2026-22731NoticeWallet

GSA Extends the Forms Behind Government Contractor IT Security

Published Date: 11/9/2026

Notice

Summary

The General Services Administration (GSA) is asking for public feedback on extending their rules about IT security for government contracts. This extension keeps important security info collection going for three more years, helping protect government tech without adding extra hassle. If you work with government contracts or IT security, this affects you, and comments are open until January 8, 2027.

Analyzed Economic Effects

2 provisions identified: 0 benefits, 2 costs, 0 mixed.

IT-security information collection extended

GSA proposes to extend the existing information collection for Implementation of Information Technology Security Requirements for three additional years beyond the current expiration (OMB approval is in place through March 31, 2027). The collection continues to require responses from 35 respondents, with 2 responses per respondent (70 total responses), at 5 hours per response for a total of 350 burden hours.

Contractors must follow GSA IT policies

If you are a contractor accessing information systems that support GSA operations or assets, you must comply with GSA IT security policies, specifically CIO 09-48 and CIO 12-2018. GSA states these policy compliance requirements apply to contractors accessing GSA, another agency, contractor, or other source systems.

Personalized for You

How does this regulation affect your finances?

Personalize government policy and PRIA will tell you what this federal register document means for your household, plus every other regulation we track. PRIA reads each provision against your financial profile to show you exactly what matters to your wallet.

Key Dates

Published Date
Comments Due
11/9/2026
1/8/2027

Department and Agencies

Department
Independent Agency
Agency
General Services Administration
Source: View HTML

Related Federal Register Documents

Previous / Next Documents

Back to Federal Register