Federal Acquisition Regulation: Strengthening America's Cybersecurity Workforce
Published Date: 1/3/2025
Proposed Rule
Summary
The Department of Defense, GSA, and NASA want to update government rules to make sure contractors hiring IT and cybersecurity workers use clear skill standards. This helps build a stronger, smarter cybersecurity team to protect America better. If you’re involved in these contracts, get ready to follow new guidelines and share your thoughts by March 4, 2025.
Analyzed Economic Effects
5 provisions identified: 1 benefits, 4 costs, 0 mixed.
Scope: Number of Firms Affected (Estimate)
Based on FY2021–FY2023 FPDS data, the Government estimates about 2,734 unique entities (including about 1,745 unique small entities) may need to ensure contract deliverables are consistent with the NICE Framework. This estimate assumes approximately 50 percent of entities awarded IT services contracts will be awarded IT support or cybersecurity support service contracts.
Agencies Must Use NICE Framework
If an agency is buying information technology support services or cybersecurity support services, the agency must describe cybersecurity workforce tasks, knowledge, skills, and work roles that align with the NICE Workforce Framework (NIST SP 800-181) in acquisition plans and requirements documents. This alignment must be in effect at the time the solicitation is issued and is required by changes to FAR sections 7.105, 11.002, 12.202, and 39.104.
Contractors Must Align Offers and Deliverables
If you offer information technology support services or cybersecurity support services to the federal government, any offers, quotes, and contract deliverables must align with the NICE Workforce Framework (NIST SP 800-181) in effect at the time of the solicitation. The proposed rule states contractors will be expected to ensure consistency with the NICE Framework when it is specified in acquisitions.
Regulatory Familiarization: Estimated 20 Hours
The proposed rule estimates that contractors providing information technology support services and cybersecurity support services will need about 20 hours to become familiar with the NICE Framework (NIST SP 800-181) and related tools. Contractors may also need to update policies and procedures to comply when solicitations require alignment with the NICE Framework.
No New Clauses or Information Collections
The proposed rule states it does not create new solicitation provisions or contract clauses and does not add information collection requirements under the Paperwork Reduction Act. The Government also states there are no new reporting, recordkeeping, or other compliance requirements in the rule.
Your PRIA Score
Personalized for You
How does this regulation affect your finances?
Sign up for a PRIA Policy Scan to see your personalized alignment score for this federal register document and every other regulation we track. We analyze your financial profile against policy provisions to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-10292 — Medicaid Program; Medicaid Managed Care State Directed Payments and Medicaid Fee-for-Service Targeted Medicaid Practitioner Payments
This proposed rule changes how states can pay Medicaid managed care plans and certain doctors to make sure payments are fair, efficient, and encourage enough providers to offer quality care. It affects states, Medicaid managed care organizations, and targeted Medicaid practitioners, aiming to keep payments balanced and services available. Comments on these changes are open until July 21, 2026, so stakeholders have time to weigh in before it’s finalized.
2026-10286 — Flexibility Enhancements of Weather Reporting Systems
The FAA is updating its rules to use weather reports made by the FAA and other approved sources instead of the National Weather Service, which no longer provides these reports. This change helps keep pilots and air traffic controllers informed with up-to-date weather info. Anyone involved in flying or managing flights should know about this, and comments on the proposal are due by June 22, 2026.
2026-10256 — Airworthiness Directives; Airbus Helicopters
If you fly Airbus EC130T2 helicopters, the FAA wants you to install a new fix on the tail rotor drive shaft and keep checking its vibration regularly. This update replaces old rules and stops certain parts from being used unless they meet new safety standards. You’ve got until July 6, 2026, to share your thoughts, and while this might cost some bucks, it’s all about keeping flights safe and smooth.
2026-10348 — Amendment of United States Area Navigation Route T-306 and Establishment of United States Area Navigation Route T-647
The FAA is updating flight routes in the Southwest to make flying safer and smoother. They’re changing Route T-306 by cutting part of it and extending another, plus creating a brand-new Route T-647. These changes help reduce traffic conflicts for pilots and take effect after July 6, 2026, with no extra costs for travelers.
2026-10293 — Prohibition of Remote Dispatching
The FAA wants to stop airplane dispatchers from working remotely, except in emergencies when the main center is down. This change affects all domestic, flag, and supplemental airline operators and aims to keep flight safety tight and clear. Comments on this rule are open until July 21, 2026, so airlines and dispatchers should get ready for a new way of working that could shake up their routines.
2026-10346 — Establishment of Class E Airspace; Monee, IL
The FAA wants to create new Class E airspace around Meadow Creek Airport in Monee, Illinois, to help pilots fly safely using instruments. This change mainly affects pilots and air traffic controllers and supports new flight procedures. If you have thoughts, you’ve got until July 6, 2026, to speak up—no costs for the public, just safer skies!
Previous / Next Documents
Previous: 2024-30209 — Securing the Information and Communications Technology and Services Supply Chain: Unmanned Aircraft Systems
The Department of Commerce wants your thoughts on new rules to keep drones and their tech safe from risky foreign control. This affects companies making or using drone parts linked to certain foreign groups and aims to protect U.S. security. Comments are open until March 4, 2025, so speak up now before any new rules roll out!
Next: 2024-30578 — Supplemental Nutrition Assistance Program Quality Control Review Handbook Incorporation by Reference
The USDA wants to officially include the SNAP Quality Control Review Handbook into its rules, making sure everyone gets a chance to comment before any changes happen. This affects people who manage SNAP case reviews and aims to keep the process clear and fair. Comments are open until March 4, 2024, with no immediate cost changes announced.