FAR Cybersecurity for Unclassified Information NPRM to OMB

Yesterday, the OMB’s Office of Information and Regulatory Affairs (OIRA) announced that it had received a Federal Acquisition Regulation (FAR) notice of proposed regulation for “FAR Case 2021-019, Standardizing Cybersecurity Requirements for Unclassified Information Systems”. According to the entry in the 2022 Spring Unified Agenda listing for this rulemaking:

“DoD, GSA, and NASA are proposing to amend the Federal Acquisition Regulation (FAR) to standardize common cybersecurity contractual requirements across Federal agencies for unclassified information systems, pursuant to Department of Homeland Security recommendations in accordance with sections 2(i) and 8(b) of Executive Order 14028 [link added], Improving the Nation’s Cybersecurity.”