Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025

Summary

Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency. Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract. The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.

Summary from the Congressional Research Service. How we handle summaries

Where it stands

Passed one of the two chambers; it still needs the other.

House Committee on Armed Services · U.S. House of Representatives

Also referred to House Committee on Oversight and Government Reform · U.S. House of Representatives, Senate Committee on Armed Services · U.S. Senate.

Your position on this bill

Choose the position closest to yours. You'll sign in or create an account to save it.

Cosponsors

Related bills

• H.R. 8800National Defense Authorization Act for Fiscal Year 2027Related bill

As identified by Congress.gov.

Full history

1. Mar 4, 2025

   Sent to the executive

   Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

   U.S. Senate

2. Mar 4, 2025

   In committee

   Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

   U.S. House

3. Mar 3, 2025

   Considered Under Suspension of the rules. (consideration: cr H930-932)

   Considered under suspension of the rules. (consideration: CR H930-932)

4. Mar 3, 2025

   Considered Under Suspension of the rules. (consideration: cr H930-932)

   Considered under suspension of the rules. (consideration: CR H930-932)

5. Mar 3, 2025

   Considered Under Suspension of the rules. (consideration: cr H930-932)

   Considered under suspension of the rules. (consideration: CR H930-932)

Read the record

• Read on Congress.gov (opens in a new tab) The official record on Congress.gov.