Maida Oringher Lerner
Overview
The evolving legal fields of cybersecurity, privacy, and homeland security demand that lawyers be able to provide practical and creative advice to clients on new and complex regulatory requirements and government standards to protect sensitive and proprietary information. Prior to moving to private practice, Maida Lerner served in the Office of General Counsel for a major electric utility company and understands how to work in partnership with corporate counsel in responding efficiently to these new obligations. Maida also understands regulatory and litigation risks. She has participated in significant federal regulatory rulemakings and has represented clients in numerous proceedings before federal and state appellate courts and administrative agencies.
Career & Education
- State University of New York at Albany, B.A., summa cum laude
- Boston University School of Law, J.D.
- District of Columbia
- New York
- Supreme Court of the United States
- Numerous Federal Appellate and District Courts Nationwide
Maida's Insights
Client Alert | 8 min read | 10.14.24
Cybersecurity Matured: DoD Finalizes Cybersecurity Maturity Model Certification (CMMC) Program
On October 11, 2024, the Department of Defense (DoD) released a final rule (the “Final Program Rule”) formalizing the requirements, assessment processes, and related governance for its Cyber Maturity Model Certification Program (CMMC).[1]
Client Alert | 2 min read | 08.20.24
DFARS 7021 Clause 2.0: DoD Releases Proposed Rule Updating CMMC Clause
Client Alert | 6 min read | 07.30.24
Publication | 05.14.24
Critical Infrastructure: Updating the 2013 NIPP and other Risk Mitigation Actions
Representative Matters
- Advised government contractors and owners and operators of U.S. critical infrastructure on privileged cybersecurity, privacy and physical security risk assessments and compliance reviews.
- Advised clients in all U.S. critical infrastructure sectors on the development of cybersecurity and physical security policies, including incident response plans, insider threat programs, and governance frameworks.
- Facilitated simulated security incident exercises and developed training programs for owners and operators of U.S. critical infrastructure in all sectors to test response plans, in coordination with technical consultants under privilege.
- Advised clients in all U.S. critical infrastructure sectors on the development of enterprise-wide and global privacy policies, including privacy notices, user agreements and assessment of incident notification obligations.
- Represented a transportation sector trade association in securing competitive federal funding for a state-of-the-art cyber threat information-sharing network.
- Advised clients in a multitude of sectors, including energy, transportation, health and education, on chemical security regulation compliance, including the Chemical Facility Anti-Terrorism Standards (CFATS).
- Advised clients and represented a company on successful resolution of applications under the Support Anti-Terrorism by Fostering Effective Technologies (SAFETY) Act.
- Advised corporations on compliance issues arising under federal and state Clean Air Acts and asbestos abatement issues.
- Participated in major rulemakings arising under the federal Clean Air Act.
- Advised companies on internal environmental audits.
- Represented members of the utility industry in successful resolution of appellate litigation.
Maida's Insights
Client Alert | 8 min read | 10.14.24
Cybersecurity Matured: DoD Finalizes Cybersecurity Maturity Model Certification (CMMC) Program
On October 11, 2024, the Department of Defense (DoD) released a final rule (the “Final Program Rule”) formalizing the requirements, assessment processes, and related governance for its Cyber Maturity Model Certification Program (CMMC).[1]
Client Alert | 2 min read | 08.20.24
DFARS 7021 Clause 2.0: DoD Releases Proposed Rule Updating CMMC Clause
Client Alert | 6 min read | 07.30.24
Publication | 05.14.24
Critical Infrastructure: Updating the 2013 NIPP and other Risk Mitigation Actions
Insights
Critical Infrastructure: Updating the 2013 NIPP and other Risk Mitigation Actions
|05.14.24
Privacy and Cybersecurity Outlook: The 2024 Landscape
The Impact Of The Cybersecurity Maturity Model Certification On The Defense Industrial Base
|05.01.24
Contract Magazine
Cybersecurity Provisions Proliferate In The National Defense Authorization Act
|03.15.22
Government Contracting Law Report
Cleared Contractors Under the Gun as Insider Threat Program Deadline Approaches
|11.11.16
Bloomberg BNA Insights
Colorado’s New Data Privacy Bill Increases Notification and Safeguarding Requirements
|07.17.18
Crowell & Moring's Data Law Insights
New Draft NIST Guidance on Systems Security Engineering
|04.24.18
Crowell & Moring's Government Contracts Legal Forum
U.K. Announces Fines Up To $24M For Cyber Noncompliance
|01.31.18
Crowell & Moring's Data Law Insights
FERC Proposes to Require Expanded Cyber Security Incident Reporting
|01.17.18
Crowell & Moring's Data Law Insights
New OCR Settlement Targets Safety Net Provider on Security Rule Deficiencies
|04.14.17
Crowell & Moring's Data Law Insights
Home Depot Settles Major Data Breach Suit with Financial Institutions for $25 Million
|03.10.17
Crowell & Moring's Data Law Insights
Privacy & Cybersecurity Weekly News Update – Week of July 31
|08.11.16
Crowell & Moring's Data Law Insights
Maida's Insights
Client Alert | 8 min read | 10.14.24
Cybersecurity Matured: DoD Finalizes Cybersecurity Maturity Model Certification (CMMC) Program
On October 11, 2024, the Department of Defense (DoD) released a final rule (the “Final Program Rule”) formalizing the requirements, assessment processes, and related governance for its Cyber Maturity Model Certification Program (CMMC).[1]
Client Alert | 2 min read | 08.20.24
DFARS 7021 Clause 2.0: DoD Releases Proposed Rule Updating CMMC Clause
Client Alert | 6 min read | 07.30.24
Publication | 05.14.24
Critical Infrastructure: Updating the 2013 NIPP and other Risk Mitigation Actions