Statute
DFARS
158 published works
Byte Back
OIRA Completes its Review of the DFARS CMMC Proposed Rule: Is Your Company CMMC Certified, or Will It be Excluded from Future Awards?
By Erik Dullea, Heidi Salow, Luis Hidalgo
Key point: CMMC took another step towards reality, with OIRA clearing for publication the DFARS proposed rule that will add CMMC requirements as a condition of award for new contracts.…
Subject to Inquiry
California Defense Contractor and Private Equity Firm Agree to Pay $1.75M to Resolve False Claims Act Liability Relating to Voluntary Self-Disclosure of Cybersecurity Violations
By Edwin O. Childs, Michael J. Podberesky, Abram J. Pafford, Brett Barnett, Jack White, Andrew Konia, Jason M. Vespoli, John Sullivan
On July 31, 2025, the U.S. Department of Justice (“DOJ”) announced a $1.75 million False Claims Act (“FCA”) settlement with Aero Turbine Inc. (“Aero Turbine”), a California-based defense contractor, and…
Federal Construction Contracting Blog
Cybersecurity Enforcement: The More Things Change, The More They Stay the Same
Despite a change in administrations, the government’s vigilance and enforcement of cybersecurity requirements have not missed a beat. On March 14, 2025, MORSECORP, Inc. of Cambridge, MA resolved allegations that…
Government Contracts Legal Forum
Final DOD Rule Codifies 20-Year SBIR Data Protection Period and Other SBIR Program Protections While Punting Potential Changes To Marking Requirements
By Michael Samuels, Jonathan M. Baker
On December 17, 2024, the Department of Defense (DOD) published a final rule amending the Defense Federal Acquisition Regulation Supplement (DFARS) to implement the data rights portions of the Small Business Innovation Research…
Government Contracts Featured Insights
Protesting DOD’s Use of LPTA Source Selection Criteria
In a lowest price technically acceptable (LPTA) source selection, the procuring agency evaluates the non-price factors for technical acceptability, and the offeror with a technically acceptable proposal with the lowest…
GovCon & Trade
DoD Announces Cybersecurity Maturity Model Certification 2.0 Final Rule (Finally!)
By Richard Arnholt, Todd Overman
After numerous fits and starts, on October 14, the Department of Defense (DoD) published a final rule implementing the Cybersecurity Maturity Model Certification (CMMC) program. Borne from documented deficiencies in…
GovCon & Trade
Webinar | CMMC is Here (Finally!): What Contractors Should Know
Join us for a webinar on navigating the DoD's new CMMC compliance requirements, implementation timeline, and key cybersecurity controls contractors need to meet eligibility for contract awards. On October 14,…
Privacy World
The Trade Practitioner Blog Features Post on Key Takeaways from the Proposed August 2024 DFARS Rule
SPB’s The Trade Practitioner blog recently featured a piece on the newly proposed amendments to the Defense Federal Acquisition Regulation Supplement (DFARS). Check out the full post for an in-depth…
Data Protection Report
Department of Defense proposes requirements for assessing contractor cybersecurity
By Dan Pepper (US), Gerar Mazarakis (US)
Background On August 15, 2024, the Department of Defense (DoD) proposed amending the Defense Federal Acquisition Regulation Supplement (DFARS) to evaluate contractor cybersecurity (Cybersecurity Assessment Proposed Rule). Contractors already need…
The Trade Practitioner
DoD Advances CMMC: Key Takeaways from the Proposed August 2024 DFARS Rule
On August 15, 2024, the US Department of Defense (DoD) published a proposed rule to amend the Defense Federal Acquisition Regulation Supplement (DFARS) in order to implement the Cybersecurity Maturity…