Here, the authors explain that, to mitigate the risk of False Claims Act (“FCA”) liability for cybersecurity fraud, organizations contracting with the government should consider how they would be able to use their compliance program and efforts to establish they acted appropriately and cannot be deemed to have acted with “reckless disregard” or “deliberate ignorance.”