Before you vote › Federal bills
H.R. 872: Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
119th Congress · introduced 2025-01-31 · Government Operations and Politics · Latest: Received in the Senate and Read twice and referred to the Committee on Homeland Security and Governmental Affairs.
federal
Official title
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Plain summary
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025 This bill requires revisions to acquisition regulations related to information systems vulnerabilities for certain federal contractors. The revisions apply to contractors whose contract is at or above the simplified acquisition threshold ($250,000 in most cases) or that use, operate, manage, or maintain a federal information system on behalf of an agency. Under the bill, the Office of Management and Budget must review the Federal Acquisition Regulation (FAR) and recommend updated contract requirements and language for contractor vulnerability disclosure programs. (Such programs establish processes for identifying, reporting, and mitigating information system vulnerabilities discovered by security researchers, software developers, and others.) The recommendations must include requirements to ensure that such contractors implement vulnerability disclosure policies consistent with guidelines from the National Institute of Standards and Technology. The Federal Acquisition Regulation Council must review these recommendations and update the FAR as necessary to incorporate requirements for such contractors to receive information about potential security vulnerabilities in contractor information systems used in performance of contract. The Department of Defense (DOD) must conduct a similar review and update of regulations with respect to the DOD Supplement to the FAR.
Congressional Research Service summary (Introduced in House), quoted unchanged (nonpartisan). Read the source.
What a vote does
A “Yea” vote
If it passes both chambers and is signed, it becomes law.
A “Nay” vote
If it is not passed, current law stays as it is.
PSI Sci description of the legislative step (not an opinion).
What does this mean? (plain words)
Official text
Federal Contractor Cybersecurity Vulnerability Reduction Act of 2025
Source: Congressional Research Service summary (Introduced in House)
AI explanation – may be wrong, check the official text
No AI explanation yet. It takes up to a minute to write and is then saved for everyone.
Limited to a few requests an hour per person.
The strongest published arguments
Arguments for (supporters)
Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.
Arguments against (opponents)
Needs sources: no published arguments on this side yet. We only show items backed by a published source. Suggest one.
Alternatives
Needs sources: no published alternatives yet (for example a different bill, a law instead of an amendment, or keeping current law). We only show items backed by a published source. Suggest one.
Officials and money
Sponsor: Rep. Mace, Nancy [R-SC-1] · 1 cosponsors
Money: No cost estimate published yet. No linked contracts or vendors yet.
Words on this page, explained (2)
- Bill
- A proposed law. It becomes law only if it passes the legislature and is signed by the president or governor (or a veto is overridden).
- Securities
- Financial investments that can be bought and sold, such as stocks and bonds.
Plain meanings written from linked sources. All words.
Sources
- Congressional Research Service summary (Introduced in House)
- Congress.gov
- Data: GovInfo BILLSTATUS bulk data (Library of Congress), BILLSTATUS-119hr872.xml <https://www.govinfo.gov/bulkdata/BILLSTATUS/119/hr>
Record fed-us-cong119-hr872 · catalog fed-us-congress-bills-cong119 · updated 2026-11-03 by psicol fed-bills