| | |

Defense Contractor Settles False Claims Act Suit

The feds sued MORSECorp under the False Claims Act alleging that they lied about their NIST 800-171/CMMC compliance, posted false SPRS scores and generally inflated their cybersecurity readiness. The DoJ is rumored to be working on anywhere from dozens to hundreds of these cases. They have an entire division called the Cyber Civil Fraud Initiative…

New FAR Cybersecurity Rule Affects All Federal Government Contractors

This week the Feds released a draft of a new cybersecurity rule that will, in a year or so, replace the decades old current totally inadequate cybersecurity rule (FAR 52.204-7012). This rule is closely aligned with what DoD has been doing in creating CMMC over the last four years except it will apply to millions…