On March 5, 2025, a US district court in Massachusetts issued a preliminary injunction blocking the National Institutes of Health (NIH) from implementing a February 7, 2025, “Supplemental Guidance” notice that would establish...more
3/7/2025
/ Administrative Procedure Act ,
Compliance ,
Department of Health and Human Services (HHS) ,
Federal Funding ,
Government Agencies ,
Grants ,
Healthcare ,
National Institute of Health (NIH) ,
Preliminary Injunctions ,
Regulatory Oversight ,
Regulatory Requirements
Since the inauguration of US President Donald Trump on January 20, 2025, many companies that hold or support Federal contracts, grants, and other awards have received so-called “stop work orders” or other directives to cease...more
2/5/2025
/ Compliance ,
Corporate Counsel ,
Executive Orders ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
Government Agencies ,
Injunctions ,
State and Local Government ,
State Attorneys General ,
Stop Work Orders ,
Subcontractors ,
Trump Administration
We previously discussed the US Small Business Administration’s (SBA) proposed rule updating the regulations regarding government contractor size and small business program status recertification. The SBA has now issued the...more
The US Small Business Administration (SBA) recently issued a proposed rule impacting the ability of small business government contractors to continue performance of set-aside awards following a merger or acquisition. The...more
The US Department of Defense (DoD) published a final rule codifying the Cybersecurity Maturity Model Certification (CMMC) Program. The final CMMC rule will apply to all DoD contractors and subcontractors that will process,...more
The US Department of Defense (DoD) took the next step in implementing the Cybersecurity Maturity Model Certification (CMMC) Program on August 15, 2024, when it issued a Proposed Rule to amend the Defense Federal Acquisition...more
In this series of articles, we explore the different certification requirements of CMMC Levels 1, 2 and 3; the impact on contractors and external service providers; and proposed next steps...
On December 26, 2023, the US...more
4/26/2024
/ Certification Requirements ,
Comment Period ,
Cyber Incident Reporting ,
Cybersecurity ,
Cybersecurity Framework ,
Cybersecurity Maturity Model Certification (CMMC) ,
DCMA ,
Department of Defense (DOD) ,
DFARS ,
Federal Contractors ,
Regulatory Requirements ,
Risk Assessment ,
Risk Management
In this series of articles, we explore the different certification requirements of CMMC Levels 1, 2 and 3; the impact on contractors and external service providers; and proposed next steps...
On December 26, 2023, the US...more
In this series of articles, we explore the different certification requirements of CMMC Level 1, 2 and 3, the impact on contractors and external service providers, and proposed next steps...
On December 26, 2023, the US...more
1/9/2024
/ Certification Requirements ,
Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Defense Sector ,
Department of Defense (DOD) ,
DFARS ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
NIST ,
Proposed Rules ,
Subcontractors
On December 26, 2023, the US Department of Defense (DoD) published its long-awaited proposed rule codifying the Cybersecurity Maturity Model Certification (CMMC) Program. The proposed CMMC rule will apply to all DoD...more
12/29/2023
/ Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Department of Defense (DOD) ,
DFARS ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
Popular ,
Proposed Rules ,
Regulatory Requirements ,
Security Controls
On June 16, 2022, the US Department of Defense (DoD) issued a memorandum (DoD Memo) “reminding” contracting officers that noncompliance with the Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012,...more
7/1/2022
/ Compliance ,
Corporate Counsel ,
Cyber Incident Reporting ,
Cybersecurity ,
Data Security ,
Department of Defense (DOD) ,
DFARS ,
Enforcement Actions ,
Federal Contractors ,
NIST ,
Policy Memorandums
When US President Joe Biden signed the Infrastructure Investment and Jobs Act (IIJA) into law on November 15, 2021, $2 billion was allocated to strengthen the nation’s cyber defenses. With this heightened focus on cyber risk...more
3/25/2022
/ Continuing Legal Education ,
Cyber Attacks ,
Cyber Crimes ,
Cybersecurity ,
Department of Justice (DOJ) ,
Enforcement Actions ,
False Claims Act (FCA) ,
Federal Trade Commission (FTC) ,
New Regulations ,
Popular ,
Qui Tam ,
Risk Management ,
Securities and Exchange Commission (SEC) ,
Webinars ,
Whistleblower Awards ,
Whistleblower Hotlines ,
Whistleblower Protection Policies ,
Whistleblowers
A project labor agreement (PLA) is a collective bargaining agreement between a contractor and the building trade union on a specific construction project. PLAs are negotiated before any workers are hired, and they establish...more