News & Analysis as of September 20, 2024

Supply Chain

+ Follow

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk... more +

Follow this channel for advisories on one of the biggest threats to businesses today. Read a morning brief of fresh guidance and commentary by leading lawyers on security, privacy, risk management, global regulations, data protection, leaks, hacking, cyber insurance, compliance, HIPAA, and every other aspect of cybersecurity of import to corporate readers right now. less -

Cybersecurity Updates: NIST Publishes SP 800-171 Revision 3. What Changed, and What Comes Next?

Wiley Rein LLP on 7/10/2024

In May 2024, the National Institute of Standards and Technology (NIST) published Special Publication 800-171 Rev 3, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations, and the accompanying...more

Rolling With the Punches in a Networked World: CCOE Cybersecurity Panel Discussion

Foley & Lardner LLP on 6/14/2024

Whether the game is football, baseball, hockey, or Indy Car racing, no team goes into their major championship matchup without training. Companies need to train as well if they intend to operate on the internet and expect to...more

New Cybersecurity Controls for Government Contractors: NIST Revises SP 800-171

Akin Gump Strauss Hauer & Feld LLP on 6/13/2024

In May, the National Institute of Standards and Technology (NIST) issued updated recommendations for security controls for controlled unclassified information (CUI) that is processed, stored or transmitted by nonfederal...more

CYBER UPDATE: White House Seeks Regulatory Harmonization While Exploring a Pilot for Reciprocity Amid Proliferation of Regulations

Wiley Rein LLP on 6/6/2024

Companies, particularly those in “critical infrastructure” sectors, have seen a dramatic increase in cybersecurity regulatory requirements in just the past few years – and the White House is looking to move faster. At the...more

Foundational Cybersecurity Standards for Contractors Updated

Holland & Knight LLP on 5/17/2024

The National Institute of Standards and Technology (NIST) released the third revision of its Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations." This...more

CISA Opens Repository for Submission of Software Security Attestation Forms

Sheppard Mullin Richter & Hampton LLP on 3/28/2024

On March 11, 2024, the Cybersecurity and Infrastructure Security Agency (“CISA”) and the Office of Management and Budget (“OMB”) released the highly-anticipated Secure Software Development Attestation Form (also known as the...more

NIST refines Cybersecurity Security Framework, with increased focus on governance and supply chain

Hogan Lovells on 3/14/2024

NIST has updated its widely used Cybersecurity Framework to provide key updates and practical resources for organizations to manage and discuss cybersecurity risk. The updated framework, which remains voluntary, is designed...more

NIST Cybersecurity Framework 2.0 Reveals Major Shifts in Federal Guidance

Wiley Rein LLP on 3/7/2024

On February 26, 2024, the National Institute of Standards and Technology (NIST) released the Cybersecurity Framework version 2.0 (CSF 2.0). CSF 2.0 is a generational update to NIST’s foundational cybersecurity guidance, which...more

Get Ahead Of Compliance: The Proposed Rule For The Cybersecurity Maturity Model Certification (CMMC 2.0) Is Out!

Dunlap Bennett & Ludwig PLLC on 1/8/2024

As a lawyer working in a firm with a sophisticated legal team providing robust regulatory, government contract, and cybersecurity services, our Christmas present and holiday reading arrived early with the publication of the...more

Update: CISA Seeks Additional Input from Software Providers on Security Attestation Form

Sheppard Mullin Richter & Hampton LLP on 12/7/2023

The Cybersecurity and Infrastructure Security Agency (“CISA”) recently revised its Secure Software Development Attestation Common Form (after receiving over 110 comments on the initial draft), and is seeking additional...more

CISA, UK NCSC, and 17 Other Countries Issue Landmark Joint Guidelines for Secure AI System Development

Davis Wright Tremaine LLP on 12/5/2023

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the UK National Cyber Security Centre (UK NCSC), along with partner agencies from 17 nations, have released Guidelines for Secure AI System Development (the...more

CISA Releases Revised Draft of Secure Software Development Self-Attestation Form

Davis Wright Tremaine LLP on 12/1/2023

The Cybersecurity and Infrastructure Security Agency (CISA) has released a revised draft of its Secure Software Development Attestation Common Form ("Form"). The Form, once finalized, will obligate vendors providing software...more

Trade Matters - Lowenstein Sandler's Global Trade & National Security Newsletter - NOVEMBER 7, 2023

Lowenstein Sandler LLP on 11/8/2023

1. BIS Releases Texts of New Chip Export Control Rules- Updating and expanding on rules issued last year, the U.S. Department of Commerce’s Bureau of Industry and Security (BIS) released three rules on October 27 targeting...more

