Darby Rourick is a government contracts lawyer that advises on federal contracting compliance requirements and on government and internal investigations that stem from these obligations. She has particular experience in federal cybersecurity and information technology supply chain issues. Darby has an active investigations practice and advises contractors when faced with cyber incidents involving government information, as well as representing contractors facing allegations of cyber fraud under the False Claims Act. She also counsels clients on cybersecurity incident response; compliance with federal cybersecurity laws, regulations, and standards; supplier and subcontractor security issues; and cybersecurity related investigations.

Darby has particular regulatory experience with:

Government cybersecurity supply chain issues like the Cybersecurity Maturity Model Certification (CMMC), DFARS 7012, and NIST SP 800-171 requirements; and
Information handling, marking, and dissemination requirements, including those relating to Covered Defense Information (CDI) and Controlled Unclassified Information (CUI)

She also assist clients when allegations of non-compliance arise with procurement requirements, such as in the following areas:

Procurement fraud and FAR mandatory disclosure requirements;
Allegations of violations of cybersecurity regulation;
Cyber incidents and data spills; and 
Compliance with MIL-SPEC requirements, the Qualified Products List, and other sourcing obligations.