Without Fanfare or Opportunity for Public Comment, GSA Changes Cybersecurity Requirements for Contractors

In a recent update to internal procedural guidance, the General Services Administration (GSA) has established a new framework of security requirements and privacy controls for contractor information systems that process, store, or transmit controlled unclassified information (CUI). Implementation of these requirements could affect some companies’ eligibility to perform GSA contracts or otherwise impose new security burdens on contractors.

Read the full blog post.