IT security to be added to FAR

The General Services Administration is drafting a new acquisition regulation to integrate security into IT buys.

Among other things, the draft addition to the Federal Acquisition Regulation will require contracting officers to work with agency chief information officers to ensure security requirements are built into purchases. The regulation will mandate compliance with federal encryption standards and require security plans from and security training for contractors.