View Rule

View EO 12866 Meetings Printer-Friendly Version     Download RIN Data in XML
FAR RIN: 9000-AO49 Publication ID: Spring 2025 
Title: Federal Acquisition Regulation (FAR); FAR Case 2023-002, Supply Chain Software Security 
Abstract:
This rule will require Federal agencies to only use software that complies with secure software development practices. Software producers will be required to comply and attest to complying with certain secure software development requirements by completing a common form. This rule is being issued in accordance with section 4(n) and 4(k) of the Executive Order 14028 titled "Improving the Nation's Cybersecurity” and Office of Management and Budget Memorandums 22-18 and 23-16.
 
Agency: DOD/GSA/NASA (FAR)(FAR)  Priority: Other Significant 
RIN Status: Previously published in the Unified Agenda Agenda Stage of Rulemaking: Proposed Rule Stage 
Major: No  Unfunded Mandates: No 
EO 14192 Designation: Not subject to, not significant 
CFR Citation: 48 CFR 1    48 CFR 2    48 CFR 13    48 CFR 39    48 CFR 52   
Legal Authority: 40 U.S.C. 121(c)    10 U.S.C. ch. 4    10 U.S.C. ch. 137 legacy provisions    10 U.S.C. 3016    51 U.S.C. 20113   
Legal Deadline:  None
Timetable:
Action Date FR Cite
NPRM  06/00/2026 
NPRM Comment Period End  08/00/2026 
Regulatory Flexibility Analysis Required: YES  Government Levels Affected: Federal 
Small Entities Affected: Businesses  Federalism: No 
Included in the Regulatory Plan: No 
RIN Information URL: https://www.regulations.gov/   Public Comment URL: https://www.regulations.gov/  
RIN Data Printed in the FR: Yes 
Agency Contact:
FAR Policy
DOD/GSA/NASA (FAR)
1800 F Street, NW,
Washington, DC 20405
Phone:202 969-4075
Email: farpolicy@gsa.gov