Log in or register
Share on LinkedInShare on LinkedIn

ARTICLE · 16 SEPTEMBER 2021

Moving To Zero Trust – CISA And OMB Seek Comments On Zero Trust Publications And Cloud Security Technical Reference Architecture Under Cybersecurity Executive Order

Sheppard
Sheppard
Contributor
Sheppard

Sheppard

Businesses turn to Sheppard to deliver sophisticated counsel to help clients move ahead. With more...

View firm profile
Explore more from Sheppard

Below we discuss key provisions of each, reminding contractors to stay vigilant of the ever-evolving cybersecurity regulations in the U.S.

United StatesGovernment, Public Sector
Townsend Bourne
Townsend Bourne
Lillia Damalouji
Lillia Damalouji
Author LinkedIn connections

The Office of Management and Budget ("OMB") released its draft Federal Zero Trust Strategy under President Biden's Executive Order on Improving the Nation's Cybersecurity (No. 14028) (discussed previously here and here) and is seeking comments on the draft by September 21, 2021. Relatedly, the Cybersecurity and Infrastructure Security Agency ("CISA") is seeking comments on its recently released Zero Trust Maturity Model and Cloud Security Technical Reference Architecture ("TRA"), both aimed at moving the United States government toward a zero trust architecture. The public comment period for CISA's materials currently is open and scheduled to conclude on October 1, 2021. Below we discuss key provisions of each, reminding contractors to stay vigilant of the ever-evolving cybersecurity regulations in the U.S.

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

The content of this article is intended to provide a general guide to the subject matter. Specialist advice should be sought about your specific circumstances.

View source

Related Articles

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

See more popular content from

Article

SBA Extends Deadline For Comments On Historic Overhaul Of Size Standards

The Small Business Administration has extended the comment period for two proposed rules that could dramatically reshape federal government contracting by significantly expanding the pool of entities eligible for small business set-aside procurements. With some size standard thresholds proposed to increase as much as tenfold, these changes would fundamentally alter the makeup of the small business contractor base.
United StatesGovernment, Public Sector
Crowell & Moring LLP
Crowell & Moring LLP
Article

D.C. Circuit Rules Pentagon Can Exclude Anthropic From Supply Chain

The U.S. Court of Appeals for the D.C. Circuit has ruled that the Department of War can exclude Anthropic from its supply chain under the Federal Acquisition Supply Chain Security Act, finding that the AI company's ability to manipulate its Claude model creates a supply chain risk. This decision contrasts with an earlier California district court ruling that blocked a similar designation under a different statute, creating a complex legal landscape for AI providers and government contractors.
United StatesGovernment, Public Sector
Taft, Stettinius & Hollister LLP
Taft, Stettinius & Hollister LLP
Article

FMCSA MOTUS Implementation – Common Motor Carrier Concerns

The Federal Motor Carrier Safety Administration launched MOTUS in May 2026, replacing legacy registration platforms and fundamentally changing how motor carriers, freight brokers, and surface freight forwarders handle operating authority applications and license maintenance. While designed to combat fraud and streamline registration activities, the transition has created significant user experience challenges that threaten operating authority status and customer relationships for transportation service prov
United StatesGovernment, Public Sector
Benesch, Friedlander, Coplan & Aronoff LLP
Benesch, Friedlander, Coplan & Aronoff LLP
Article

BIOSECURE Act Update: Court Enjoins WuXi AppTec’s 1260H Designation, but Strategic and Compliance Clocks Keep Running

The U.S. District Court for the District of Columbia has preliminarily enjoined the Department of War from enforcing WuXi AppTec's Section 1260H designation, finding the agency misread its evidence on state and military affiliation. However, this ruling does not close alternative pathways to biotechnology company of concern (BCC) designation under the BIOSECURE Act, and earlier supply-chain restrictions continue to drive near-term compliance decisions with a critical June 30, 2027 deadline for sub-tier supp
United StatesGovernment, Public Sector
Greenberg Traurig
Greenberg Traurig
Article

