On October 6, 2021, the U.S. Department of Justice (DOJ) announced an initiative to pursue civil False Claims Act (FCA) enforcement actions against government contractors that knowingly fail to follow required cybersecurity...more
10/12/2021
/ Biden Administration ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Data Protection ,
Department of Justice (DOJ) ,
DFARS ,
Enforcement Actions ,
Executive Orders ,
False Claims Act (FCA) ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
Fraud ,
Policies and Procedures ,
Regulatory Oversight
The U.S. Department of Labor’s Office of Federal Contract Compliance Programs (OFCCP) has taken three recent notable actions. Specifically, OFCCP (1) will require a contractor to submit a verification of an affirmative action...more
9/9/2021
/ Affirmative Action ,
Biden Administration ,
Compliance ,
Construction Industry ,
Contractor Audits ,
Department of Labor (DOL) ,
EEO-1 ,
Federal Contractors ,
GAO ,
OFCCP ,
OIRA ,
OMB ,
Subcontractors ,
Workers’ Compensation
The U.S. Department of Defense (DoD) has issued a long-awaited interim rule to safeguard unclassified information in the possession of defense contractors by making periodic assessments of a company’s cybersecurity compliance...more
10/5/2020
/ Compliance ,
Controlled Defense Information (CDI) ,
Controlled Unclassified Information (CUI) ,
Cybersecurity ,
Cybersecurity Maturity Model Certification (CMMC) ,
Defense Sector ,
Department of Defense (DOD) ,
Federal Contractors ,
Federal Register ,
Interim Rule ,
Model Contract Clauses ,
NIST ,
Third-Party ,
Verification Requirements
The Office of Management and Budget (OMB) and several federal agencies have issued guidance implementing a provision in the CARES Act that allows government contractors to be reimbursed for paid leave to employees and...more
Businesses that receive government funding under the nearly $2 trillion Coronavirus Aid, Relief, and Economic Security Act (CARES Act) should be mindful of the heightened risks of government investigations of fraud, waste,...more
The U.S. Department of Defense’s (DoD) new cybersecurity verification regime is moving into a new phase, with major implications for contractors.
On January 31, 2020, DoD released version 1.0 of its Cybersecurity Maturity...more
The U.S. Department of Defense (DOD) is forging ahead in its plan to adopt a new framework for cybersecurity, with significant ramifications for all defense contractors, including subcontractors.
On November 8, 2019, DOD...more
As competitors in federal negotiated procurements recognize, post-award debriefings are an important feature of the procurement process. Federal Acquisition Regulation (FAR) 15.506 has long mandated that an unsuccessful...more
The Department of Defense (DoD) issued an interim cybersecurity rule in August 2015 that, among other things, revises the existing Defense Federal Acquisition Regulation Supplement (DFARS) cybersecurity clause and increases...more
10/26/2015
/ Cloud Computing ,
Controlled Unclassified Information (CUI) ,
Cyber Incident Reporting ,
Cyber Threats ,
Cybersecurity ,
Data Protection ,
Data Security ,
Department of Defense (DOD) ,
DFARS ,
Federal Acquisition Regulations (FAR) ,
Federal Contractors ,
Incident Response Plans ,
Interim Rule ,
NIST ,
Reporting Requirements
Companies that contract with the federal government will soon be subject to new rules aimed to stamp out human trafficking (see discussion of some of the existing rules and regulations here and here). The just-released...more
Imagine that your company is a contract holder under a U.S. Army multiple award, indefinite-delivery, indefinite-quantity (IDIQ) contract. The Army issues a request for proposal for a firm, fixed-priced task order, and your...more