FIND BY MONTH
FIND BY LOCATION
IN-HOUSE TRAINING
Bring any seminar or course directly to your staff through the Federal Publications’ In-House Presentations Program.
Get 10% Off Your Next Purchase
SIGN UP FOR OUR EMAILS
Email Address * Name
Title Organization
Privacy Policy

THANK YOU FOR SIGNING UP

You'll soon be receiving updates about special offers, events, books & more.
Continue to browse our site to:
 
Public
In-House
The role of the acquisition professional as a critical partner in information security. Overview and update on FISMA (the Federal Information Security and Management Act). How requirements may affect contractors.

Topics covered:

FISMA Basics and The Core NIST Documents
FISMA Primer; Core NIST Documents; Compliance Related Source Documents; Roles and Responsibilities; Information Assurance Basics; The Security Life Cycle; Security Plans.

Security Categorization of Information Systems and Networks
Category Mapping; Base Lines; Configuration Management; Common Sense; IA, a Life Cycle Process; NIST Publication 800-100, Information Security Handbook; Federal Information Processing Standards (FIPS).

Testing and Validation of Security Controls
Security Controls for Information Systems; Certification and Accreditation; Testing and Assessment of Security Controls; Vulnerability Testing; Trusted Supply Sources; Trusted Hardware/Software (NIAP).

Risk Management Overview and Process
Risk Management Lifecycle; Critical Business Assets; Asset Valuation; In-Place Safeguards; Threats; Risks; Rank Risks; Risk Mitigation; Risk Management Framework (RISMA); Cybersecurity Framework (Critical Infrastructures).
Dates and Locations

This course will be scheduled soon. Please enter your information below to receive a notification when the class is scheduled.

Email Address *
First Name
Last Name
Organization/Affiliation
Address 1
Address 2
City
State
Zip Code
*Required
DAILY SCHEDULE
8:00 AM - 3:00 PM
La Jolla Cybersecurity Institute
Privacy Basics, Law and Practice
  • Privacy Defined
  • Specific State Laws
  • Data Breach Notification Laws
  • Electronic Communications Privacy Act
  • USA Freedom and USA Patriot Acts
  • Consumer Privacy Enforcement and Fair Information Privacy Principles
  • FIPPs and FTC Section 5 Authority
  • International Privacy Law
  • Data Protection Laws
  • EU Data Protection Directive
  • EU Privacy Principles

Data Transfer Restrictions and Mechanisms

  • Transfer of Personal Data
  • Safe Harbor Status
  • The Privacy Act of 1974
  • General Requirements
  • Notification
  • Civil Penalties for Non-Compliance
  • Criminal Penalties for Non-Compliance
  • Government Contractors Obligations
  • Security Controls (FISMA)
  • Summary of the Rules

Components of a Comprehensive Privacy Program
  • Privacy Team
  • Making it Work
  • Privacy Program Components
  • Data Inventories
  • Privacy Impact Assessments
  • Vendor Review/Certification
  • Incident Response Plan
  • Third Party Contract Obligations
  • Identity Management and Governance
  • Data Loss Prevention
  • Mitigation Privacy Risk
  • Compliance v. Risk Mitigation

Incorporating Privacy Principles Into Cybersecurity Policies and Practices
  • Privacy, Security, and Cybersecurity
  • Cybersecurity Executive Orders
  • Cybersecurity and the Board
  • Privacy Risk Assessment
  • Practical Policies and Procedures
  • Information Classification and Records Retention
  • Enforcement and Remedies
  • SEC, FTC, and FCC Enforcement
  • DFARS Regulations
  • Safeguarding Covered Defense Information and Cyber Incident Reporting
9:00 AM - 4:00 PM
McLean, VA
Privacy Basics, Law and Practice
  • Privacy Defined
  • Specific State Laws
  • Data Breach Notification Laws
  • Electronic Communications Privacy Act
  • USA Freedom and USA Patriot Acts
  • Consumer Privacy Enforcement and Fair Information Privacy Principles
  • FIPPs and FTC Section 5 Authority
  • International Privacy Law
  • Data Protection Laws
  • EU Data Protection Directive
  • EU Privacy Principles

Data Transfer Restrictions and Mechanisms

  • Transfer of Personal Data
  • Safe Harbor Status
  • The Privacy Act of 1974
  • General Requirements
  • Notification
  • Civil Penalties for Non-Compliance
  • Criminal Penalties for Non-Compliance
  • Government Contractors Obligations
  • Security Controls (FISMA)
  • Summary of the Rules

Components of a Comprehensive Privacy Program
  • Privacy Team
  • Making it Work
  • Privacy Program Components
  • Data Inventories
  • Privacy Impact Assessments
  • Vendor Review/Certification
  • Incident Response Plan
  • Third Party Contract Obligations
  • Identity Management and Governance
  • Data Loss Prevention
  • Mitigation Privacy Risk
  • Compliance v. Risk Mitigation