Massachusetts’ 2026 Ballot Questions: What Clients Need To Know

Massachusetts voters will decide nine statewide ballot questions in November 2026 that could fundamentally reshape the state's legal, regulatory, and fiscal landscape. These measures address government transparency, election reforms, housing development, marijuana regulation, firearms laws, and state revenue limits, with implications extending far beyond Election Day to implementation, regulation, and ongoing policy debates.
United StatesGovernment, Public Sector
Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.
Mintz, Levin, Cohn, Ferris, Glovsky and Popeo, P.C.
Article

Weekly Sanctions Update: September 14, 2026

The Treasury Department intensifies economic pressure on Iran through Operation Economic Outcast, suspending aviation licenses and sanctioning dozens of entities while implementing a presumption of denial for Iran-related transactions. Meanwhile, new enforcement actions target Chinese cybercrime platforms, Ecuadorian terrorist organizations, and Israeli settlers, as Congress considers comprehensive Russia-Iran sanctions legislation.
GlobalGovernment, Public Sector
Steptoe LLP
Steptoe LLP
Article

The Analysts' Brief: The US-Russia Diesel Deal

The Trump administration's October 2025 diesel deal with Russia promises temporary sanctions relief to ease US fuel prices before midterm elections, but analysts question whether the limited supply will meaningfully impact global markets or represent a lasting shift in US-Russia relations. The agreement has already strained transatlantic partnerships and US-Ukraine cooperation while raising compliance uncertainties for businesses navigating evolving sanctions regimes.
GlobalGovernment, Public Sector
Steptoe LLP
Steptoe LLP
Article

FDA Balances Peptide Policy With Enforcement Against Unlawful Peptide Sellers

Over the past year, industry has had a front row seat as the Food and Drug Administration (“FDA” or the “Agency”) decides just how much leeway it wants to afford the manufacture, marketing, and sale of peptide products, and just where it wants to draw the line. Despite the recent decision of FDA’s Pharmacy Compounding Advisory Committee (“PCAC”) to recommend a number of peptides for inclusion on the 503A bulks list process — a move that represents a potentially more permissive stance toward peptide regulation, at least in terms of what can and cannot be compounded under 503A...
United StatesFood, Drugs, Healthcare, Life Sciences
Sheppard
Sheppard
Article

The Ninth Circuit Affirms Dismissal Of DMCA CMI Removal Claim Against AI Code Generator – Output Is A New Work Not A Copy Of Training Data

There was a significant ruling in the Doe v. Github case involving training of AI code generator models on open source. The United States Court of Appeals for The Ninth Circuit affirmed the district court ruling dismissing part of an action brought under the Digital Millennium Copyright Act (“DMCA”) by programmers against GitHub, Inc., and other defendants. The issues centered on whether defendants removed copyright management information (CMI) from content used to train the AI code generator models.
United StatesIntellectual Property
Sheppard
Sheppard
Article

Massachusetts Issues Guidance On Data Center Development Under Executive Order 658

Massachusetts Governor Maura Healey has issued Executive Order 658, establishing comprehensive permitting and regulatory standards for data centers exceeding 25 MW of peak electricity demand. The Order mandates community benefits agreements, clean energy procurement protocols, and coordination across multiple state agencies to ensure responsible development that protects ratepayers, communities, and the environment. This action positions Massachusetts alongside other states implementing stricter oversight o
United StatesEnergy and Natural Resources
Sheppard
Sheppard
Article

Fintech Agrees To Acquire National Bank Partner For $590 Million

A publicly traded fintech company has announced a $590 million acquisition of its longtime national bank partner, marking a strategic shift from the traditional bank-partnership model to direct ownership of a national bank charter. The transaction, expected to close in the first half of 2027 pending regulatory approvals, would make the fintech a bank holding company while consolidating its banking activities and eliminating certain sponsor-bank fees. This deal represents a faster alternative to pursuing a d
United StatesFinance and Banking
Sheppard
Sheppard