The General Services Administration (GSA) is proposing new rules shaping how contractors protect government information on the IT systems they manage.
Tucked in a Friday Federal Register post detailing the Unified Agenda of Federal Regulatory and Deregulatory Actions, two proposed rules — GSAR Case 2016-G511 and 2016-G515 — call for amending the General Services Administration Acquisition Regulation to include requirements for contractors to safeguard GSA information in a solicitation’s statement of work, as well as the procedures for they inform the agency of a potential breach.
GSAR Case 2016-G511 allows contracting officers to implement agency cyber requirements and standards into each solicitation, providing a centralized cybersecurity guidance across the enterprise for contractors to adhere to.
Keep reading this article at: https://www.fedscoop.com/gsa-proposes-2-new-cybersecurity-reporting-rules-contractors/
Resources for complying with DoD’s current contractor cybersecurity rules may be found here: https://gtpac.org/cybersecurity-training-video/
The General Services Administration (GSA) plans to officialize regulations on how contractors should handle and protect sensitive information for federal clients, as well as report any incidents that could put that information at risk.
