Events

Public Contracting Institute

03.13.2019

Time: 

11:30 am - 1:00 pm EST

About:

This series, taught by two experts in the field, will walk participants through the most important issues facing government contractors as they navigate the fast-changing issues of cybersecurity. Starting with a survey of the current threats confronting all companies in the cyber world, and ending with a session about how to deal with a breach of your systems, this series will also delve into the new government contracting rules relating to cybersecurity, as well as the new twists on existing technology and privacy laws in light of today’s cyber events.

Agenda:

1. Introduction and Overview
   1. The threat (including international and APT, government investigations)
   2. The data
   3. The law
   4. Agency-specific regulations for protecting unclassified information
   5. FAR Basic Safeguarding Rule
   6. NARA CUI rule
   7. DFARS Provision 
2. Protecting Sensitive Information
   1. The Privacy Act and PII
      1. FAR Privacy Act Clause
      2. Privacy Act Training Rule (FAR Case 2010-013)
3. Regulations and Standards
   1. NIST
      1. NIST 800-53
      2. NIST 800-171
4. The Cloud and FedRAMP  
   1. Subcontractor/supplier considerations (e.g., DFARS provision)
5. Confronting the threat – sharing information and spreading the risk
   1. Insider Threat
   2. Cyber insurance
   3. Information sharing
   4. Government response – Executive Order; potential legislation
6. Breach Investigation and Response
   1. Before a breach occurs
   2. Immediate response
   3. Relating to law enforcement
   4. Relating to customers and the public