FAR Cybersecurity Final Rule Sent to OMB

On Tuesday DOD/GSA/NASA sent a Federal Acquisition Regulation (FAR) final rule to OMB’s Office of Information and Regulatory Affairs concerning basic safeguarding of contractor information systems. The rule would add a new subpart and contract clause for the basic safeguarding of contractor information systems that contain, transmit, or process Federal contract information. The NPRM for this rule was published in 2012 (77 FR 51496) (NOTE: The Unified Agenda has an incorrect date for that NPRM; it should read 8-24-12).

The significance of this rule is that it establishes legal requirements for contractors for IT cybersecurity practices for non-classified information.