Skip to main content
Notice2026-22731

Information Collection; General Services Administration Acquisition Regulation; Implementation of Information Technology Security Requirements

Primary source

Metadata and text below are from the Federal Register, a public-domain U.S. government work. Always verify the official published version before relying on it for any legal matter.

Published
November 9, 2026

Issuing agencies

General Services Administration

Abstract

In accordance with the Paperwork Reduction Act of 1995 and OMB regulations, GSA invites the public to comment on an extension concerning the implementation of information technology security requirements. GSA invites comments on: whether the proposed collection of information is necessary, including whether the information will have practical utility; the accuracy of the estimate of the burden of the proposed information collection; ways to enhance the quality, utility, and clarity of the information to be collected; and ways to minimize the burden of the information collection on respondents, including the use of automated collection techniques or other forms of information technology. OMB has approved this information collection for use through March 31, 2027. GSA proposes that OMB extend its approval for use for three additional years beyond the current expiration date.

Full Text

<html>
<head>
<title>Federal Register, Volume 91 Issue 215 (Monday, November 9, 2026)</title>
</head>
<body><pre>
[Federal Register Volume 91, Number 215 (Monday, November 9, 2026)]
[Notices]
[Pages 70884-70885]
From the Federal Register Online via the Government Publishing Office [<a href="http://www.gpo.gov">www.gpo.gov</a>]
[FR Doc No: 2026-22731]


=======================================================================
-----------------------------------------------------------------------

GENERAL SERVICES ADMINISTRATION

[OMB Control No. 3090-0300; Docket No. 2026-0562; Sequence No. 1]


Information Collection; General Services Administration 
Acquisition Regulation; Implementation of Information Technology 
Security Requirements

AGENCY: Office of Acquisition Policy, General Services Administration 
(GSA).

ACTION: Notice; request for comments.

-----------------------------------------------------------------------

SUMMARY: In accordance with the Paperwork Reduction Act of 1995 and OMB 
regulations, GSA invites the public to comment on an extension 
concerning the implementation of information technology security 
requirements. GSA invites comments on: whether the proposed collection 
of information is necessary, including whether the information will 
have practical utility; the accuracy of the estimate of the burden of 
the proposed information collection; ways to enhance the quality, 
utility, and clarity of the information to be collected; and ways to 
minimize the burden of the information collection on respondents, 
including the use of automated collection techniques or other forms of 
information technology. OMB has approved this information collection 
for use through March 31, 2027. GSA proposes that OMB extend its 
approval for use for three additional years beyond the current 
expiration date.

DATES: GSA will consider all comments received by January 8, 2027.

ADDRESSES: GSA invites interested persons to submit comments on this 
collection through <a href="https://www.regulations.gov">https://www.regulations.gov</a> and follow the 
instructions on the site. This website provides the ability to type 
short comments directly into the comment field or attach a file for 
lengthier comments. If there are difficulties submitting comments, 
contact the GSA Regulatory Secretariat Division at <a href="/cdn-cgi/l/email-protection#65223624370002360006250216044b020a13"><span class="__cf_email__" data-cfemail="70372331221517231513301703115e171f06">[email&#160;protected]</span></a>.
    Instructions: All items submitted must cite OMB Control No. 3090-
0163, Contract Solicitation Information. Comments received generally 
will be posted without change to <a href="https://www.regulations.gov">https://www.regulations.gov</a>, including 
any personal and/or business-confidential information provided. To 
confirm receipt of your comment(s), please check <a href="http://www.regulations.gov">www.regulations.gov</a>, 
approximately two-to-three days after submission to verify posting.

FOR FURTHER INFORMATION CONTACT: Thomas O'Linn, Procurement Analyst, at 
telephone 816-589-3783 (Ext. 13291), or <a href="/cdn-cgi/l/email-protection#5512061407253a393c362c153226347b323a23"><span class="__cf_email__" data-cfemail="cd8a9e8c9fbda2a1a4aeb48daabeace3aaa2bb">[email&#160;protected]</span></a>.

SUPPLEMENTARY INFORMATION:

A. OMB Control Number, Title, and any Associated Form(s)

    OMB Control No. 3090-0300, Implementation of Information Technology 
Security Requirements.

B. Needs and Uses

    The General Services Acquisition Regulations (GSAR) requires that 
contractors accessing information systems that support the operations 
and assets of GSA, another agency, contractor, or other source, to 
comply with GSA's IT security policies including GSA IT's security 
policies outlined in CIO 09-48, IT Security Procedural Guide: Security 
and Privacy IT Acquisition Requirements and CIO 12-2018, IT Policy 
Requirements Guide.
    Due to the Revolutionary GSAR Overhaul (RGO), there are no program 
changes. Once RGO rulemaking is complete, GSA will assess and revise 
this information collection as needed.

C. Annual Burden

    Respondents: 35.
    Responses Per Respondent: 2.
    Total Annual Responses: 70.
    Hours Per Response: 5.
    Total Burden Hours: 350.
    Obtaining Copies: Requesters may obtain a copy of the information 
collection documents from the Regulatory Secretariat Division (MVCB), 
at <a href="/cdn-cgi/l/email-protection#165145574473714573755671657738717960"><span class="__cf_email__" data-cfemail="ecabbfadbe898bbf898fac8b9f8dc28b839a">[email&#160;protected]</span></a>. Please cite OMB Control No. 3090-0300, 
Implementation

[[Page 70885]]

of Information Technology Security Requirements, in all correspondence.

Richard Speidel,
Deputy Chief Data Officer, General Services Administration.
[FR Doc. 2026-22731 Filed 11-6-26; 8:45 am]
BILLING CODE 6820-61-P


</pre><script data-cfasync="false" src="/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js"></script></body>
</html>
Indexed from Federal Register on November 9, 2026.

This is legal information, not legal advice. Laws vary by jurisdiction and change frequently. Always verify current law with official sources and consult a licensed attorney in your jurisdiction for advice on your specific situation.