Investigations, Enforcement, & Compliance Alerts

The General Services Administration (GSA) recently announced changes to procedural guidance that may affect contractor eligibility for GSA contracts. GSA issued the IT Security Procedural Guide: Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations Process CIO-IT Security-21-112, which set out a cybersecurity framework for protecting CUI that is similar to the Cybersecurity Maturity Model Certification (CMMC) for DoD contracts. 

On February 15, 2025, the acting administrator of the United States General Services Administration (GSA), Stephen Ehikian, announced on X (formerly Twitter) that the GSA issued several new deviations from the Federal Acquisition Regulation (FAR) intended to implement key Trump Executive Orders that aim to end illegal discrimination, restore merit-based opportunity, and eliminate the forced use of paper straws in procurement.