9000-AO49 202504 Unified Agenda of Federal Regulatory and Deregulatory Actions 9000 DOD/GSA/NASA (FAR) FAR Federal Acquisition Regulation (FAR); FAR Case 2023-002, Supply Chain Software Security

This rule will require Federal agencies to only use software that complies with secure software development practices. Software producers will be required to comply and attest to complying with certain secure software development requirements by completing a common form. This rule is being issued in accordance with section 4(n) and 4(k) of the Executive Order 14028 titled "Improving the Nation's Cybersecurity” and Office of Management and Budget Memorandums 22-18 and 23-16.

]]> Other Significant Previously Published in The Unified Agenda Proposed Rule Stage No No Not subject to, not significant 48 CFR 1 48 CFR 2 48 CFR 13 48 CFR 39 48 CFR 52 40 U.S.C. 121(c) 10 U.S.C. ch. 4 10 U.S.C. ch. 137 legacy provisions 10 U.S.C. 3016 51 U.S.C. 20113 No NPRM 06/00/2026 NPRM Comment Period End 08/00/2026 YES Businesses Federal No No https://www.regulations.gov/ https://www.regulations.gov/ Yes No FAR Policy 9000 DOD/GSA/NASA (FAR) FAR 202 969-4075 farpolicy@gsa.gov 1800 F Street, NW, Washington DC 20405