H.R. 872 Passed the House Government Operations and Politics

Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025

To require covered contractors implement a vulnerability disclosure policy consistent with NIST guidelines, and for other purposes.

  1. Introduced
  2. Committee
  3. Passed House
  4. Passed Senate
  5. To President
  6. Became law
Sponsor Rep. Mace, Nancy [R-SC-1] Introduced January 31, 2025 Cosponsors 1 (1 D) Latest action March 4, 2025

Summary

Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency. 
Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract.
The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.

Summary by the Congressional Research Service, Library of Congress.

Congress.gov

Actions

  1. Mar 4, 2025 Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
  2. Mar 3, 2025 Motion to reconsider laid on the table Agreed to without objection.
  3. Mar 3, 2025 On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
  4. Mar 3, 2025 DEBATE - The House proceeded with forty minutes of debate on H.R. 872.
  5. Mar 3, 2025 Considered under suspension of the rules. (consideration: CR H930-932)
  6. Mar 3, 2025 Mr. Comer moved to suspend the rules and pass the bill, as amended.
  7. Jan 31, 2025 Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
  8. Jan 31, 2025 Introduced in House

Congressional and federal records come from official public sources: the House Clerk, the U.S. Senate, GovInfo and the Library of Congress (bill status), the Federal Register, and the congress-legislators project. They are copied on a schedule and may lag the official record by a few hours; the official sources govern. News and coverage counts are drawn from the 4Conservative index and reflect what the press published, not 4Conservative's views. Nothing here is an endorsement of any candidate, party or position. Terms of use.