May 2023

Photo of Steve McBradyPhoto of Christian CurranPhoto of Charles BaekPhoto of William B. O'ReillyPhoto of Issac SchabesPhoto of David H. Favre

On April 26, the Federal Circuit issued a decision in Crawford v. United States (a C&M case), holding that a U.S. Army combat veteran is entitled to recover his attorneys’ fees arising from a dispute related to obtaining medical retirement benefits earned during his service.  In the underlying dispute on remand to the Army Board

Photo of Jason CrawfordPhoto of Brian Tully McLaughlinPhoto of Agustin D. Orozco

In this episode, Jason Crawford, Brian Tully McLaughlin, and Agustin Orozco explore the issues before the Supreme Court in two consolidated cases involving the False Claims Act. The hosts discuss the April 18 oral argument in Schutte/Proctor where the question before the Justices is whether a defendant’s subjective knowledge about whether its conduct was legal

Photo of Kris D. MeadePhoto of Peter J. EyrePhoto of Thomas P. GiesPhoto of Rina Gashaw

On May 1, 2023, the Biden Administration announced its plan to issue an Executive Order in the coming days to rescind the existing executive order that imposes COVID vaccine requirements and safety protocols on federal contractors.  Specifically, Executive Order 14042 on Ensuring Adequate COVID Safety Protocols for Federal Contractors will be rescinded effective May 12

Photo of Michael G. Gruden, CIPP/GPhoto of Jacob Harrison

On April 28, 2023 the Department of Homeland Security (DHS) Cybersecurity and Infrastructure Security Agency (CISA) published its long-awaited draft Secure Software Development Self-Attestation Form.  The form is a key component of the mandatory software supply chain security requirements introduced by last fall in Office of Management and Budget (OMB) Memorandum M-22-18. The Form requires certain software developers to attest to specific security elements of their software development life cycle (SDLC) and their development environment. 

Background

In May 2021, the Biden Administration issued Executive Order (EO) 14028, “Improving the Nation’s Cybersecurity.”  The EO directed the federal government to prioritize software supply chain security, including by creating secure software development practices for federal software acquisitions.  Pursuant to the EO, in February 2022 the National Institute of Standards and Technology (NIST) published NIST Special Publication 800-­218 and the NIST Software Supply Chain Security Guidance (collectively, the NIST Secure Software Development Framework, or NIST SSDF), providing software development-focused security controls and best practices for federal agencies and their commercial software partners. 

OMB Memorandum M-22-18, published on September 14, 2022, requires companies providing software to the federal government to complete the self-attestation form to certify that they comply with the NIST SSDF controls and guidance whenever third-party software is used on government information systems or otherwise affects government information.  Continue Reading CISA Releases Draft Secure Software Development Self-Attestation Form