This agenda provides summary descriptions of regulations being developed by the Federal Acquisition Regulatory Council in compliance with Executive Order 12866 "Regulatory Plann...
Office of Federal Procurement Policy (OFPP), Office of Management and Budget (OMB); Department of Defense (DoD); General Services Administration (GSA); and National Aeronautics and Space Administration (NASA).
ACTION:
Regulatory agenda.
SUMMARY:
This agenda provides summary descriptions of regulations being developed by the Federal Acquisition Regulatory Council in compliance with Executive Order 12866 “Regulatory Planning and Review, as reaffirmed and amended in Executive Order 13563, “Improving Regulation and Regulatory Review.”
This agenda is being published to allow interested people an opportunity to participate in the rulemaking process. Additionally, members of the public can track the progress of any open and pending Federal Acquisition Regulation (FAR) rule via the “Open FAR Cases” report, which is publicly available at
www.acq.osd.mil/dpap/dars/far_case_status.html.
The Regulatory Secretariat Division has attempted to list all regulations pending at the time of publication, except for minor and routine or repetitive actions; however, unanticipated requirements may result in the issuance of regulations that are not included in this agenda. There is no legal significance to the omission of an item from this listing. Also, the dates shown for the steps of each action are estimated and are not commitments to act on or by the dates shown.
Published proposed rules may be reviewed in their entirety at the Government's rulemaking website at
www.regulations.gov.
FOR FURTHER INFORMATION CONTACT:
The Regulatory Secretariat Division at 202-501-4755 or
GSARegSec@gsa.gov.
SUPPLEMENTARY INFORMATION:
OFPP, DoD, GSA, and NASA, under their several statutory authorities, jointly issue and maintain the FAR through periodic issuance of changes published in the
Federal Register
and produced electronically as Federal Acquisition Circulars (FACs).
The electronic version of the FAR, including changes, can be accessed on the FAR website at
www.acquisition.gov/far.
William F. Clark,
Director, Office of Government-wide, Acquisition Policy, Office of Acquisition Policy, Office of Government-wide Policy.
DOD/GSA/NASA (FAR)—Final Rule Stage
Sequence No.
Title
Regulation
Identifier No.
343
Federal Acquisition Regulation (FAR); FAR Case 2021-017, Cyber Threat and Incident Reporting and Information Sharing
9000-AO34
DOD/GSA/NASA (FAR)—Long-Term Actions
Sequence No.
Title
Regulation
Identifier No.
344
Federal Acquisition Regulation (FAR); FAR Case 2023-006, Preventing Organizational Conflicts of Interest in Federal Acquisition
9000-AO54
DOD/GSA/NASA (FAR)—Completed Actions
Sequence No.
Title
Regulation
Identifier No.
345
Federal Acquisition Regulation (FAR); FAR Case 2023-002, Supply Chain Software Security
9000-AO49
Department of Defense/General Services Administration/National Aeronautics and Space Administration
(FAR)
Final Rule Stage
343. FEDERAL ACQUISITION REGULATION (FAR); FAR CASE 2021-017, CYBER THREAT AND INCIDENT REPORTING AND INFORMATION SHARING
Abstract: This rule will authorize agencies to increase the sharing of information about cyber threats and incident information between the Government and certain providers. In addition, this rule will require certain contractors to report cyber incidents to the Federal Government to facilitate effective cyber incident response and remediation and require offerors to represent that they have submitted all security incident reports in a current, accurate, and complete manner. This rule is being issued pursuant to recommendations from the Office of Management and Budget and the Department of Homeland Security in accordance with sections 2(b), 2(c), 2(g)(i), and 8(b), of the Executive Order 14028 titled “Improving the Nation's Cybersecurity.”
Abstract: This rule will provide and update definitions, guidance, and examples related to organizational conflicts of interest (OCI), including the creation of solicitation provisions and contract clauses to avoid or mitigate OCI, that require contractors to disclose information relevant to potential OCI and limit future contracting. The rule will also permit contracting officers to take into consideration professional standards and procedures to prevent OCI to which an offeror or contractor is subject. This rule is being issued in accordance with the Preventing Organizational Conflicts of Interest in Federal Acquisition Act. The FAR Council received public comments on the proposed rule published in January 2025, which are being considered in development of the final rule.
Abstract: This FAR rule is closed because it was intended to implement Office of Management and Budget (OMB) direction that has since been rescinded. OMB memorandum M-26-05, Adopting a Risk-based Approach to Software and Hardware Security, dated January 23, 2026, rescinded previous OMB memoranda M-22-18, Enhancing the Security of the Software Supply Chain through Secure Software Development Practices, and M-23-16, Update to Memorandum M-22-18, Enhancing the Security of the Software Supply Chain through Secure Software Development Practices.
www.acq.osd.mil/dpap/dars/far_case_status.html
www.regulations.gov
www.acquisition.gov/far
40 U.S.C. 121(c)