On January 20 and 21, 2025, President Trump signed two executive orders focused on Diversity, Equity, and Inclusion (DEI) programs: EO 14151, “Ending Radical and Wasteful Government DEI Programs and Preferencing” and EO 14173, “Ending Illegal Discrimination and Restoring Merit‐Based Opportunity” (the “EOs”). You can read more about the content of these EOs here. While the EOs have broad ranging impacts on federal contractors in a number of areas, this blog focuses on the potential impacts specific to small businesses generally and to large businesses via small business subcontracting. …
Continue Reading Trump DEI Executive Orders – Impacts on Small Businesses and Small Business Subcontracting

The Trump Administration Executive Orders related to Diversity, Equity, and Inclusion (“DEI”), Executive Order 14170 (Reforming the Federal Hiring Process and Restoring Merit to Government Service) and Executive Order 14173 (Ending Illegal Discrimination and Restoring Merit-Based Opportunity) (the “EOs”), have given businesses and other organizations (including universities) much to think about regarding their DEI initiatives. This includes entities that do business with the federal government, entities that do business with state and local governments, and entities with operations outside the United States. As the landscape continues to shift, below are four issues every organization should consider as they perform their…
Continue Reading How Far Do They Reach? Four Issues Entities Should Consider When Analyzing the Trump Administration Executive Orders Related to Diversity, Equity, and Inclusion

Update: On February 22, Maryland District Court Judge Adam Abelson issued a Preliminary Injunction halting the rollout and enforcement of the several provisions in the EO. Relevant here, the PI prohibits the Federal Government from requiring any contractor or grantee to make any certification required by the EO; and prohibits the Federal Government from bringing any False Claims Act enforcement action, or other enforcement action, in connection with either the proposed certification or the nine federal investigations to be proposed by each federal agency. The 63-page opinion addressed both First and Fifth Amendment implications of the EO relying, in part, on…
Continue Reading The Squeeze is the Juice – Utilization of The False Claims Act in the DEI/Government Contracting Executive Order 

The wait is finally over! After more than 14 years of anticipation, the Federal Acquisition Regulation (“FAR”) Proposed Rule on Controlled Unclassified Information (“CUI”) was released on January 15, 2025 and comes as part of the Government’s broader efforts to identify, detect, and respond to ever-evolving threats targeting Federal contractors.
Continue Reading At Long Last – The FAR CUI Rule is Here! 

In the ever-evolving world of cybersecurity, even organizations that meet stringent security standards can be victims of sophisticated cyberattacks. A notable example of this is the December 8, 2024 cybersecurity incident involving the U.S. Department of the Treasury and its third-party cloud service provider, BeyondTrust. This incident underscores some critical lessons for entities (both government agencies and private sector) that rely on third-party cloud service providers (“CSPs”).
Continue Reading Looking Beyond FedRAMP – Lessons from the U.S. Treasury Cybersecurity Incident

On January 8, 2025, the Department of Justice (“DOJ”) published its final rule addressing Executive Order (E.O.) 14117, “Preventing Access to Americans’ Bulk Sensitive Personal Data and United States Government-Related Data by Countries of Concern.” With the final rule, the DOJ National Security Division’s Foreign Investment Review Section (“FIRS”) defines prohibited and restricted data transactions, and outlines trusted data flows for companies with overseas operations involving countries of concern, including IT infrastructure. The general effect of the rule is to close “front door” access to bulk sensitive personal data on U.S. persons and certain U.S.-government-related data. Until now—or rather, April…
Continue Reading Data, Deals, and Diplomacy, Part III: DOJ Issues National Security Final Rule with New Data Compliance Obligations for Transactions Involving Countries of Concern

Over the last few years, the Federal Risk and Authorization Management Program (“FedRAMP”) Program Management Office (“PMO”) has released two draft guidance documents related to defining the applicable boundary for security assessments of cloud service offerings, but final versions were never released. On January 16, 2025, FedRAMP released another draft authorization boundary guidance document (RFC-0004). FedRAMP’s authorization boundary guidance is “the most frequently requested policy update” as it forms the foundation for determining the scope of review for assessment and authorization. The new draft currently is open for public comment through February 17, 2025.
Continue Reading FedRAMP Releases New Draft Authorization Boundary Guidance

In the Fiscal Year 2025 National Defense Authorization Act (“FY25 NDAA”), Congress included some important provisions related to the bid protest process at the U.S. Government Accountability Office (“GAO”). These provisions (1) raise the dollar threshold for task order protests of Department of Defense (“DoD”) procurements and (2) task DoD and GAO with exploring processes to make protesting DoD procurements more difficult.
Continue Reading FY2025 NDAA Increases the Threshold for DoD Task Order Protests and Asks GAO and DoD to Explore Changes to Bid Protest Process

Important Update: On January 28, 2025 the U.S. District Court for the District of Columbia granted an Administrative Stay enjoining OMB from enforcing OMB Memorandum M-25-13 until the Court can hear full arguments, scheduled for February 3. We continue to monitor developments.
Continue Reading ALERT: Trump Administration Issues “Pause” on Federal Grant Spending Effective January 28