On October 31, 2019, President Trump signed Executive Order (EO) 13897 – “Improving Federal Contractor Operations by Revoking Executive Order 13495.” Taking effect immediately, EO 13897 revokes EO 13495 previously issued by the Obama administration in January 2009. EO 13495, titled “Nondisplacement of Qualified Workers Under Service Contracts,” required successor contractors to an expired service contract to offer a right of first refusal of employment to those “qualified” employees from the predecessor contract if the follow-on contract is awarded for the same service, at the same location.
Continue Reading
Insight on DoD’s Cybersecurity Plan
As the Department of Defense (DoD) pushes to overhaul cybersecurity requirements with a new Cybersecurity Maturity Model Certification (CMMC) program to be implemented in the fall of 2020, I recently provided insights for an article in Law360 that highlighted some potential challenges the quick rollout and still-unanswered questions could present. Contractors generally welcome the unified and modernized approach to cybersecurity, but because there are many questions left unanswered since the initial drafts released in May and in September, there are concerns among some that the perceived rush is creating undue stress and confusion.
As a result, the September draft of the CMMC program received a large volume of public comments, which Todd noted was unusual given the limited time available for comment. For solutions the DOD could address in the final rule, I suggested the Department ensure minimum cybersecurity levels are included in contracts as pass-fail threshold requirements, rather than as subjective assessments that potentially open up new grounds for bid protests.
How Do Mergers & Acquisitions Impact Pending Bids?
Given the continued high volume of mergers and acquisitions (M&A) transactions in the federal marketplace, buyers and sellers need to be aware of the developing body of case law at Government Accountability Office (GAO) and Court of Federal Claims (COFC) regarding how acquisitions are impacting pending bids and the steps that parties can take to protect those bids in certain situations.
This post will highlight recent cases and provide practical guidance on diligence, deal timing and communications with government customers regarding transactions. Additionally, this post will outline bid protest decisions involving asset deals and corporate reorganizations, and their impact on pending bids.
Software Developer Acquiescence Dooms Bid for Copyright Infringement against Navy
A recent decision by the U.S. Court of Federal Claims in Bitmanagement Software GMBH vs. The United States determined the United States was not liable for copyright infringement because, based on the interactions between the parties, the Navy was authorized to copy Bitmanagement’s software on 350,000 computers. Bitmanagement is a German company that develops software for rendering three-dimensional graphics and one of their primary products is a three-dimensional renderer named BS Contact Geo.
Background: Floating Software Licenses Led to Copyright Infringement Allegations
In 2006, the Navy was developing a software application called SPIDERS 3D that provides a virtual reality environment for engineers and technicians to view and optimize configurations of Navy installations. During the development of this application, the Navy realized a need for the inclusion of a three-dimensional visualization software within SPIDERS 3D. To fill this need, the Navy procured BS Contact Geo on three separate occasions in 2006, 2008 and 2012 through a software reseller, Planet 9, who Bitmanagement used to market and sell Bitmanagement’s products in the United States.
First Small Business Administration OIG Review of the All Small Mentor-Protégé Program Finds Areas for Improvement
In 2016, the Small Business Administration (SBA) established a new government wide mentor-protégé program for small businesses called the All Small Mentor-Protégé Program (ASMPP). The purpose of the program was for established government contractors to serve as mentors to protégé small businesses by providing business development assistance and to improve the protégé’s ability to successfully compete for federal contracts.
This relationship between the two companies is intended to be mutually beneficial. For protégés, the program creates a framework under which firms obtain valuable technical, management, financial, and contracting assistance from established government contractors. For mentors, one of the benefits was the ability to form a joint venture with their protégé to pursue small business set aside contracts without the two companies being considered affiliated for purposes of SBA’s small business size standards.
Three Findings from SBA’s OIG Review of ASMPP
The SBA’s Office of Inspector General (OIG) reviewed the ASMPP with the objectives of determining whether SBA implemented effective controls to ensure that it conducted initial application reviews and annual evaluations in accordance with the program regulations and if the SBA successfully measured program success.
DoD’s Recently Released Draft Framework Signals Significant Changes in Cybersecurity Requirements
A major shift in cybersecurity requirements for Department of Defense (DoD) contractors is about to come into effect—earlier this month the DoD released for public comment the long-anticipated Version 0.4 of the draft Cybersecurity Maturity Model Certification (CMMC). This new framework to safeguarding controlled unclassified information (CUI), which includes a certification requirement by a third-party auditor, presents both significant opportunities and challenges for DoD contractors.
In an overview briefing on the new model, DoD emphasized that the new framework will impose a unified cybersecurity standard for all DoD acquisitions and, in so doing, “reduce exfiltration of [CUI] from the Defense Industrial base.” To achieve this goal, the new model significantly bolsters the existing compliance regime around cybersecurity—which currently, for the most part, requires compliance with the security standards set forth in NIST SP 800-171 through DFARS 252.204-7012.
Are You Going to ETEBA’s 2019 Business Opportunities & Technical Conference?
I am looking forward to presenting at ETEBA’s 2019 Business Opportunities & Technical Conference (BOTC) which takes place at the Knoxville Convention Center on October 8-10, 2019. More than 400 participants will gather at the 20th annual BOTC to learn about upcoming opportunities with prime contractors and government procurement officials in the energy, environmental and
Equitable Adjustment Appropriate Where Agency Assumed Contractor’s Duty to Identify SCA Positions
A recent decision in Sotera Defense Solutions, Inc. v. Department of Agriculture, CBCA 6029, 6030, by the United States Civilian Board of Contract Appeals (CBCA), upheld a contract provision that imposed greater obligations on the government than required by the Service Contract Act (SCA). The validity of this contract provision ultimately proved dispositive in the outcome of the case with the CBCA holding the government liable for costs.
In 2012, the National Institutes of Health (NIH) awarded Sotera a contract for the provision of information technology (IT) services. The contract stated that the positions in the contract were exempt from the SCA but advised that a contracting officer would have to determine whether the SCA applied to any positions requested within the task order. The Department of Agriculture (USDA) issued three task orders against the NIH contract to Sotera in which the USDA sought IT operations and maintenance support for offices located throughout the United States.
Findings of DoD Audit and Recommendations for Cyber Enforcement
In an article published by Law360, we examined a report issued by the U.S. Department of Defense (DoD) Inspector General on July 23, which summarizes the findings of an audit into the protection of controlled unclassified information (CUI) on contractor networks.
The DoD reviewed nine contractors’ information systems and revealed some deficiencies that do not meet the standards set forth in National Institute of Standards and Technology (NIST) Special Publication 800-171. The exposed deficiencies include: not mitigating vulnerabilities on their networks and systems, not scanning their network for vulnerabilities, not mitigating high vulnerabilities identified in the contractor’s management programs and more.
[WEBINAR] Briefing: How Mergers & Acquisitions Can Impact Pending Bids
Please join us on September 17, 2019, at 1:00 p.m. EDT as we launch a series of complimentary briefings via webinar that will serve as an extension of this blog and feature timely and practical guidance on key topics of interest.
We will host the first GovCon & Trade briefing that will highlight recent bid