government enforcement
No Good Deed Goes Unpunished: Why Voluntary Disclosure of Cybersecurity Violations Doesn’t Mean You Won’t Be Punished for Bad Security
Mark Rasch | | Aero Turbine case, cisa, compliance programs, CUI, CYBERSECURITY COMPLIANCE, cybersecurity contracting, cybersecurity law, cybersecurity liability, Data Security, defense contractors, DFARS 252.204-7012, disclosure penalties, DoD Voluntary Disclosure Program, DOJ Corporate Enforcement Policy, DOJ policy, false certification, False Claims Act, federal contracts, fedramp compliance, Gallant Capital Partners, government enforcement, legal risk management, NIST SP 800-171, self-reporting, Universal Health Services v. Escobar, voluntary disclosure
Voluntary cybersecurity disclosure reduces penalties but not liability. In compliance, honesty helps—but it’s no safe harbor ...
Security Boulevard

