2023-21328: Federal Acquisition Regulation: Cyber Threat and Incident Reporting and Information Sharing
Public comment closed .
Get alerted when the next rule lands
New rules open for comment on their own schedule. Pick how you want to hear about them — we email you when one appears.
Publishing to members? Embed a live rule tracker on your own site — the proposed rules in your area and the comment deadlines closing on them, updating themselves. Free, one line of HTML.
Create a free account & build one →Summary
DoD, GSA, and NASA are proposing to amend the Federal Acquisition Regulation (FAR) to partially implement an Executive order on cyber threats and incident reporting and information sharing for Federal contractors and to implement related cybersecurity policies.
The agency’s own summary, as published.
What this changes
Amends 9 parts of the Code of Federal Regulations — the standing rules this notice rewrites.
- 48 CFR 1 Federal Acquisition Regulations System
- 48 CFR 2 Definitions of Words and Terms
- 48 CFR 4 Administrative and Information Matters
- 48 CFR 7 Acquisition Planning
- 48 CFR 10 Market Research
- 48 CFR 11 Describing Agency Needs
- 48 CFR 12 Acquisition of Commercial Products and Commercial Services
- 48 CFR 39 Acquisition of Information Technology
- 48 CFR 52 Solicitation Provisions and Contract Clauses
Rulemaking docket
We haven’t pulled this rulemaking’s full docket yet. View docket FAR-2021-0017 on Regulations.gov →
Don't miss the comment window
One Click Politics alerts you on every deadline, hearing, and rule change.
See all rules with comments due soon →