Far Changes Proposed To Standardize Important Cybersecurity Requirements And To Impose New Cyber Threat, Incident Reporting And Information Sharing Rules

The government has proposed two sets of revisions to the Federal Acquisition Regulation (FAR) to improve the cybersecurity of the government’s information systems. The first set of revisions seeks to standardize cybersecurity requirements for unclassified federal information systems (FISs) across federal agencies. The second set of revisions requires contractors to take additional steps to ensure an effective incident response and investigation of potential incidents and to provide federal law enforcement agencies with access to applicable contractor information and information systems.