H.R. 872: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
A House bill (H.R.) in the 119th U.S. Congress.
Overview
| Congress | 119th U.S. Congress (2025–2026) |
|---|---|
| Type | House bill (H.R.) |
| Originating chamber | House |
| Introduced | 2025-01-31 |
| Sponsor | Rep. Mace, Nancy [R-SC-1] |
| Policy area | Government Operations and Politics |
| Cosponsors | 1 |
| Latest action | 2025-03-04 — Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs. |
| Last updated | 2026-07-18 |
Summary
Official summary (Introduced in House, 2025-01-31):
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency.
Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract.
The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.
Cosponsors (1)
| Name | Party / state |
|---|---|
| Shontel M. Brown | D OH (original cosponsor) 2025-01-31 |
Full text & official record
The official bill text, section-by-section summary, amendments, committee reports, and the complete legislative timeline for H.R. 872 are published by Congress on congress.gov.
View H.R. 872 on congress.gov →
Frequently asked questions
What is H.R. 872?
H.R. 872 is a House bill (H.R.) introduced in the 119th U.S. Congress, originating in the House. Official title: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025.
Where can I read the full bill text?
The full text, cosponsors, amendments, and legislative status for H.R. 872 are available on congress.gov.
Bill data: congress.gov API (official congressional records).