Proposed Rule Would Impose Cyber Regulations on All Federal Contractors

Womble Bond Dickinson – The Federal Acquisition Regulatory (FAR) Council has published a proposed rule (FAR Case 2026-001) which, if adopted, would require all federal contractors to implement the cybersecurity requirements contained in the National Institute of Technology and Standards Special Publication 800-171 (NIST 800-171), Revision 3 for any systems that contain Controlled Unclassified Information (CUI).