Federal Acquisition Regulation: Strengthening America's Cybersecurity Workforce
Published Date: 1/3/2025
Proposed Rule
Summary
The Department of Defense, GSA, and NASA want to update government rules to make sure contractors hiring IT and cybersecurity workers use clear skill standards. This helps build a stronger, smarter cybersecurity team to protect America better. If you’re involved in these contracts, get ready to follow new guidelines and share your thoughts by March 4, 2025.
Analyzed Economic Effects
5 provisions identified: 1 benefits, 4 costs, 0 mixed.
Scope: Number of Firms Affected (Estimate)
Based on FY2021–FY2023 FPDS data, the Government estimates about 2,734 unique entities (including about 1,745 unique small entities) may need to ensure contract deliverables are consistent with the NICE Framework. This estimate assumes approximately 50 percent of entities awarded IT services contracts will be awarded IT support or cybersecurity support service contracts.
Agencies Must Use NICE Framework
If an agency is buying information technology support services or cybersecurity support services, the agency must describe cybersecurity workforce tasks, knowledge, skills, and work roles that align with the NICE Workforce Framework (NIST SP 800-181) in acquisition plans and requirements documents. This alignment must be in effect at the time the solicitation is issued and is required by changes to FAR sections 7.105, 11.002, 12.202, and 39.104.
Contractors Must Align Offers and Deliverables
If you offer information technology support services or cybersecurity support services to the federal government, any offers, quotes, and contract deliverables must align with the NICE Workforce Framework (NIST SP 800-181) in effect at the time of the solicitation. The proposed rule states contractors will be expected to ensure consistency with the NICE Framework when it is specified in acquisitions.
Regulatory Familiarization: Estimated 20 Hours
The proposed rule estimates that contractors providing information technology support services and cybersecurity support services will need about 20 hours to become familiar with the NICE Framework (NIST SP 800-181) and related tools. Contractors may also need to update policies and procedures to comply when solicitations require alignment with the NICE Framework.
No New Clauses or Information Collections
The proposed rule states it does not create new solicitation provisions or contract clauses and does not add information collection requirements under the Paperwork Reduction Act. The Government also states there are no new reporting, recordkeeping, or other compliance requirements in the rule.
Personalized for You
How does this regulation affect your finances?
Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.
Key Dates
Related Federal Register Documents
2026-20735, Extensions of Credit to Insiders
The FDIC is giving banks and insiders more time to share their thoughts on new rules about loans to insiders by extending the comment deadline to November 4, 2026. These rules aim to keep lending fair and safe, especially when insiders like executives or board members borrow money. If you’re involved with banks or interested in fair lending, now’s your chance to speak up before the final rules are set!
2026-20790, Application of the Personal Responsibility and Work Opportunity Reconciliation Act of 1996 to the Refunded Portion of Certain Federal Refundable Tax Credits; Hearing Cancellation
The IRS canceled a public hearing set for October 14, 2026, about new rules on how certain refunded tax credits count as federal benefits under a 1996 law. This affects individuals who get refundable tax credits, clarifying how those refunds are treated but with no immediate money changes. Since no one signed up to speak, the hearing won’t happen, but the proposed rules are still out for public comment.
2026-20721, Requirements for Additional Traceability Records for Certain Foods: Enforcement Policy for Certain Retail Food Establishments and Restaurants; Draft Guidance for Industry; Availability
The FDA is sharing a draft plan about new food tracking rules that mostly won’t apply to certain stores and restaurants right now. If you run a retail food place or restaurant, you don’t have to worry about extra paperwork just yet, but the FDA wants your feedback by November 23, 2026. This helps them decide the final rules without causing extra costs or hassle for small businesses.
2026-20650, Low-Value Shipments
The U.S. Customs and Border Protection is proposing new rules to make importing low-value goods (under $2,500) easier and more electronic, especially for mail shipments. They want to add new data requirements for carriers and require bonds for some shipments to keep things safe and smooth. If you’re involved in shipping or receiving small packages, get ready to adapt by December 7, 2026, when comments on these changes close.
2026-20660, Optional Practical Training Fees
Starting soon, international students using Optional Practical Training (OPT) will face new fees: $70,000 for their first OPT and $30,000 for any extra OPT periods. This change aims to stop fraud and protect U.S. workers. If you want to share your thoughts, make sure to comment by November 9, 2026!
2026-20677, Airworthiness Directives; Various Helicopters
The FAA wants to update rules for helicopters with radio altimeters because 5G signals in Canada can mess with their readings. Pilots will need to follow new flight manual limits when flying in Canadian airspace to keep things safe. Comments on this change are open until November 23, 2026, and it mainly affects helicopter operators flying near Canada.
Previous / Next Documents
Previous: 2024-30209, Securing the Information and Communications Technology and Services Supply Chain: Unmanned Aircraft Systems
The Department of Commerce wants your thoughts on new rules to keep drones and their tech safe from risky foreign control. This affects companies making or using drone parts linked to certain foreign groups and aims to protect U.S. security. Comments are open until March 4, 2025, so speak up now before any new rules roll out!
Next: 2024-30578, Supplemental Nutrition Assistance Program Quality Control Review Handbook Incorporation by Reference
The USDA wants to officially include the SNAP Quality Control Review Handbook into its rules, making sure everyone gets a chance to comment before any changes happen. This affects people who manage SNAP case reviews and aims to keep the process clear and fair. Comments are open until March 4, 2024, with no immediate cost changes announced.