# 2026-22731: GSA Extends the Forms Behind Government Contractor IT Security

2026-22731, Information Collection; General Services Administration Acquisition Regulation; Implementation of Information Technology Security Requirements, is a Federal Register notice from General Services Administration published 2026-11-09, effective GSA will consider all comments received by January 8, 2027.; PRIA reads it as touching household money (as of 2026-11-11).

- Canonical: https://policyrisk.com/federal-register/2026-22731
- As of: 2026-11-11
- Plain-text twin of the page above; the HTML and this file carry the same facts.

## Facts
- Document number: 2026-22731
- Title: Information Collection; General Services Administration Acquisition Regulation; Implementation of Information Technology Security Requirements
- Type: Notice
- Agencies: General Services Administration
- Citation: 91 FR 70884
- Published: 2026-11-09
- Effective: GSA will consider all comments received by January 8, 2027.
- Comments close: 2027-01-08
- Significant: no
- Touches household money: yes
- Regulation identifier numbers: none
- Last updated: 2026-11-11

## In one line

GSA Extends the Forms Behind Government Contractor IT Security

## Summary

The General Services Administration (GSA) is asking for public feedback on extending their rules about IT security for government contracts. This extension keeps important security info collection going for three more years, helping protect government tech without adding extra hassle. If you work with government contracts or IT security, this affects you, and comments are open until January 8, 2027.

## Abstract

In accordance with the Paperwork Reduction Act of 1995 and OMB regulations, GSA invites the public to comment on an extension concerning the implementation of information technology security requirements. GSA invites comments on: whether the proposed collection of information is necessary, including whether the information will have practical utility; the accuracy of the estimate of the burden of the proposed information collection; ways to enhance the quality, utility, and clarity of the information to be collected; and ways to minimize the burden of the information collection on respondents, including the use of automated collection techniques or other forms of information technology. OMB has approved this information collection for use through March 31, 2027. GSA proposes that OMB extend its approval for use for three additional years beyond the current expiration date.

## Effects PRIA read

- IT-security information collection extended: cost, low. GSA proposes to extend the existing information collection for Implementation of Information Technology Security Requirements for three additional years beyond the current expiration (OMB approval is in place through March 31, 2027). The collection continues to require responses from 35 respondents…
- Contractors must follow GSA IT policies: cost, low. If you are a contractor accessing information systems that support GSA operations or assets, you must comply with GSA IT security policies, specifically CIO 09-48 and CIO 12-2018. GSA states these policy compliance requirements apply to contractors accessing GSA, another agency, contractor, or othe…

## Related documents

- [2026-19160](https://policyrisk.com/federal-register/2026-19160): Federal Acquisition Regulation: Revolutionary Federal Acquisition Regulation Overhaul Parts 16, 17, and 35, 2026-09-18
- [2026-15368](https://policyrisk.com/federal-register/2026-15368): General Services Administration Property Management Regulation (GSPMR); Nondiscrimination on the Basis of the Age Act Regulation for Progra…, 2026-07-30
- [2026-04486](https://policyrisk.com/federal-register/2026-04486): General Services Property Management Regulation (GSPMR); Nondiscrimination on the Basis of the Age Act Regulation for Programs or Activitie…, 2026-03-06
- [2025-22915](https://policyrisk.com/federal-register/2025-22915): Federal Management Regulation; Aligning the Federal Management Regulation (FMR) With the Administration's Deregulatory Priorities, 2025-12-16
- [2025-22289](https://policyrisk.com/federal-register/2025-22289): Federal Travel Regulation; Reorganizing and Streamlining the Federal Travel Regulation To Improve Operational Efficiency, 2025-12-08
- [2025-10610](https://policyrisk.com/federal-register/2025-10610): Federal Acquisition Regulation: Small Business Participation on Certain Multiple-Award Contracts, 2025-06-12

## Sources
- [2026-22731 on federalregister.gov](https://www.federalregister.gov/documents/2026/11/09/2026-22731/information-collection-general-services-administration-acquisition-regulation-implementation-of)
- [2026-22731 as published (PDF)](https://www.govinfo.gov/content/pkg/FR-2026-11-09/pdf/2026-22731.pdf)

## Related
- [Previous: 2026-22730, Certain Foundry Coke; Notice of a Commission Determination Not To Review an Ini…](https://policyrisk.com/federal-register/2026-22730)
- [Next: 2026-22733, Collection of Information Under Review by Office of Management and Budget; OMB…](https://policyrisk.com/federal-register/2026-22733)
- [All Federal Register documents](https://policyrisk.com/federal-register)

Source: PRIA, https://policyrisk.com/federal-register/2026-22731 (as of 2026-11-11).