Adding another building block to implementation of the President’s cybersecurity executive order issued in February 2013, the Department of Commerce’s National Institute of Standards and Technology (NIST) released its Preliminary Cybersecurity Framework on October 22, 2013. As discussed in greater detail in the attached Bullet Analysis by David Bodenheimer, Evan Wolff, and Eliot Golding, this framework has major implications not only for companies operating in the various critical infrastructure sectors (e.g., defense industrial base, information technology, banking, energy, chemical, and critical manufacturing), but also for government contractors that may see the framework’s impact upon future revisions to the FAR’s cybersecurity requirements.

Print:
Email this postTweet this postLike this postShare this post on LinkedIn
Photo of Evan D. Wolff Evan D. Wolff

Evan D. Wolff is a partner in Crowell & Moring’s Washington, D.C. office, where he is co-chair of the firm’s Chambers USA-ranked Privacy & Cybersecurity Group and a member of the Government Contracts Group. Evan has a national reputation for his deep technical…

Evan D. Wolff is a partner in Crowell & Moring’s Washington, D.C. office, where he is co-chair of the firm’s Chambers USA-ranked Privacy & Cybersecurity Group and a member of the Government Contracts Group. Evan has a national reputation for his deep technical background and understanding of complex cybersecurity legal and policy issues. Calling upon his experiences as a scientist, program manager, and lawyer, Evan takes an innovative approach to developing blended legal, technical, and governance mechanisms to prepare companies with rapid and comprehensive responses to rapidly evolving cybersecurity risks and threats. Evan has conducted training and incident simulations, developed response plans, led privileged investigations, and advised on hundreds of data breaches where he works closely with forensic investigators. Evan also counsels businesses on both domestic and international privacy compliance matters, including the EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA). He is also a Registered Practitioner under the Cybersecurity Maturity Model Certification (CMMC) framework.