1601-AA76 201804 Unified Agenda of Federal Regulatory and Deregulatory Actions 1601 Office of the Secretary OS 1600 Department of Homeland Security DHS Homeland Security Acquisition Regulation: Safeguarding of Controlled Unclassified Sensitive Information (HSAR Case 2015-001)

This Homeland Security Acquisition Regulation (HSAR) rule would implement security and privacy measures to ensure Controlled Unclassified Information (CUI), such as Personally Identifiable Information (PII), is adequately safeguarded by DHS contractors. Specifically, the rule would define key terms, outline security requirements and inspection provisions for contractor information technology (IT) systems that store, process or transmit CUI, institute incident notification and response procedures, and identify post-incident credit monitoring requirements.

]]> Other Significant Previously Published in The Unified Agenda Final Rule Stage No No Fully or Partially Exempt 48 CFR 3001 48 CFR 3002 48 CFR 3004 48 CFR 3052 5 U.S.C. 301 to 302 41 U.S.C. 1302 41 U.S.C. 1303 41 U.S.C. 1707 No NPRM 01/19/2017 82 FR 6429 NPRM Comment Period End 03/20/2017 NPRM Comment Period Extended 03/20/2017 82 FR 14341 NPRM Comment Period Extended End 04/19/2017 Final Rule 10/00/2018 Yes Businesses Federal No No www.regulations.gov www.regulations.gov Yes No Shaundra Ford Procurement Analyst 1600 Department of Homeland Security DHS 202 447-0056 shaundra.ford@hq.dhs.gov Office of the Chief Procurement Officer, Acquisition Policy and Legislation, 245 Murray Lane SW, Washington DC 20528 Nancy Harvey Policy Analyst 1600 Department of Homeland Security DHS 202 447-0956 nancy.harvey@hq.dhs.gov Office of the Chief Procurement Officer, Room 3636-15, 301 7th Street SW, Washington DC 20528