Skip To Main Content
Andrew J Lewis on Muck Rack

Andrew J Lewis

As seen in: Memory Studies, MDPI, National Review, The Atlanta Journal-Constitution, The Daily Caller, Daily Kos, JD Supra, Cascade PBS, Mondaq, The 74 and
Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work. Claim your profile

Get in touch with Andrew J

Contact Andrew J, search articles and posts on X, monitor coverage, and track replies from one place.

Learn more about Muck Rack

Actions

Share this page

Is this you?

As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile

Articles

Department of Defense Suspends CMMC Phase II | JD Supra

|
By Andrew J Lewis
| JD Supra
The Department of Defense (DoD) announced the immediate suspension of Phase II of the Cybersecurity Maturity Model Certification (CMMC) program on July 13, 2026. CMMC is the DoD's mandatory cybersecurity compliance program for defense contractors handling Controlled Unclassified Information (CUI) and Federal Contract Information (FCI). To implement the suspension, DoD contracting officers are directed to remove Phase II third-party assessment requirements from solicitations and current contracts.
Open in Who Shared Issue with article?

FedRAMP Releases Its Consolidated Rules for 2026 | JD Supra

|
By Andrew J Lewis
| JD Supra
The Federal Risk and Authorization Management Program (FedRAMP), a cybersecurity assessment and authorization program for cloud service providers (CSPs) to federal government agencies, has released its " Consolidated Rules for 2026"-a major overhaul of existing FedRAMP requirements, consolidated for the first time in one authoritative ruleset. The Consolidated Rules reorganize how CSPs must obtain and maintain FedRAMP authorizations (called "certifications" in the new rules).
Open in Who Shared Issue with article?

FedRAMP Proposes Major Overhaul of Incident Reporting Requirements, Solicits Feedback

|
By Michael Borgia, Andrew J Lewis
| JD Supra
The Federal Risk and Authorization Management Program (FedRAMP), a cybersecurity assessment and authorization program for cloud service providers (CSPs) used by federal agencies, has proposed a significant overhaul of its incident reporting requirements through a new Request for Comment, RFC-0031, "Updated Incident Communications Procedures." FedRAMP describes its proposal as a shift toward a more clear and modern rules-based reporting framework.
Open in Who Shared Issue with article?
See all 57 articles