Content type
Update
43 items across the GovConCyber reference layer carry this topic.
Breach of Contract (blog)
- Meta's $1.4B Biometric Settlement: Why Contractors Using Face and Fingerprint Tech Should Care
- DFARS 252.204-7012: What Contractors Need to Know in 2026
- DoD Expands FOCI Reviews Beyond Cleared Contractors: What the New Instruction Means
- FedRAMP's 2026 Consolidated Rules Are Coming This Month: What Cloud Contractors Should Do Now
- Termination for Convenience and the Cost of Proving Your Claim: Value Recovery Holding v. United States
- When the Clock Runs Out: The IBM ASBCA Case and the Contract Disputes Act Statute of Limitations
- $11.3M Cyber-Fraud Settlement: What the Guidehouse and Nan McKay Case Teaches Contractors
- CISA's New Patching Directive (BOD 26-04) Rewrites the Vulnerability Clock — and Contractors Should Read It Too
- Termination, Jurisdiction, and a $311K Credit-Monitoring Claim: The Boersma Travel Appeal
- Following the Money: What the FY2023 Federal Cyber Budget Signals for Contractors
- The DOJ's Civil Cyber-Fraud Initiative: Enforcement Cases and What They Mean
- NIST SP 800-171 Rev 3: What Changed and What to Do
- OMB Rewrites the FedRAMP Rulebook: The First Major Cloud Overhaul Since 2011
- State Cybersecurity Laws Government Contractors Often Overlook
- DoD's Cyber-Harmonization Deadline Has Passed: What NDAA Section 866 Means for Defense Contractors
- CISA's Software Acquisition Guide: A Plain-English Look for Contractors
- Three Cyber Bills Clear a Senate Panel: Reg Harmonization, Health Security, and Workforce
- CIRCIA's Reporting Clocks Are Coming: The Third Cyber-Reporting Clock Contractors Can't Ignore
- Trump's AI Executive Order: What the Frontier-Model Review and Coming CISA Directives Mean for Contractors
- Three State AGs, One $4.5M Breach Settlement: The Enzo Biochem Lesson
- The Federal Push on Healthcare Cybersecurity: What Health-Sector Contractors Should Know
- "CMMC for AI": What the NDAA's New AI Security Framework Means for Defense Contractors
- Two Weeks Offline: Incident-Response Lessons from the Kansas Court Cyberattack
- NIST Just Finalized 800-172 Rev 3 — Here's Why CMMC Level 3 Contractors Shouldn't Panic Yet
- Where Did DFARS 7019 and 7020 Go? The FAR Overhaul's Quiet Cybersecurity Reshuffle
- Default Terminations Need Proof: Adapt Consulting v. GSA
- Four Hours to a Full Breach: The Aerojet Rocketdyne $9M Cyber-Fraud Settlement
- A False SPRS Score and a 'Fictitious' Network: The DOJ's Georgia Tech Cyber-Fraud Suit
- The Supreme Court Narrows the CFAA: What Van Buren Means for "Exceeds Authorized Access"
- Your Phone Is Not Your Pocket: The Fourth Amendment in the Digital Age
- Scraping, the CFAA, and the Fine Print: How hiQ v. LinkedIn Actually Ended
- Do Data-Breach Victims Have Standing to Sue? TransUnion, OPM, and the Risk-of-Harm Question
- When Your Breach Report Becomes Evidence: The Capital One Forensic-Privilege Ruling
- Foreign Ownership and Due Process: What Ralls v. CFIUS Established
- Hacking the Hackers' Vendor: WhatsApp v. NSO Group and the CFAA's Reach
- Reading the Banner: How CUI Marking and Handling Actually Work Under 32 CFR Part 2002
- CUI vs. FCI: The Distinction That Sets Your Cybersecurity Burden
- When a 'Security Statement' Becomes Securities Fraud: The SolarWinds Ruling
- FAR 52.204-21: The 15 Basic Safeguards Every Federal Contractor Has to Meet
- The CISA Cross-Sector Cybersecurity Performance Goals: A Plain-English Baseline for Contractors
- What Is CMMC 2.0 and Who Does It Apply To?
- CISA Reopened the CIRCIA Comment Window — and the Defense Industrial Base Has a Seat on June 18
- A New Senate Bill Wants to Drag Critical-Infrastructure Cyber Plans Into the AI Era — Including the Defense Industrial Base