Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Latest action · Mar 4, 2025 Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Progress
Where this bill reached, and when. A stage with no date was not reached; one that failed a vote and later carried shows the date it carried.
- IntroducedJan 31, 2025
- Passed HouseMar 3, 2025
- Passed SenateNot reached
- To the PresidentNot reached
- Became lawNot reached
Summary
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency.
Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract.
The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.
Cosponsors 1
Members who signed on, in the order they did. All signed on Jan 31, 2025.
| Seat | Cosponsor | Signed on | |
|---|---|---|---|
| D-OH | Shontel M. Brown | Original | Jan 31, 2025 |
Actions 9
Everything that happened, newest first.
- Mar 4, 2025Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
- Mar 3, 2025Considered under suspension of the rules. (consideration: CR H930-932)
- Mar 3, 2025DEBATE - The House proceeded with forty minutes of debate on H.R. 872.
- Mar 3, 2025Motion to reconsider laid on the table Agreed to without objection.
- Mar 3, 2025Mr. Comer moved to suspend the rules and pass the bill, as amended.
Related bills 1
Companion bills and other measures the record links to this one.
| Bill | Title | Relationship | Latest action |
|---|---|---|---|
| HR 8800 | National Defense Authorization Act for Fiscal Year 2027 | Related bill | Sep 14, 2026 |
Subjects
Assigned by the Library of Congress. Policy area: Government Operations and Politics.
Text 3
Each version as it was printed, newest first.
- Mar 4, 2025Referred in Senate
- Mar 3, 2025Engrossed in House
- Jan 31, 2025Introduced in House
Everything here is as published by Congress: the summary is the Congressional Research Service's, the action wording is the clerks', and the subjects are the Library of Congress's. How far it got is read from the actions themselves, taking the most recent one of each kind, so a bill that failed a vote and later passed is shown as having passed. Records come from this bill on Congress.gov and govinfo.gov.
