Federal Acquisition Regulation: Strengthening America's Cybersecurity Workforce
Published Date: 1/3/2025
Proposed Rule
Summary
The Department of Defense, GSA, and NASA want to update government rules to make sure contractors hiring IT and cybersecurity workers use clear skill standards. This helps build a stronger, smarter cybersecurity team to protect America better. If you’re involved in these contracts, get ready to follow new guidelines and share your thoughts by March 4, 2025.
Analyzed Economic Effects
5 provisions identified: 1 benefits, 4 costs, 0 mixed.
Scope: Number of Firms Affected (Estimate)
Based on FY2021–FY2023 FPDS data, the Government estimates about 2,734 unique entities (including about 1,745 unique small entities) may need to ensure contract deliverables are consistent with the NICE Framework. This estimate assumes approximately 50 percent of entities awarded IT services contracts will be awarded IT support or cybersecurity support service contracts.
Agencies Must Use NICE Framework
If an agency is buying information technology support services or cybersecurity support services, the agency must describe cybersecurity workforce tasks, knowledge, skills, and work roles that align with the NICE Workforce Framework (NIST SP 800-181) in acquisition plans and requirements documents. This alignment must be in effect at the time the solicitation is issued and is required by changes to FAR sections 7.105, 11.002, 12.202, and 39.104.
Contractors Must Align Offers and Deliverables
If you offer information technology support services or cybersecurity support services to the federal government, any offers, quotes, and contract deliverables must align with the NICE Workforce Framework (NIST SP 800-181) in effect at the time of the solicitation. The proposed rule states contractors will be expected to ensure consistency with the NICE Framework when it is specified in acquisitions.
Regulatory Familiarization: Estimated 20 Hours
The proposed rule estimates that contractors providing information technology support services and cybersecurity support services will need about 20 hours to become familiar with the NICE Framework (NIST SP 800-181) and related tools. Contractors may also need to update policies and procedures to comply when solicitations require alignment with the NICE Framework.
No New Clauses or Information Collections
The proposed rule states it does not create new solicitation provisions or contract clauses and does not add information collection requirements under the Paperwork Reduction Act. The Government also states there are no new reporting, recordkeeping, or other compliance requirements in the rule.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-17767, Promoting Telehealth in Rural America
In this document, the Federal Communications Commission (Commission) seeks comments on the scope of the similar service and rural area comparability requirements, comments on possible improvements to, or replacements of, our existing cost study method of determining rural telecommunications rates, comments on possible methods of promoting the use of lower-cost technologies intended to provide backup services, comments on a proposal to establish an eligible services list for the Rural Health Care (RHC) Program, comments on whether to adopt performance metrics to expedite the processing of RHC Program funding requests, and comments on whether to eliminate the approval requirement of evergreen contracts and an annual report requirement.
2026-17761, Maximizing Efficiencies in Universal Service Administration
In this document, the Federal Communications Commission (Commission) seeks to improve the administration of the Universal Service Fund (USF or Fund) by seeking comment on four areas related to USF administration: current USF administration processes, i.e., the processes used by Universal Service Administrative Company (USAC) to administer the USF and the Commission's oversight of those processes; the structure of USF administration, that is, USAC's role and responsibilities related to USF administration; operating costs associated with USF administration; and the impact of USAC's Board of Directors on USF administration.
2026-17764, Section 898(c) Transition Rule for Allocating Foreign Taxes and Section 960(d)(4) Foreign Tax Credit Disallowance; Correction
The IRS fixed some details in their new rules about how foreign taxes are handled for certain companies, especially after a tax deferral option was removed. If you deal with foreign tax credits or earnings from foreign companies, these changes could affect your tax filings. Comments on these updates are open until September 17, 2026, so now’s the time to speak up!
2026-17774, Consumer and Governmental Affairs Bureau Seeks To Dismiss Twenty-Four Mooted or Outdated Petitions
In this document, the Federal Communications Commission (Commission) seeks to assess the continuing interest in certain petitions that were filed between 2003 and 2023. The Commission plans to dismiss the petitions with prejudice unless a petitioner or other interested party files a letter in the relevant docket specifying that it objects to the dismissal of the petition and the reason for such objection.
2026-17655, Passports: Expanding Online Passport Renewal Overseas
The Department proposes to amend 22 CFR 51.21 by consolidating requirements for persons applying by mail and online in the United States and overseas. This proposed change includes expanding online passport application availability to qualified applicants located in foreign countries. In addition, the Department is proposing to remove the requirement that an applicant's most recently issued passport must have a year or less of remaining validity to qualify to submit an online passport application. Finally, the Department is proposing technical corrections to 51.8(b) to change "on-line" to read "online" for consistency.
2026-17609, Airworthiness Directives; Embraer S.A. Airplanes
The FAA proposes to adopt a new airworthiness directive (AD) for certain Embraer S.A. Model EMB-545 and EMB-550 airplanes. This proposed AD was prompted by the possibility of the Ram Air Turbine (RAT) compartment door seal peeling off and becoming entangled with the RAT rotor. This proposed AD would require replacement of the RAT compartment door seal. The FAA is proposing this AD to address the unsafe condition on these products.
Previous / Next Documents
Previous: 2024-30209, Securing the Information and Communications Technology and Services Supply Chain: Unmanned Aircraft Systems
The Department of Commerce wants your thoughts on new rules to keep drones and their tech safe from risky foreign control. This affects companies making or using drone parts linked to certain foreign groups and aims to protect U.S. security. Comments are open until March 4, 2025, so speak up now before any new rules roll out!
Next: 2024-30578, Supplemental Nutrition Assistance Program Quality Control Review Handbook Incorporation by Reference
The USDA wants to officially include the SNAP Quality Control Review Handbook into its rules, making sure everyone gets a chance to comment before any changes happen. This affects people who manage SNAP case reviews and aims to keep the process clear and fair. Comments are open until March 4, 2024, with no immediate cost changes announced.