FedRAMP calls “a clear set of reporting requirements … established using a modern rules-based format.”
Client Alert | 3 min read | 01.21.26
FedRAMP Proposes Updates to Authorization Process—Six New RFCs Released for Public Comment
Insights
FedRAMP Proposes Updates to Authorization Process—Six New RFCs Released for Public Comment
|01.26.26
Crowell & Moring’s Government Contracts Legal Forum
FedRAMP Proposes Updates to Authorization Process—Six New RFCs Released for Public Comment
|01.22.26
Crowell & Moring’s Government Contracts Legal Forum
An ITAR-ly Critical Reminder of Cybersecurity Requirements: DOJ Settles with Swiss Automation, Inc.
|12.29.25
Crowell & Moring’s Government Contracts Legal Forum
Jessica's Insights
Client Alert | 4 min read | 04.14.26
FedRAMP Solicits Public Comment on Overhaul to Incident Communications Procedures
The Federal Risk and Authorization Management Program (FedRAMP) continues to advance its modernization agenda. On April 8, 2026, FedRAMP released RFC-0031, Updated Incident Communications Procedures for public comment. This RFC proposes replacing the current FedRAMP Incident Communications Procedures (ICP) with what FedRAMP calls “a clear set of reporting requirements … established using a modern rules-based format.”
Client Alert | 3 min read | 01.21.26
FedRAMP Proposes Updates to Authorization Process—Six New RFCs Released for Public Comment
