Review government contract security regulations and gain tips to help through common compliance scenarios.
Most companies of any size sell products and services to the federal government directly or indirectly through the supply chain. The federal government is increasingly placing cybersecurity compliance and cyber incident notification requirements on these companies. While many companies think they are immune from these existing and forthcoming requirements, the opposite is true: the federal government’s position is that they apply broadly.
This program will explore the current cybersecurity requirements and how they apply to various companies depending on what they sell and who they sell it to (products or services/which agency/as a subcontractor or supplier). We will also review forthcoming requirements and how they will change the cybersecurity compliance landscape. We will not just review the regulations, but also provide practical pointers and tips to help companies through common compliance scenarios.
Learning Objectives
- You will be able to explain federal cybersecurity compliance regulations and the impact on companies selling products and services directly or indirectly to the federal government.
- You will be able to identify key cybersecurity threats and regulations.
- You will be able to review forthcoming requirements and how they will change the cybersecurity compliance landscape.
- You will be able to discuss practical pointers and tips to help companies through common compliance scenarios
Agenda
Introduction
- Overview of the Topic
- Cybersecurity Threats and Methods
- How Cybersecurity Regulations Are Born
- Types of Information
- What Is Controlled Unclassified Information (CUI) and What Is Federal Contract Information (FCI)?
Government-Wide Requirements
- Regulations Impacting the Protection of FCI
- Forthcoming Requirements Impacting the Protection of CUI
- Forthcoming Incident Notification Requirements Under the Federal Acquisition Regulation (FAR) and Cybersecurity and Infrastructure Security Agency (CISA)
- Practical Impacts and Compliance Tips
Department of Defense Requirements
- Existing Requirements Requiring the Protection of CUI
- Existing Requirements Requiring Incident Response Notifications
- The Cybersecurity Maturity Model Certification Program (What It Means and When Its Coming)
- Practical Impacts and Compliance Tips
Civilian Agency Requirements
- Regulations for Companies Doing Business With the Department of Homeland Security (DHS)
- New DHS Best Value Considerations for Cybersecurity Compliance
- Regulations for Companies Doing Business With the Department of Veterans Affairs
- Practical Impacts and Compliance Tips
Cross-Border Considerations
- How International Companies Are Impacted
- What Europe Is Doing and What It Means for Us Companies
Speakers
Eric Crusius,
Holland & Knight LLP- Partner at Holland & Knight LLP in Tysons, VA
- Practice focuses his practice on a wide range of government contract matters, including bid protests, claims and disputes, compliance issues and sub-prime issues
- Extensive experience in government contract litigation, including successfully prosecuting and intervening in numerous bid protests before the U.S. Court of Federal Claims, U.S. Government Accountability Office, boards of contract appeals and other federal agencies
- Counsels clients regarding the Service Contract Act (SCA) and other labor issues, domestic preferences, export controls, cybersecurity, subcontracting and teaming agreements, and compliance with the Federal Acquisition Regulation (FAR) and other agency regulatory requirements such as the Defense Federal Acquisition Supplement (DFARS)
- Recognized industry thought leader with having appeared on Government Matters, Federal News Network, and featured at conferences to provide insight to the greater contractor community
- Well-versed in developing strategies for and managing all stages of complex multimillion-dollar litigations from commencement through trial
- J.D. degree, Hofstra University School of Law; B.A. degree in Social Science, with honors, Hofstra University
Who Should Attend
This live webinar is designed for contract managers, purchasing and procurement professionals, attorneys, project managers, city officials, government contractors, senior buyers, and controllers.
