Skip to content

DOJ Tightens Cybersecurity Rules for Educators and Contractors

New rules mean colleges, universities, and contractors must step up their cybersecurity. Non-compliance could lead to serious consequences.

In this picture we can see a close view of the identity card. In the front we can see american flag...
In this picture we can see a close view of the identity card. In the front we can see american flag and "Critical Licence" written.

DOJ Tightens Cybersecurity Rules for Educators and Contractors

The U.S. Department of Justice (DOJ) has bolstered its stance on cyber security, with significant changes affecting educational institutions and contractors. The January 2022 National Security Presidential Memorandum 33 (NSPM-33) has introduced enhanced cybersecurity obligations, while the DOJ's Civil Cyber-Fraud Initiative (CCFI) is now utilising the False Claims Act (FCA) for cyber security cases.

The DOJ's Comprehensive Cyber Review, released in July 2022, identified shortcomings in federal cybersecurity standards for contractors. As a result, the CCFI has taken action, recently reaching a settlement with Aerojet Rocketdyne Inc. under the FCA. Meanwhile, colleges, universities, and independent research institutions are now responsible for implementing the NSPM-33 guidance, with specific deadlines set by governing authorities, typically ranging from months to a year following the directive's issuance.

These developments highlight the DOJ's commitment to strengthening cybersecurity across various sectors. Educational institutions and contractors must now adhere to more rigorous standards and ensure compliance with the NSPM-33 directive. The CCFI's use of the FCA serves as a reminder of the potential consequences for non-compliance.

Read also:

Latest