<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<REGINFO_RIN_DATA xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" RUN_DATE="2026-04-20-04:00" xsi:noNamespaceSchemaLocation="https://www.reginfo.gov/public/xml/REGINFO_XML_Ver10262011.xsd">
    <RIN_INFO>
        <RIN>9000-AO49</RIN>
        <PUBLICATION>
            <PUBLICATION_ID>202304</PUBLICATION_ID>
            <PUBLICATION_TITLE>Unified Agenda of Federal Regulatory and Deregulatory Actions</PUBLICATION_TITLE>
        </PUBLICATION>
        <AGENCY>
            <CODE>9000</CODE>
            <NAME>DOD/GSA/NASA (FAR)</NAME>
            <ACRONYM>FAR</ACRONYM>
        </AGENCY>
        <RULE_TITLE>Federal Acquisition Regulation (FAR); FAR Case 2023-002, Supply Chain Software Security</RULE_TITLE>
        <ABSTRACT><![CDATA[<!DOCTYPE html>
<html>
<head>
</head>
<body>
<p>DoD, GSA, and NASA are proposing to amend the Federal Acquisition Regulation (FAR) to require suppliers of software available for purchase by agencies to comply with, and attest to complying with, applicable secure software development requirements in accordance with section 4(n) of Executive Order (EO) 14028, Improving the Nation's Cybersecurity. Office of Management and Budget Memorandum 18-22 requires agencies to take appropriate steps to comply with applicable secure software development requirements in accordance with section 4(k) of EO 14028 prior to this FAR rule becoming effective.</p>
</body>
</html>]]></ABSTRACT>
        <PRIORITY_CATEGORY>Other Significant</PRIORITY_CATEGORY>
        <RIN_STATUS>Previously Published in The Unified Agenda</RIN_STATUS>
        <RULE_STAGE>Proposed Rule Stage</RULE_STAGE>
        <MAJOR>No</MAJOR>
        <UNFUNDED_MANDATE_LIST>
            <UNFUNDED_MANDATE>No</UNFUNDED_MANDATE>
        </UNFUNDED_MANDATE_LIST>
        <CFR_LIST>
            <CFR>48 CFR 1</CFR>
            <CFR>48 CFR 39</CFR>
            <CFR>48 CFR 52</CFR>
        </CFR_LIST>
        <LEGAL_AUTHORITY_LIST>
            <LEGAL_AUTHORITY>40 U.S.C. 121(c)</LEGAL_AUTHORITY>
            <LEGAL_AUTHORITY>10 U.S.C. ch. 4</LEGAL_AUTHORITY>
            <LEGAL_AUTHORITY>10 U.S.C. ch. 137 legacy provisions</LEGAL_AUTHORITY>
            <LEGAL_AUTHORITY>10 U.S.C. 3016</LEGAL_AUTHORITY>
            <LEGAL_AUTHORITY>51 U.S.C. 20113</LEGAL_AUTHORITY>
        </LEGAL_AUTHORITY_LIST>
        <LEGAL_DLINE_LIST/>
        <RPLAN_ENTRY>No</RPLAN_ENTRY>
        <TIMETABLE_LIST>
            <TIMETABLE>
                <TTBL_ACTION>NPRM</TTBL_ACTION>
                <TTBL_DATE>09/00/2023</TTBL_DATE>
            </TIMETABLE>
            <TIMETABLE>
                <TTBL_ACTION>NPRM Comment Period End</TTBL_ACTION>
                <TTBL_DATE>11/00/2023</TTBL_DATE>
            </TIMETABLE>
        </TIMETABLE_LIST>
        <RFA_REQUIRED>Yes</RFA_REQUIRED>
        <SMALL_ENTITY_LIST>
            <SMALL_ENTITY>Businesses</SMALL_ENTITY>
        </SMALL_ENTITY_LIST>
        <GOVT_LEVEL_LIST>
            <GOVT_LEVEL>Federal</GOVT_LEVEL>
        </GOVT_LEVEL_LIST>
        <FEDERALISM>No</FEDERALISM>
        <ENERGY_AFFECTED>No</ENERGY_AFFECTED>
        <FURTHER_INFO_URL>https://www.regulations.gov/</FURTHER_INFO_URL>
        <PUBLIC_COMMENT_URL>https://www.regulations.gov/</PUBLIC_COMMENT_URL>
        <PRINT_PAPER>Yes</PRINT_PAPER>
        <INTERNATIONAL_INTEREST>No</INTERNATIONAL_INTEREST>
        <AGENCY_CONTACT_LIST>
            <CONTACT>
                <FIRST_NAME>Marissa</FIRST_NAME>
                <LAST_NAME>Ryba</LAST_NAME>
                <TITLE>Procurement Analyst</TITLE>
                <AGENCY>
                    <CODE>9000</CODE>
                    <NAME>DOD/GSA/NASA (FAR)</NAME>
                    <ACRONYM>FAR</ACRONYM>
                </AGENCY>
                <PHONE>314 586-1280</PHONE>
                <EMAIL>marissa.ryba@gsa.gov</EMAIL>
                <MAILING_ADDRESS>
                    <STREET_ADDRESS>1800 F Street, NW,</STREET_ADDRESS>
                    <CITY>Washington</CITY>
                    <STATE>DC</STATE>
                    <ZIP>20405</ZIP>
                </MAILING_ADDRESS>
            </CONTACT>
        </AGENCY_CONTACT_LIST>
    </RIN_INFO>
</REGINFO_RIN_DATA>
