View Rule
View EO 12866 Meetings | Printer-Friendly Version Download RIN Data in XML |
GSA | RIN: 3090-AJ84 | Publication ID: Fall 2021 |
Title: General Services Administration Acquisition Regulation (GSAR); GSAR Case 2016-G511, Contract Requirements for GSA Information Systems | |
Abstract:
The General Services Administration (GSA) is amending the General Services Administration Acquisition Regulation (GSAR) to streamline and update requirements for contracts that involve GSA information systems. GSA's policies on cybersecurity and other information technology requirements have been previously issued and communicated by the Office of the Chief Information Officer through the GSA public website. By incorporating these requirements into the GSAR, the GSAR will provide centralized guidance to ensure consistent application across the organization. This rule supports the national security priority. This rule will require contracting officers to incorporate applicable GSA cybersecurity requirements within the statement of work to ensure compliance with Federal cybersecurity requirements and implement best practices for preventing cyber incidents. Contract requirements for internal information systems, external contractor systems, cloud systems, and mobile systems will be covered by this rule. This rule will also update existing GSAR provision 552.239-70, Information Technology Security Plan and Security Authorization, and GSAR clause 552.239-71, Security Requirements for Unclassified Information Technology Resources, to only require the provision and clause when the contract will involve information or information systems connected to a GSA network. |
|
Agency: General Services Administration(GSA) | Priority: Other Significant |
RIN Status: Previously published in the Unified Agenda | Agenda Stage of Rulemaking: Final Rule Stage |
Major: No | Unfunded Mandates: No |
CFR Citation: 48 CFR 501 48 CFR 502 48 CFR 511 48 CFR 539 48 CFR 552 48 CFR 570 | |
Legal Authority: 40 U.S.C. 121(c) |
Legal Deadline:
None |
||||||||||||
Timetable:
|
Regulatory Flexibility Analysis Required: Yes | Government Levels Affected: Federal |
Small Entities Affected: Businesses | Federalism: No |
Included in the Regulatory Plan: No | |
RIN Information URL: www.regulations.gov | Public Comment URL: www.regulations.gov |
RIN Data Printed in the FR: Yes | |
Agency Contact: Johnnie McDowell Procurement Analyst, GSA Acquisition Policy Division General Services Administration 1800 F Street NW, Washington, DC 20405 Phone:202 718-6112 Email: johnnie.mcdowell@gsa.gov |