BarbriSFCourseDetails

Course Details

This CLE course will provide counsel with updates on the effect of the SolarWinds security breach on U.S. government contracting. The panel will address the cybersecurity policy reforms enacted in 2020 and the Cyberspace Solarium Commission's final recommendations to Congress. The panel will advise on the current requirements for federal contractors working to secure their supply chain's hardware, software, and services.

Faculty

Description

The recent discovery of the extent and breadth of the SolarWinds security breach within U.S. government agencies has been overwhelming. As a result of this and continued known attacks by outside forces, the U.S. is increasingly taking steps to mitigate its supply chain risks concerning hardware, software, and services.

Due to these increased attacks, the U.S. imposed greater limitations on government contractor use of Chinese suppliers. The U.S. also increased oversight of the security controls for contractor networks that store and process the government's controlled unclassified information.

In 2020 Congress enacted the National Defense Authorization Act for Fiscal Year 2021, the largest collective cyber policy reform ever. The majority of implemented policies come from responses to recent attacks, including SolarWinds. Additionally, the Act incorporates numerous recommendations from the Cyberspace Solarium Commission, which released its final recommendations to Congress in 2020.

Listen as our expert panel discusses the current environment of cybersecurity, government contracts, and supply chain risk mitigation. The panel will provide advice on implementing the necessary cybersecurity to continue to win and keep government contracts while protecting the contractor and their customers and helping to support U.S. manufacturing and defense industries.

Outline

  1. SolarWinds breach
  2. New restrictions in Section 841 regarding sources for printed circuit boards
  3. Cyberspace Solarium Commission's Final Report on cyber policy reform
  4. Recent U.S. procurement rules and executive orders addressing domestic content requirements
  5. DoD requirements for assessments for compliance with NIST SP 800-171
  6. Status of the implementation of the Cybersecurity Maturity Model Certification

Benefits

The panel will review these and other important topics:

  • How the SolarWinds breach has impacted government agencies' cybersecurity and security audits
  • What are the new requirements under Section 841 restricting DoD's acquisitions of printed circuit boards from China, Russia, North Korea, and Iran?
  • What are the newest cyber policy reforms from the Cyberspace Solarium Commission's Final Report?
  • What policy changes addressing domestic content requirements are being considered by Congress and the executive branch?