Regulatory Agenda

OFFICE OF MANAGEMENT AND BUDGET

Office of Federal Procurement Policy

DEPARTMENT OF DEFENSE

GENERAL SERVICES ADMINISTRATION

NATIONAL AERONAUTICS AND SPACE ADMINISTRATION

48 CFR Ch. 1

Regulatory Agenda

AGENCY:

Office of Federal Procurement Policy (OFPP), Office of Management and Budget (OMB); Department of Defense (DoD); General Services Administration (GSA); and National Aeronautics and Space Administration (NASA).

ACTION:

Regulatory agenda.

SUMMARY:

This agenda provides summary descriptions of regulations being developed by the Federal Acquisition Regulatory Council in compliance with Executive Order 12866 “Regulatory Planning and Review, as reaffirmed and amended in Executive Order 13563, “Improving Regulation and Regulatory Review.”

This agenda is being published to allow interested people an opportunity to participate in the rulemaking process. Additionally, members of the public can track the progress of any open and pending Federal Acquisition Regulation (FAR) rule via the “Open FAR Cases” report, which is publicly available at

https://www.acq.osd.mil/dpap/dars/far_case_status.html.

The Regulatory Secretariat Division has attempted to list all regulations pending at the time of publication, except for minor and routine or repetitive actions; however, unanticipated requirements may result in the issuance of regulations that are not included in this agenda. There is no legal significance to the omission of an item from this listing. Also, the dates shown for the steps of each action are estimated and are not commitments to act on or by the dates shown.

Published proposed rules may be reviewed in their entirety at the Government's rulemaking website at

https://www.regulations.gov.

FOR FURTHER INFORMATION CONTACT:

The Regulatory Secretariat Division at 202-501-4755 or

GSARegSec@gsa.gov.

SUPPLEMENTARY INFORMATION:

OFPP, DoD, GSA, and NASA, under their several statutory authorities, jointly issue and maintain the FAR through periodic issuance of changes published in the

Federal Register

and produced electronically as Federal Acquisition Circulars (FACs).

The electronic version of the FAR, including changes, can be accessed on the FAR website at

https://www.acquisition.gov/far.

William F. Clark,

Director, Office of Government-wide, Acquisition Policy, Office of Acquisition Policy, Office of Government-wide Policy.

DOD/GSA/NASA (FAR)—Final Rule Stage

Sequence No.

Title

Regulation

Identifier No.

343

Federal Acquisition Regulation (FAR); FAR Case 2021-017, Cyber Threat and Incident Reporting and Information Sharing

9000-AO34

DOD/GSA/NASA (FAR)—Long-Term Actions

Sequence No.

Title

Regulation

Identifier No.

344

Federal Acquisition Regulation (FAR); FAR Case 2023-006, Preventing Organizational Conflicts of Interest in Federal Acquisition

9000-AO54

DOD/GSA/NASA (FAR)—Completed Actions

Sequence No.

Title

Regulation

Identifier No.

345

Federal Acquisition Regulation (FAR); FAR Case 2023-002, Supply Chain Software Security

9000-AO49

Department of Defense/General Services Administration/National Aeronautics and Space Administration

(FAR)

Final Rule Stage

343. FEDERAL ACQUISITION REGULATION (FAR); FAR CASE 2021-017, CYBER THREAT AND INCIDENT REPORTING AND INFORMATION SHARING

Legal Authority: 40 U.S.C. 121(c); 10 U.S.C. ch. 4; 10 U.S.C. ch. 137 legacy provisions; 10 U.S.C. 3016; 51 U.S.C. 20113

Relevant Executive Orders: 14028

Abstract: This rule will authorize agencies to increase the sharing of information about cyber threats and incident information between the Government and certain providers. In addition, this rule will require certain contractors to report cyber incidents to the Federal Government to facilitate effective cyber incident response and remediation and require offerors to represent that they have submitted all security incident reports in a current, accurate, and complete manner. This rule is being issued pursuant to recommendations from the Office of Management and Budget and the Department of Homeland Security in accordance with sections 2(b), 2(c), 2(g)(i), and 8(b), of the Executive Order 14028 titled “Improving the Nation's Cybersecurity.”

Timetable:

Action

Date

FR Cite

NPRM

10/03/23

88 FR 68055

NPRM Comment Period Extended

11/01/23

88 FR 74970

NPRM Comment Period End

12/04/23

NPRM Comment Period Extended End

02/02/24

Final Rule

09/00/26

Regulatory Flexibility Analysis Required: Yes

Agency Contact: FAR Policy, DOD/GSA/NASA (FAR), 1800 F Street, NW, Washington, DC 20405

Phone: 202 969-4075

Email:

farpolicy@gsa.gov

RIN: 9000-AO34

Department of Defense/General Services Administration/National Aeronautics and Space Administration

(FAR)

Long-Term Actions

344. FEDERAL ACQUISITION REGULATION (FAR); FAR CASE 2023-006, PREVENTING ORGANIZATIONAL CONFLICTS OF INTEREST IN FEDERAL ACQUISITION

Legal Authority: 40 U.S.C. 121(c); 10 U.S.C. ch. 4; 10 U.S.C. ch. 137 legacy provisions; 10 U.S.C. 3016; 51 U.S.C. 20113; 41 U.S.C. 1121(b)

Abstract: This rule will provide and update definitions, guidance, and examples related to organizational conflicts of interest (OCI), including the creation of solicitation provisions and contract clauses to avoid or mitigate OCI, that require contractors to disclose information relevant to potential OCI and limit future contracting. The rule will also permit contracting officers to take into consideration professional standards and procedures to prevent OCI to which an offeror or contractor is subject. This rule is being issued in accordance with the Preventing Organizational Conflicts of Interest in Federal Acquisition Act. The FAR Council received public comments on the proposed rule published in January 2025, which are being considered in development of the final rule.

Timetable:

Action

Date

FR Cite

NPRM

01/15/25

90 FR 4376

NPRM Comment Period End

03/17/25

Final Rule

07/00/27

Regulatory Flexibility Analysis Required: Yes

Agency Contact: FAR Policy, DOD/GSA/NASA (FAR), 1800 F Street, NW, Washington, DC 20405

Phone: 202 969-4075

Email:

farpolicy@gsa.gov

RIN: 9000-AO54

Department of Defense/General Services Administration/National Aeronautics and Space Administration

(FAR)

Completed Actions

345. FEDERAL ACQUISITION REGULATION (FAR); FAR CASE 2023-002, SUPPLY CHAIN SOFTWARE SECURITY

Legal Authority: 40 U.S.C. 121(c); 10 U.S.C. ch. 4; 10 U.S.C. ch. 137 legacy provisions; 10 U.S.C. 3016; 51 U.S.C. 20113

Relevant Executive Orders: 14028

Abstract: This FAR rule is closed because it was intended to implement Office of Management and Budget (OMB) direction that has since been rescinded. OMB memorandum M-26-05, Adopting a Risk-based Approach to Software and Hardware Security, dated January 23, 2026, rescinded previous OMB memoranda M-22-18, Enhancing the Security of the Software Supply Chain through Secure Software Development Practices, and M-23-16, Update to Memorandum M-22-18, Enhancing the Security of the Software Supply Chain through Secure Software Development Practices.

Completed:

Reason

Date

FR Cite

Withdrawn

03/06/26

Regulatory Flexibility Analysis Required: Yes

Agency Contact: FAR Policy

Phone: 202 969-4075

Email:

farpolicy@gsa.gov

RIN: 9000-AO49

[FR Doc. 2026-16612 Filed 8-13-26; 8:45 am]

BILLING CODE 6820-EP-P