NIST Issues Cybersecurity Framework 2.0 for public comment

Constangy, Brooks, Smith & Prophete, LLP on 8/28/2023

In early August, the National Institute of Standards and Technology released the initial public draft of its Cybersecurity Framework 2.0. The draft is a long-awaited update to a framework that’s been in place for almost 10...more

The Role Of A Cybersecurity Law Firm In Safeguarding Digital Assets

Dunlap Bennett & Ludwig PLLC on 8/16/2023

In today’s digital landscape, organizations face numerous cybersecurity threats that can compromise their valuable digital assets, including their data, IT infrastructure, networks, software, and intellectual property (IP)....more

Cybersecurity Framework Updated to Help Industries Avoid Risks

Harris Beach PLLC on 8/14/2023

The National Institute of Standards and Technology (NIST) released a new draft of its cybersecurity framework on Aug 8, providing updated guidance for industries, government agencies and other organizations on reducing...more

UPDATE: Secure Software Development Attestation: A(nother) Government Requirement

Fenwick & West LLP on 5/30/2023

As follow-on guidance to Office of Management and Budget’s (OMB) September 14, 2022 memo and the associated Executive Order on Improving the Nation’s Cybersecurity from May 2021, the Cybersecurity and Infrastructure Security...more

NIST SP 800-171 Revision 3: Not Another Reboot

McCarter & English Blog: Government Contracts... on 5/22/2023

Hollywood is full of them. And unless you are trapped on the Planet of the Apes, caught on the 3:10 to Yuma, or running from Godzilla, you’ve probably seen a movie reboot or two over the past two decades. The term generally...more

NIST prepares for Cybersecurity Framework 2.0, with increased focus on governance and supply chain

Hogan Lovells on 3/2/2023

The US government continues to refine its influential cybersecurity guidance, the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF), with a substantial update to the CSF expected later this...more

Do Business With the Federal Government? Here’s a 2022 Cybersecurity Recap: Part Three - Secure Software Development Attestation...

Sheppard Mullin Richter & Hampton LLP on 1/24/2023

Yesterday we continued our series... with the Office of Management and Budget’s September 2022 memorandum requiring federal agencies to only use software from software producers that attest compliance with secure software...more

84 Results

View per page

Page: of 4

Cybersecurity › National Institute of Standards and Technology › Supply Chain

Cybersecurity Updates: NIST Publishes SP 800-171 Revision 3. What Changed, and What Comes Next?

Rolling With the Punches in a Networked World: CCOE Cybersecurity Panel Discussion

New Cybersecurity Controls for Government Contractors: NIST Revises SP 800-171

CYBER UPDATE: White House Seeks Regulatory Harmonization While Exploring a Pilot for Reciprocity Amid Proliferation of Regulations

Foundational Cybersecurity Standards for Contractors Updated

CISA Opens Repository for Submission of Software Security Attestation Forms

NIST refines Cybersecurity Security Framework, with increased focus on governance and supply chain

NIST Cybersecurity Framework 2.0 Reveals Major Shifts in Federal Guidance

Get Ahead Of Compliance: The Proposed Rule For The Cybersecurity Maturity Model Certification (CMMC 2.0) Is Out!

Update: CISA Seeks Additional Input from Software Providers on Security Attestation Form

CISA, UK NCSC, and 17 Other Countries Issue Landmark Joint Guidelines for Secure AI System Development

CISA Releases Revised Draft of Secure Software Development Self-Attestation Form

Trade Matters - Lowenstein Sandler's Global Trade & National Security Newsletter - NOVEMBER 7, 2023

NIST Issues Cybersecurity Framework 2.0 for public comment

The Role Of A Cybersecurity Law Firm In Safeguarding Digital Assets

Cybersecurity Framework Updated to Help Industries Avoid Risks

UPDATE: Secure Software Development Attestation: A(nother) Government Requirement

NIST SP 800-171 Revision 3: Not Another Reboot

NIST prepares for Cybersecurity Framework 2.0, with increased focus on governance and supply chain

Do Business With the Federal Government? Here’s a 2022 Cybersecurity Recap: Part Three - Secure Software Development Attestation...

Updating Government Contracting Documents for Cybersecurity

Federal Government Outlines New Security and Attestation Requirements for Software

New Security Rules for Organizations Supplying Software to the Federal Government

U.S. and British Law Enforcement Agencies Issue Unprecedented Warning About Chinese Espionage Efforts

Contractor Settles Cybersecurity-Related False Claims Act Suit for $9 million

Cybersecurity › National Institute of Standards and Technology › Supply Chain

"My best business intelligence, in one easy email…"