Incorporating Privacy Principles Into Cybersecurity Policies and Practices
  • Privacy, Security, and Cybersecurity
  • Cybersecurity Executive Orders
  • Cybersecurity and the Board
  • Privacy Risk Assessment
  • Practical Policies and Procedures
  • Information Classification and Records Retention
  • Enforcement and Remedies
  • SEC, FTC, and FCC Enforcement
  • DFARS Regulations
  • Safeguarding Covered Defense Information and Cyber Incident Reporting
Eric Crusius
Eric Crusius is a Tysons attorney who focuses his practice on a wide range of government contract matters, including bid protests, claims and disputes, compliance issues and sub-prime issues.
Mr. Crusius has extensive experience in government contract litigation, including successfully prosecuting and intervening in numerous bid protests before the U.S. Court of Federal Claims, Government Accountability Office (GAO), boards of contract appeals and other federal agencies. He counsels clients regarding the Service Contract Act (SCA) and other labor issues, trade agreements, export controls, subcontracting and teaming agreements, and compliance with the Federal Acquisition Regulation (FAR). Mr. Crusius also represents contractors in investigations, suspension and debarment proceedings, and in federal and state courts.
In addition, Mr. Crusius is well-versed in developing strategies for and managing all stages of complex multimillion-dollar litigations from commencement through trial.
Mary Beth Bosco
Mary Beth Bosco is a partner in Holland & Knight's Washington, D.C., office. She has 30 years of experience working with new and experienced government contractors, and focuses her practice on advising such organizations in contract compliance, transactional matters and how to navigate the federal marketplace.
With a substantial background in regulatory matters and litigation, Ms. Bosco counsels clients on the drafting of procurement manuals and implementation of compliance and training programs, including reporting requirements as well as audits and procurement fraud investigations. Furthermore, she represents companies, financial institutions and investment funds in connection with the due diligence review of government contractors throughout industries such as intelligence, healthcare and manufacturing. In particular, she assists companies holding facility clearances with foreign ownership and control issues.
Ms. Bosco has led the response and defense of complex concurrent agency and congressional investigations. She has also advised clients in investigations regarding Inspector General and the Department of Justice and audits conducted by the Office of Federal Contractor Compliance Programs, and she has represented companies and individuals in numerous debarment and suspension proceedings. Ms. Bosco also applies her government contracting knowledge to False Claims Act litigation as well as trial and appellate proceedings.
Ms. Bosco advises Alaska Native Corporations (ANCs) and other government contractors regarding contractual and regulatory compliance issues. These have included the government contractor wage and employment requirements, cost accounting and audit issues, and cybersecurity rules unique to government contractors. She has also represented government contractors in bid protest matters, investigations and claims.
Beyond her law practice, Ms. Bosco regularly writes and speaks on a range of cybersecurity issues.

MEET YOUR CONTINUING EDUCATION CREDIT REQUIREMENTS
SEE INDIVIDUAL COURSES FOR AVAILABLE CREDITS
Certificates of Completion are provided to all seminar participants who attend Federal Publications Seminars courses following the event, upon request.
NCMA: CONTRACT MANAGER CERTIFICATION
All Federal Publications Seminars courses meet the course requirements of the National Contract Management Association’s certification programs. We are a proud Education Partner of the NCMA.
CPE: CONTINUING PROFESSIONAL EDUCATION
Federal Publications Seminars is part of West Professional Development, which is registered with the National Association of State Boards of Accountancy (NASBA) as a sponsor of continuing professional education on the National Registry of CPE Sponsors. State boards of accountancy have the final authority on the acceptance of individual courses for CPE credit. Complaints regarding registered sponsors may be submitted to the National Registry of CPE Sponsors through its website: www.learningmarket.org.
CPE HOURS
This Program is eligible for: 6.5 (CPE) hours of credit
Program Level: n/a
Program Prerequisite: n/a
Advance Preparation: n/a
Method: n/a
CLP: CONTINUOUS LEARNING POINTS
APPROVED FOR CLP BY
DEFENSE ACQUISITION UNIVERSITY
Defense Acquisition Workforce members must acquire 80 Continuous Learning Points (CLP) every two years from the date of entry into the acquisition workforce for as long as the member remains in an acquisition position per DoD Instruction 5000.66. We will provide you with documentation of points awarded for completing the event.
CLP HOURS
This Program is eligible for: 6.0 (CLP) hours of credit
CLE: CONTINUING LEGAL EDUCATION
States have widely varying regulations regarding MCLE credit. LegalEdcenter is an approved provider in AL, AK, AR, CA, GA, IL, ME, MO, MS, NC, ND, NE, NH, NJ, NM, NV, NY, OH, OK, PA, RI, SC, TN, TX, UT, VA, VI, VT, WA, WI, and WV. Credit may be applied for in other jurisdictions on request and in accordance with state MCLE rules.
** Please note that because some states are changing their policy on CLE reporting, you will need to fill out the request for credit from Federal Publications Seminars within 10 business days, or we may not be able to issue credits for the program.
CLE HOURS
This Program is eligible for: 5.5 (60 minutes),
100
Basic or fundamental subject matter is covered. Courses are geared to general knowledge or can be taken as a refresher.
200
Specific topics or issues within a topic area are covered. Students should be familiar with terms of art and general concepts concerning the course topic.
300
Workshops and class discussions cover specific subject matter in-depth, and participation is strongly encouraged. Attendees should have at least 2-3 years' experience in the area of study.
400
Courses build upon students' knowledge and experience, and cover complex issues within the subject matter. Should have 4-5 years' mastery of subject for in-depth analysis.
500
Masters-level programs designed for professionals with 5+ years' experience. Courses cover in-depth and technical analysis on specific subjects and updates on current issues.
Register Now for:
Privacy Basics for Contracting Professionals
close window
By Phone
Call (888) 494-3696