Bring the Analysis to Your Audience
GovConCyber explains how cybersecurity requirements actually attach to federal contracts — in plain language, for executives, contracts teams, compliance professionals, and counsel. Conference organizers, bar associations, industry and trade groups, chambers, and APEX Accelerator (formerly PTAC) programs can bring that explanation directly to their members.
About the Speaker
Brandon Hancock founded GovConCyber after combining legal training, government-contracts experience, and cybersecurity-compliance work with roughly six years of prior U.S. Army service as a human intelligence collector, followed by two years instructing human-intelligence collection in the Army Reserve. His intelligence background gave him firsthand experience with the federal information lifecycle — how sensitive information is collected, evaluated, reported, protected, classified, disseminated, and controlled — not as paperwork, but as legal, operational, and security responsibilities with real mission consequences. That perspective shapes a practical, plain-language approach to contractor cybersecurity, especially where CUI, DFARS clauses, CMMC, incident reporting, and information-handling obligations intersect. At the George Washington University Law School he interned with the government-procurement groups at DHS and GSA and in the National Courts Section of DOJ, was the 2022–23 Coalition for Government Procurement Scholar, and became the first GW Law student to earn a J.D. with concentrations in both Cybersecurity Law and Government Procurement Law.
Signature Topics
- CMMC Is a Contract Issue, Not Just a Cybersecurity Project. How CMMC fits the broader government-contracts ecosystem — its relationship to DFARS 252.204-7012, NIST SP 800-171, CUI, flow-downs, award eligibility, and contractor representations — and how to prioritize it without losing sight of adjacent obligations.
- Understanding Protected Information in Practice. Federal contracts protect more than CUI. What the categories are, how marking and handling actually work, why contract context matters, and how to build practical processes without over-marking everything or missing real obligations.
- Cybersecurity Requirements Beyond CMMC. The broader requirement landscape — FAR safeguarding, DFARS clauses, agency supplements, FedRAMP and cloud, incident reporting, state requirements, and enforcement risk.
- Cyber Compliance and the False Claims Act. How cybersecurity representations become contract, payment, and enforcement issues, what the Civil Cyber-Fraud Initiative teaches, and how documentation supports accurate representations.
- The Contractor Cyber Compliance File. A workshop on the documents, decisions, assessments, and evidence a contractor should maintain — what to keep, who should own it, and how to review it over time.
Formats
Keynote · webinar · CLE · panel · workshop · internal leadership briefing · podcast or interview.
Audience Fit
Executives and owners, government-contracting professionals, compliance teams, procurement attorneys, APEX Accelerator and small-business audiences, and industry associations.
Invite GovConCyber
Contact us or email business@govconcyber.info with your organization, event date, audience, preferred format, and topic, and we'll follow up.
Sessions are educational. They provide general information about government contractor cybersecurity requirements and are not legal advice.