Fundamentals of Cybersecurity and Regulatory Updates Series - Session 4: Preparing for the Future: Breach and AI In this session, we will help contractors navigate the Government's current and future areas of focus in cybersecurity: managing breach and the use of artificial intelligence. We will introduce some of the best practices to implement the cybersecurity requirements in Government contracts, and to assemble an incident response plan to manage breaches if and when they occur. We will conclude the series by talking about AI in the Federal Government, including recent executive orders under the current administration and their effect on the Government's procurement of AI. Learning Objectives: By the end of this session, students will understand how to approach their incident response strategy, and the best practices when experiencing a breach. Students will also be prepared for the future of cybersecurity requirements, and aware of the unique challenges that accompany the procurement and use of AI.

Fundamentals of Cybersecurity and Regulatory Updates Series - Session 3: Supply Chain Management and Cybersecurity Updates In this session, we will identify how to ensure that good cybersecurity hygiene flows through a contractor's supply chain. We will discuss the Defense Contract Management Agency's (DCMA) mandate to examine contractor compliance with cybersecurity requirements as part of its Contractor Purchasing System Reviews (CPSR) and its implications for contractors in the near future. At the end of the session, we will discuss the pair of Proposed Rules issued in October 2023 (addressing "Cyber Threat and Incident Reporting and Information Sharing" and "Standardizing Cybersecurity Requirements for Unclassified Federal Information Systems"), and will explore the implications of those Proposed Rules for contractors. Learning Objectives: By the end of this session, students will understand how to ensure cybersecurity hygiene in their supply chain, and be prepared to proactively address their purchasing procedures in anticipation of DCMA reviews. Students will also gain insight as to the likely next developments in and implications of Federal cybersecurity initiatives, particularly as they relate to non-DoD agencies.

Fundamentals of Cybersecurity and Regulatory Updates Series - Session 2: Understanding DoD Assessment Requirements: -7019, -7020, CMMC, and Beyond In this session, we will explore the presence of existing Department of Defense cybersecurity assessment requirements, including DFARS 252.204-7019, DFARS 252.204-7020, and the development and pending arrival of the Cybersecurity Maturity Model Certification (CMMC). We will provide an detailed examination of the NIST 800-171 assessment methodology required by -7019 and -7020, and highlight some of the key challenges contractors are likely to face as they implement these requirements. We will also provide insight as to the future of CMMC and how contractors can best prepare for the coming obligations. Learning Objectives: By the end of this session, students will be familiar with the basics of the DoD NIST 800-171 assessment requirements and will be able to think critically about how these requirements will apply to and impact their organization. They will be up to date on the developments in CMMC and able to identify key steps that should be taken proactively to ensure compliance and avoid liability.

Fundamentals of Cybersecurity and Regulatory Updates Series - Session 1: Introduction to Cybersecurity In this session, we will define cybersecurity foundations and explain why cybersecurity matters. We will discuss the type of information that must be protected, and the key governing bodies tasked with implementing the patchwork of laws and regulations addressing cybersecurity requirements. We will examine the Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) clauses governing cybersecurity, as well as certain publications of the National Institute of Standards and Technology (NIST), with particular focus on NIST Special Publication (SP) 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations. Learning Objectives: By the end of this session, students will understand the importance of cybersecurity and how it impacts their organization. They will be familiar with the basic laws and regulations governing their cybersecurity compliance obligations, as well as the Federal contract clauses and standards implementing those obligations.

The legislative and regulatory priorities change from one President to another, sometimes dramatically. The government contract area is highly regulated and these changes can have significant impacts on contractors. This update will forecast what contractors should expect from the incoming Administration in the next 4 years. Learning Objectives:  Emerging Legislative Priorities  Early look at impact on contractors

This session will focus on the period from original submission, through the award of the contract (to you of course!), and into the start of the contract. Attendees will start with the best practices for documentation of subcontractor information post submission. They will also learn how to manage subs during any clarifications and/or final proposal revisions. The series will wrap up by covering how to convert teaming agreement workshare into subcontract workshare as well as dealing with changes to the overall scope of the contract from the proposal stage. Learning Objectives: By the end of this session, attendees will be able to:  Create audit files for all subcontractor information  Prepare effectively for clarifications and/or final proposal revisions with subcontractors  Convert teaming agreement workshare into subcontract agreement workshare  Address differences between the actual scope versus the proposed scope

This session will focus on how to respond to the RFP. Attendees will learn the cost/price compliance requirements for any FAR-covered contract. These requirements often surprise companies who have primarily worked with the government through subcontracts. The biggest takeaway might just be learning "because that's the way we've always done it" is not actually the right answer to compliance. Attendees will also learn the challenges facing a prime regarding communicating, requesting, and receiving pricing information from subcontractors. They will also learn industry tips for understanding the RFP requirements and asking questions regarding the RFP for clarification and/or changes. Finally, attendees will discover that subcontractor cost/price submission often contain discrepancies from RFP or prime instructions - but that there are ways to minimize this risk. Learning Objectives: By the end of this session, attendees will be able to:  Know the FAR, and supplemental FAR, requirements for all prime cost/price volumes  Identify RFP-specific requirements for prime cost/price volumes  Develop a repeatable pricing process for responding to proposals as a prime contractor  Learn best practices to optimize communicating, requesting, and receiving information from subcontractors  Ensure subcontractor submissions are compliant and complete, even if they are provided as a sealed package to the government

This session focuses on the period starting with the identification of the opportunity through the release of the RFP by the government. This stage is critical because it establishes the opportunity, the team, and the capture strategy. For companies new to the role of prime, there is often a lack of awareness of the many actions that can be taken during this time to set up your team for success. In this session, we will introduce attendees to the concepts of shaping the RFP, establishing workshare for teammates, and gathering competitive intelligence. Learning Objectives: By the end of this session, attendees will be able to:  Learn how to help shape the RFP to maximize the value of your technical solution and your team  Understand the best practices for negotiating workshare on teaming agreements  Recognize how to gather competitive intelligence from your teaming partners

This session focuses on the prevailing wage and apprenticeship requirements reflected in the IRS IRA tax credit. Commercial companies with limited or no experience receiving federal funds (i.e., have never operated as a government contractor) are being faced with strict rules that govern employee pay and benefits. These rules require increased process controls and record retention procedures. This session both outlines the requirements associated with the prevailing wage and apprenticeship programs and also reviews the differences between these requirements and the Davis Bacon and Related Act regulation. Learning Objectives: By the end of this session, attendees will be able to:  Know the basic requirements associated with prevailing wage and apprenticeship programs  Understand the differences between prevailing wage / apprenticeship programs and the Davis Bacon and Related Acts  Learn how to establish compliant practices utilizing your Company's people, processes, and technology  Recognize how to monitor and track ongoing compliance with the requirements, including techniques for monitoring subcontractor compliance

This session will be the second session, held in two parts and focuses on strategy associated with complying with the federal labor regulations. Many government contractors new to these regulations do not realize it requires multiple functions of the business (i.e., HR, Finance, Contracts) to work together to achieve and maintain compliance. This session will outline how these functional groups can leverage each other's expertise to lessen the administrative burden often associated with these federal labor regulations.  Know how to determine coverage at the contract and employee level  Recognize how to monitor and track ongoing compliance with the regulations, including techniques for monitoring subcontractor compliance