Lillia Damalouji

Lillia Damalouji is an associate in Sheppard Mullin’s Washington, D.C. office where she is a member of the firm’s Governmental Practice. Lillia is also a member of the firm’s Cybersecurity Team, Supply Chain Team, Commercial Products and Services Team, and the Aerospace, Defense & Government Services Team.

Areas of Practice

Lillia focuses on government contracts litigation and counseling matters in the following areas:

• Cybersecurity and data protection counseling;
• Internal investigations;
• Regulatory compliance;
• Transactional due diligence

Prior to joining Sheppard Mullin, Lillia spent four years working for Naval Sea Systems Command (NAVSEA) in the agency’s Cyber Engineering and Digital Transformation directorate, where she helped to lead Enterprise-wide cybersecurity initiatives as well as Program Executive Office Ships, supporting the acquisition of U.S. Navy non-nuclear surface ships. During law school, Lillia was a Research Editor for the George Mason Law Review and a  Student Advisor for the Mason Veterans and Servicemembers Legal Clinic.

Articles

Government Contracts & Investigations Blog Posts

• "At Long Last – The FAR CUI Rule is Here!," January 29, 2025

• "Countdown to Compliance: DoD Finalizes the CMMC Program Rule," October 15, 2024

• "Government Contractors Beware: The Trap of the Unintended Agency-Level Protest and Timeliness Implications," September 30, 2024

• "The CMMC Rule To Update the DFARS is Here!" August 16, 2024

• "Not an April Fools Joke – FAR Part 40 Final Rule Has Been Published," April 29, 2024

• "CISA Opens Repository for Submission of Software Security Attestation Forms," March 27, 2024
• "Governmental Practice Cybersecurity and Data Protection, 2023 Recap & 2024 Forecast Alert," February 8, 2024

• "Government Contracts Cost and Pricing: Accounting for Unallowable Costs," January 31, 2024

• "Bid Protest Hub – December 2023," January 31, 2024

• "Update: CISA Seeks Additional Input from Software Providers on Security Attestation Form," December 6, 2023

• "Two New Cybersecurity Proposed Rules Mean Big Changes for Federal Contractors," October 4, 2023

• "Challenging Other Transaction Agreements – Navigating the Jurisdictional Highway," September 13, 2023

• "Cybersecurity Labeling is (Almost) Here! Biden Administration Announces the U.S. Cyber Trust Mark Program," August 1, 2023

• "Continuing Skepticism on China: Final Rule Requires Disclosure of Defense Contractor Personnel in China," April 4, 2023

• "In the Interest of National Security – Two New DFARS Rules Reinforce Increased Scrutiny For Chinese-Origin Supply Chains," August 30, 2022

• "NIST Wants Your Input – Updating NIST’s Controlled Unclassified Information (CUI) Guidelines," July 27, 2022
• "DOJ Announces Civil Cyber-Fraud Initiative To Enforce Contractor Cybersecurity Compliance," October 28, 2021
• "Moving to Zero Trust – CISA and OMB Seek Comments on Zero Trust Publications and Cloud Security Technical Reference Architecture under Cybersecurity Executive Order," September 15, 2021
• "Watch Your Boundaries – FedRAMP Releases Draft Authorization Boundary Guidance for Public Comment," July 28, 2021

Privacy & Cybersecurity: Eye on Privacy Blog

• "Cybersecurity Labeling Program to Increase Transparency of IoT Device Security," August 3, 2023