Topic
Cybersecurity Compliance
82 published works
ComplexDiscovery
The April–May Compliance Crunch: A Practitioner’s Calendar for eDiscovery and Information Governance
By Rob Robinson
Editor’s Note: Four compliance deadlines converging in a 31-day window this spring will test the resilience of information governance frameworks across sectors. The EU’s NIS2 Directive hits its first hard…
Byte Back
GSA Joins the CUI Compliance Movement: What Non-Defense Contractors Need to Know
Key point: Historically, civilian‑agency contractors who handled Controlled Unclassified Information (CUI) enjoyed an informal compliance environment, with a requirement to adhere to NIST SP 800‑171 often framed as self‑attestation. That…
Hall Benefits Law Blog
Georgia Tech Settles Cybersecurity Whistleblower Suit for $875K
By Anne Hall
The U.S. Department of Justice (DOJ) has announced that the Georgia Institute of Technology will settle a whistleblower qui tam suit for $875,000. The case is U.S. ex rel. Craig…
The Federal Government Contracts & Procurement Blog
DOJ’s 2025 FCA Statistics – Contractors Check Your Cybersecurity Compliance and Cost or Pricing Data
The U.S. Department of Justice (DOJ) published its 2025 False Claims Act (FCA) statistics on Friday with a record-breaking $6.8 billion in judgments and settlements last fiscal year. This was…
Blue Ocean Law Group Blog
How the False Claims Act [USA] transforms CyberSecurity Non-Compliance Risks into ➲ Fraud against the US Gov
This blog article is a timely warning to all US Federal Government Contractors who have not met cybersecurity requirements under US Federal Government contracts since 2017. It also addresses some…
Data Privacy Dish
Preparing for a CMMC Audit: The System Security Plan
By Eleanor M. Ross, Cassidy Kim, Olivia Bellini
In September, DoD finalized the CMMC Program, along with the accompanying contract clauses, with an effective date of Nov. 10, 2025.
Government Enforcement, Compliance & Investigations Report
Cybersecurity Compliance Under the False Claims Act: DOJ Enforcement, CMMC, and What Contractors Need to Know
By Jonathan Porter, Erik Dullea, Kip Randall, Former Attorney Ruth El
Recent Settlements On July 31, 2025, the DOJ announced that a California-based defense contractor, and its private equity owner Gallant Capital Partners agreed to pay $1.75 million to resolve allegations…
Data Privacy + Cybersecurity Insider
Updates Coming to the CMMC Level 2 Procedural Guide in December: What Contractors and C3PAOs Should Know
By Roma Patel
Last week, we covered the Cybersecurity Maturity Model Certificate (CMMC) Procurement Rule (the Rule), which formalizes cybersecurity as a condition of doing business with the U.S. Department of Defense (DoD).…
Data Privacy + Cybersecurity Insider
Comply to Compete: DoD Finalizes CMMC Rule for Federal Contractors
By Roma Patel
In August 2024, The Department of Defense (DoD) released a proposed amendment to the Defense Acquisition Regulations Supplement (DFARS) – which provides acquisition policies and procedures for the DoD –…
Government Contracts Navigator
This Is Not a Drill: Department of Defense Issues Long-Awaited Final CMMC DFARS Rule
Michael Joseph Montalbano ● After years of drafts and interim measures, the Department of Defense (“DOD”) has issued the final Defense Federal Acquisition Regulation Supplement (“DFARS”) rule implementing the Cybersecurity Maturity…