Épisodes

  • The DFARS CMMC Final Rule is Here!
    Sep 19 2025

    In this episode of “Regulatory Phishing,” government contracts and cybersecurity attorney Eric Crusius discusses the latest rule released by the Department of Defense implementing the Cybersecurity Maturity Model Certification (CMMC) program and the implications and timing of the rule. Eric also discusses what changed from the proposed version of the rule and what is next for the CMMC program.

    Voir plus Voir moins
    12 min
  • Discussing a DOJ Lawsuit Under the Civil-Fraud Initiative
    Oct 17 2024

    In this episode of "Regulatory Phishing," government contracts and litigation attorney Eric Crusius is joined by Holland & Knight attorney Kelsey Hayes to discuss a U.S. Department of Justice (DOJ) lawsuit that was brought under the Civil Cyber-Fraud Initiative. The speakers walk through the meaning of a whistleblower lawsuit, allegations in the DOJ's complaint, the False Claims Act and more.

    Voir plus Voir moins
    11 min
  • Cybersecurity Roundup: Analyzing New and Proposed Rules for Contractors
    Sep 11 2024

    In this episode of "Regulatory Phishing," government contracts and cybersecurity attorney Eric Crusius delves into the latest developments from the Cybersecurity Maturity Model Certification (CMMC) program, National Institute of Standards and Technology (NIST) and Cybersecurity and Infrastructure Security Agency (CISA). Mr. Crusius looks at the implementation timeline for new and proposed regulations from these entities and considers potential implications of the False Claims Act and presidential election.

    Voir plus Voir moins
    15 min
  • The Role of Managed Service Providers with Stuart Itkin
    Nov 21 2023

    In this episode of "Regulatory Phishing," government contracts and cybersecurity attorney Eric Crusius is joined by Stuart Itkin, a senior vice president and the chief marketing officer at NeoSystems. Their conversation covers the overall cybersecurity landscape, especially the Cybersecurity Maturity Model Certification (CMMC) program, and discusses the important role manage service providers (MSPs) play in the ecosystem.

    Voir plus Voir moins
    28 min
  • The When, Where, Why and How of CMMC with Fernando Machado
    Nov 7 2023

    In this episode of “Regulatory Phishing,” Fernando Machado joins government contracts and cybersecurity attorney Eric Crusius for an episode focused on the Cybersecurity Maturity Model Certification (CMMC) program. Mr. Machado is the Managing Principal and Chief Information Security Officer for Cybersec Investments as well as the author of CMMC Simplified. Mr. Crusius and Mr. Machado discuss the current state of the CMMC, how companies can come to terms with this new certification program and strategies for compliance. They also walk through Mr. Machado's book and highlight some key insights into the CMMC program.

    Voir plus Voir moins
    17 min
  • The State of Contractor Cybersecurity with Katie Arrington
    Oct 24 2023

    In this episode of "Regulatory Phishing," former U.S. Department of Defense Chief Information Security Officer (CISO) Katie Arrington joins Hunton government contracts and cybersecurity attorney Eric Crusius to discuss the state of cybersecurity within the defense industrial base, including the rollout of the Cybersecurity Maturity Model Certification (CMMC). The discussion is wide-ranging and offers invaluable insights into what is to come in the months and years ahead.

    Voir plus Voir moins
    57 min
  • Navigating the TikTok Ban: Implications for Government Contractors
    Oct 23 2023

    In this episode of "Regulatory Phishing," Hunton government contracts and cybersecurity attorney Eric Crusius is joined by Jeremy Burkhart, an associate in Holland & Knight's Government Contracts Group. Mr. Crusius and Mr. Burkhart discuss the interim rule issued by the Federal Acquisition Regulation (FAR) Council implementing the statutory ban on the use of ByteDance's TikTok app on federal information technology systems and contracts. They explore the ambiguities in the rule's language and different approaches contractors may take to ensure compliance.

    Voir plus Voir moins
    29 min
  • The Impact of Cybersecurity Compliance on Corporate Transactions
    Oct 22 2023

    In this episode of “Regulatory Phishing," Eric Crusius is joined by David Cole, a partner in Holland & Knight's corporate and securities groups. Mr. Crusius and Mr. Cole discuss the role of cybersecurity compliance in corporate transactions, how lack of compliance can impact the ability of a transaction to close and what parties look at during the due diligence process. Mr. Crusius and Mr. Cole also reminisce about Mr. Cole’s time lugging dozens of boxes through an airport in Costa Rica.

    Voir plus Voir moins
    14 min