Skip to main content
HR 872 119th Congress House Government Operations and Politics Computer security and identity theft Government information and archives Public contracts and procurement

Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025

Introduced: January 31, 2025 Introduced by: Mace, Nancy Republican · South Carolina See on congress.gov
Sign in to write a letter Sign in to watch
 Everywhere this bill has been 9 steps
Introduced
In committee
Reported out
Passed House
Passed Senate
To President
Became law
Mar 4, 2025
Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
Mar 3, 2025
Motion to reconsider laid on the table Agreed to without objection.
Mar 3, 2025
On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
Mar 3, 2025
Passed/agreed to in House: On motion to suspend the rules and pass the bill, as amended Agreed to by voice vote. (text: CR H930-931)
Mar 3, 2025
DEBATE - The House proceeded with forty minutes of debate on H.R. 872.
Mar 3, 2025
Considered under suspension of the rules. (consideration: CR H930-932)
Mar 3, 2025
Mr. Comer moved to suspend the rules and pass the bill, as amended.
Jan 31, 2025
Referred to the Committee on Oversight and Government Reform, and in addition to the Committee on Armed Services, for a period to be subsequently determined by the Speaker, in each case for consideration of such provisions as fall within the jurisdiction of the committee concerned.
Jan 31, 2025
Introduced in House
 Ask about this bill AI · grounded in the bill text

Have a question about what this bill does? Ask in plain English; the answer is drawn from the bill's actual text and official record, and it'll tell you when something isn't in the text rather than guess.

AI answers can be imperfect; always confirm against the full bill text.

 Plain-English summary Congressional Research Service

Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025

This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency. 

Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract.

The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.

What's happening now March 4, 2025

Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.

 Bill text 3 versions

Source documents hosted by congress.gov.

 Committees of jurisdiction 3
 Lobbying activity 26

Registered lobbyists who named this bill in their disclosure filings. Source: federal Lobbying Disclosure Act filings.

See all 26 filings →
 Cosponsors 1
All 1 Democratic 1
D
Brown, Shontel M.
Ohio · Jan 31, 2025
Cite this page click to expand
APA
U.S. Congress. (2026). H.R. 872: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025. 119th Congress. Open America. https://openamerica.io/bill/119-HR-872/
MLA
"H.R. 872: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025." 119th Congress, 2026, Open America, https://openamerica.io/bill/119-HR-872/.
Bluebook (legal)
H.R. 872, 119th Cong. (2026), https://openamerica.io/bill/119-HR-872/.
Markdown link
[H.R. 872: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025](https://openamerica.io/bill/119-HR-872/)
Report a problem