Topic
Cybersecurity Certification
41 published works
Global Policy Watch
European Commission Proposes Cybersecurity Act 2: New EU Supply Chain Rules and Certification Reforms
By Mark Young, Dan Cooper, Paul Maynard, David Brazil, Anna Sophia Oberschelp de Meneses
On 20 January 2026, the European Commission published a proposal for a Regulation to update and replace the Cybersecurity Act (Regulation 2019/881). The proposal—known as the Cybersecurity Act 2 (CSA2)—forms…
Inside Privacy
European Commission Proposes Cybersecurity Act 2: New EU Supply Chain Rules and Certification Reforms
By Mark Young, Dan Cooper, Paul Maynard, Anna Sophia Oberschelp de Meneses, David Brazil
On 20 January 2026, the European Commission published a proposal for a Regulation to update and replace the Cybersecurity Act (Regulation 2019/881). The proposal—known as the Cybersecurity Act 2 (CSA2)—forms…
Global Policy Watch
How Will DoW Determine Which Level of CMMC Applies to My Agreement?
By Susan B. Cassidy, Ashden Fein, Robert Huffman, Ryan Burnette, Krissy Chapman
Now that the final Cybersecurity Maturity Model Certification (CMMC) Program and Procurement Rules have been issued by the Department of War (DoW) (see our CMMC Toolkit for in-depth analysis of…
Inside Government Contracts
Cybersecurity Maturity Model Certification (CMMC) Program Procurement Final Rule Announced
By Susan B. Cassidy, Ashden Fein, Robert Huffman, Ryan Burnette, Krissy Chapman
This blog post discusses the Department of Defense’s (“DoD”) new cybersecurity rule that imposes certain cybersecurity requirements on relevant DoD contractors and subcontractors. The post will be of interest to…
Privacy and Cybersecurity
European Commission consults on review of Cybersecurity Act
By Anna Carrier (BE), Simon Lovegrove (UK)
On 11 April 2025 the European Commission (“the Commission”) launched a public consultation on the review of Regulation (EU) 2019/881 on the European Union Agency for Cybersecurity (ENISA) and on…
Eye On Privacy
Insurance Cybersecurity Certifications: An (Updated) State Roundup
By Liisa Thomas, Kathryn Smith, James O'Reilly*
Over half of US states require annual compliance certifications from insurance providers. While the filing time frames for this year draw to a close, companies may want to keep them…
Government Contracts Law
A Standard on Many Levels: A Look at CMMC 2.0 in Final
By Alex Major, Philip Lee
Over the course of the past few years, gallons of ink have been spilled addressing the seemingly ever-pending US Department of Defense’s (DoD) Cybersecurity Maturity Model Certification (CMMC) Program. After…
Data Privacy Dish
DoD Publishes Final CMMC Program Rule
By Eleanor M. Ross, Cassidy Kim, Olivia Bellini
On Oct. 14, 2024, the Department of Defense (DoD) published the final rule that would implement the Cybersecurity Maturity Model Certification 2.0 (CMMC) Program under 32 CFR Part 170 (Final Rule) to…
Inside Government Contracts
Cybersecurity Maturity Model Certification (CMMC) Program Final Rule Announced
By Robert Huffman, Susan B. Cassidy, Ashden Fein, Ryan Burnette, Darby Rourick
On October 11, 2024, the U.S. Department of Defense (“DoD”) released an unpublished version of the Cybersecurity Maturity Model Certification (“CMMC”) Program Rule. The final rule will be published in…
Taft Privacy & Data Security Insights
Is It Still CMMC 2.0? DoD Clarifies the Forthcoming Cybersecurity Standard
On Aug. 15, the DoD issued another proposed rule regarding the forthcoming Cybersecurity Maturity Model Certification (CMMC) standard. As part of the release, the DoD proposed some additional verbiage for the DFARS…