FAR Council lines up December release of first two rulemakings to finalize requirements from Biden cyber EO

The General Services Administration, Defense Department and NASA are targeting a December publication of two final regulations to establish cyber rules for federal contractors on incident reporting and information sharing and requirements for unclassified information systems, as part of the effort to fulfill mandates from President Biden’s 2021 cyber executive order.

The two rulemakings will make changes to the Federal Acquisition Regulation and were published as proposed rules in October 2023. The first rulemaking raised concerns from the...