1. of XX Government Contracts Statutes, Regulations, Executive Orders & Policies Stu Nibley, Partner, K&L Gates LLP ©2015 PubKLearning. All rights reserved.1 Carl Levin and Howard P. “Buck” McKeon National Defense Authorization Act for FY 2015, Pub. L. No. 113-291, 128 Stat. 3292 (Dec. 19, 2014) –37 procurement related provisions –Includes cyber incident reporting, unallowable cost issues, prohibitions on contracting with the enemy, IT acquisition planning revisions, and expansion of whistleblower protections Cybersecurity Enhancement Act of 2014, Pub. L. No. 113-274, 128 Stat. 2971 (Dec. 18, 2014) –Encourages cyber threat information sharing by establishing a Public-Private Collaboration on Cybersecurity –Authorizes Government to support research, raise public awareness of cyber risks, and improve the nation’s cybersecurity workforce National Cybersecurity Protection Act of 2014, Pub. L. No. 113-282, 128 Stat. 3066 (Dec. 18, 2014) –Establishes National Cybersecurity and Communications Integration Center in the Department of Homeland Security

2. of XX Government Contracts Statutes, Regulations, Executive Orders & Policies Stu Nibley, Partner, K&L Gates LLP ©2015 PubKLearning. All rights reserved.2 Cybersecurity Workforce Assessment Act, Pub. L. No. 113-246, 128 Stat. 2880 (Dec. 18, 2014) –Directs the Secretary of Homeland Security to conduct an assessment of the cybersecurity workforce of the Department of Homeland Security and establish an agency workforce strategy within one year of enactment Intelligence Authorization Act of FY15, Pub. L. No. 113-293, 128 Stat. 3990 (Dec. 19, 2014) –Requires the Director of National Intelligence to develop a comprehensive national intelligence strategy, develop a plan for the management of the intelligence community, and report on the status of reducing administrative costs for the intelligence community Federal Information Security Modernization Act of 2014, Pub. L. No. 113-283, 128 Stat. 3073 (Dec. 18, 2014) –Updates 2002 Federal Information Security Modernization Act (FISMA) –Delegates implementation authority for defense-related and intelligence-related information security

3. of XX Government Contracts Statutes, Regulations, Executive Orders & Policies Stu Nibley, Partner, K&L Gates LLP ©2015 PubKLearning. All rights reserved.3 Consolidated and Further Continuing Appropriations Act, 2015, Pub. L. No. 113-235, 128 Stat. 2130 (Dec. 16, 2014) –Prohibits the appropriation of federal funds on future government contracts whose confidentiality policies restrict employees from reporting fraud, waste, or abuse to investigative agencies –Requires certain agencies to assess risk of cyberespionage before acquiring IT systems Statutes Proposed for FY 2016 (as of September 14, 2015) –National Defense Authorization Act 2016 (H.R. 1735) –Protecting Cyber Networks Act (PCNA) (H.R. 1560) –Cybersecurity Information Sharing Act (S.754) –Intelligence Authorization Act for Fiscal Year 2016 (H.R.2596)