New Cybersecurity Rules Enhance Threat Reporting and Standards

On July 7, 2026, two new cybersecurity rules were published to improve the protection of Federal information systems. The first rule mandates increased sharing of cyber threat information between the Government and contractors, requiring them to report incidents accurately. The second rule standardizes cybersecurity contractual requirements across agencies for unclassified Federal systems. These initiatives stem from recommendations by the Office of Management and Budget and the Department of Homeland Security, aligning with Executive Order 14028 on improving national cybersecurity. The rules aim to enhance incident response and remediation capabilities across federal entities and contractors.

Key Points: • New rules require contractors to report cyber incidents to the Federal Government. • Standardization of cybersecurity requirements across agencies for unclassified systems is mandated. • Initiatives are based on recommendations from the Office of Management and Budget and DHS.