HR 872
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Jurisdiction
US Congress
Session
119th Congress (2025-2026)
Last updated at
Jun 14, 2026, 6:35 AM
Take action
Sign in to record your position, submit testimony, or contact your legislator.
Sign in to take action- Introduced
- Passed House
- Passed Senate
- To President
- Became Law
Bill overview
This bill, the Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025, aims to improve cybersecurity practices for federal contractors. It directs the Office of Management and Budget to update Federal Acquisition Regulation (FAR) contract requirements to include vulnerability disclosure policies aligned with NIST guidelines. The Federal Acquisition Regulation Council must then revise the FAR to ensure contractors receive information about potential security vulnerabilities in systems they manage for the government, with the Department of Defense also updating its regulations. Agencies and the DoD can apply for waivers under specific circumstances, subject to congressional notification.
Sponsors
Official sponsors from legislative records.
Primary sponsor
Cosponsor
Arguments in favor
Reasons to support this legislation.
No arguments in favor have been submitted.
Submit yoursArguments opposed
Reasons to oppose this legislation.
No arguments opposed have been submitted.
Submit yoursRead the latest version inline or switch to a previous version.