Proposed Rule 23 Sep 2025 compliance, energy, infrastructure, regulation, cybersecurity, electric utilities

🔐Cybersecurity Regulation CIP-003-11 Proposed for Electric Utilities

The Federal Energy Regulatory Commission (Commission) proposes to approve Critical Infrastructure Protection (CIP) Reliability Standard: CIP-003-11 (Cyber Security--Security Management Controls). The North American Electric Reliability Corporation, the Commission- certified electric reliability organization, submitted the proposed Reliability Standard modifications to mitigate risks posed by a coordinated cyberattack on low impact facilities; the aggregate impact of which could be much greater.

Learn More
Proposed Rule 23 Sep 2025 compliance, energy, federal regulations, virtualization, cybersecurity, business standards

🔒Updates on CIP Reliability Standards for Cybersecurity Compliance

The Federal Energy Regulatory Commission (Commission) proposes to approve four new definitions and 18 modified definitions in the North American Electric Reliability Corporation (NERC) Glossary of Terms Used in Reliability Standards. The Commission also proposes to approve eleven modified Critical Infrastructure Protection (CIP) Reliability Standards. NERC, the Commission-certified electric reliability organization, submitted the proposed modifications to update the CIP Reliability Standards to enable the application of virtualization and other new technologies in a secure manner.

Learn More
Rule 23 Sep 2025 compliance, energy, reliability standards, federal energy regulatory commission, regulation, supply chain, cybersecurity

⚡New Supply Chain Risk Management Regulations from FERC

The Federal Energy Regulatory Commission (Commission) directs the North American Electric Reliability Corporation (NERC), the Commission-certified Electric Reliability Organization, to develop new or modified Reliability Standards that address the sufficiency of responsible entities' supply chain risk management plans related to the identification of and response to supply chain risks. Further, the Commission directs NERC to develop modifications related to supply chain protections for protected cyber assets. This final action also terminates a related notice of inquiry.

Learn More
Notice 22 Sep 2025 regulation, dod, defense contracting, small businesses, cybersecurity

🛡️DoD's Regulatory Agenda

This agenda announces the regulatory and deregulatory actions the Department of Defense (DoD) plans to take in the next 12 months and those regulatory and deregulatory actions completed since the publication of the Fall 2024 Unified Agenda. It was developed under the guidelines of Executive Order 12866, "Regulatory Planning and Review," and Executive Order 13563, "Improving Regulation and Regulatory Review." This agenda includes actions that support the Administration's priorities, the Secretary of Defense's top priorities to revive warrior ethos, rebuild our military, reestablish deterrence, as well as those priorities of the National Defense Strategy. These actions include efforts to make America safe, make America affordable and energy dominant, and bring back American values. Members of the public may submit comments on individual proposed and interim final rulemakings at www.regulations.gov during the comment period that follows publication in the Federal Register. This agenda updates the report published on December 13, 2024, and includes regulations expected to be issued or under review by DoD over the next 12 months. The next agenda will publish in the fall of 2025. The complete Unified Agenda will be available online at www.reginfo.gov. In accordance with the Regulatory Flexibility Act (5 U.S.C. 602), which requires agencies to publish their regulatory flexibility agendas in the Federal Register, the Department of Defense's printed agenda entries in the Federal Register include only: (1) rules that are in the Agency's regulatory flexibility agenda, in accordance with the Regulatory Flexibility Act, because they are likely to have a significant economic impact on a substantial number of small entities; and (2) Any rules that the Agency has identified for periodic review under the Regulatory Flexibility Act (5 U.S.C. 610). Although printing of these entries is limited to fields that contain information required by the Regulatory Flexibility Act's agenda requirements, additional information on these entries is in the Unified Agenda available online.

Learn More
Notice 22 Sep 2025 labor market, department of homeland security, customs, immigration, compliance, cybersecurity, business regulations

📋Unified Agenda

This regulatory agenda is a semiannual summary of projected regulations, existing regulations, and completed actions of the Department of Homeland Security (DHS) and its components. This agenda provides the public with information about DHS's regulatory and deregulatory activity. DHS expects that this information will enable the public to be more aware of, and effectively participate in, the Department's regulatory and deregulatory activity. DHS invites the public to submit comments on any aspect of this agenda.

Learn More
Notice 22 Sep 2025 small business, fisheries, information technology, cybersecurity, regulatory agenda, commerce

🏢Spring 2025 Regulatory Agenda

In compliance with Executive Order 12866, entitled "Regulatory Planning and Review," and the Regulatory Flexibility Act, as amended, the Department of Commerce (Commerce), in the spring and fall of each year, publishes in the Federal Register an agenda of regulations under development or review over the next 12 months. Rulemaking actions are grouped according to pre-rulemaking, proposed rules, final rules, long-term actions, and rulemaking actions completed since the publication of the Fall 2024 Unified Agenda. The purpose of the Agenda is to provide information to the public on regulations that are currently under review, being proposed, or recently issued by Commerce. It is expected that this information will enable the public to participate more effectively in Commerce's regulatory process. Commerce's Spring 2025 Unified Agenda includes regulatory activities that are expected to be conducted during the period July 1, 2025, through June 31, 2026.

Learn More
Notice 22 Sep 2025 federal acquisition regulation, procurement, compliance, software security, cybersecurity, government contracts

🔒Analysis of Semiannual Regulatory Agenda and Compliance Requirements

This agenda provides summary descriptions of regulations being developed by the Civilian Agency Acquisition Council and the Defense Acquisition Regulations Council in compliance with Executive Order 12866 "Regulatory Planning and Review, as reaffirmed and amended in Executive Order 13563, "Improving Regulation and Regulatory Review," and Executive Order 14192, Unleashing Prosperity Through Deregulation." This agenda is being published to allow interested people an opportunity to participate in the rulemaking process. Additionally, members of the public can track the progress of any open and pending FAR rule via the "Open FAR Cases" report, which is publicly available at https://www.acq.osd.mil/dpap/dars/far_case_status.html. The Regulatory Secretariat Division has attempted to list all regulations pending at the time of publication, except for minor and routine or repetitive actions; however, unanticipated requirements may result in the issuance of regulations that are not included in this agenda. There is no legal significance to the omission of an item from this listing. Also, the dates shown for the steps of each action are estimated and are not commitments to act on or by the dates shown. Published proposed rules may be reviewed in their entirety at the Government's rulemaking website at https://www.regulations.gov.

Learn More
Notice 19 Sep 2025 cybersecurity, information security, federal regulations, privacy, nist, advisory board

🔒NIST Information Security Advisory Board Open Meeting Announcement

National Institute of Standards and Technology (NIST)'s Information Security and Privacy Advisory Board (ISPAB) will hold an open meeting on Wednesday, October 22, 2025, from 10:00 a.m. until 4:30 p.m., Eastern Time and Thursday, October 23, 2025, from 10:00 a.m. until 4:30 p.m., Eastern Time.

Learn More
Notice 16 Sep 2025 infrastructure risk, cybersecurity, department of energy, regulatory agenda, market operations, energy compliance, federal energy regulatory commission, public meeting

⚡Sunshine Act Meeting Notice - Federal Energy Regulatory Commission

The Federal Energy Regulatory Commission has announced an open meeting to discuss administrative and energy-related matters, including cybersecurity standards and energy market operations. The meeting will take place on September 18, 2025, providing an opportunity for stakeholders to engage and stay informed on critical regulatory developments. Members of the public can attend or access a webcast of the event.

Learn More
Notice 10 Sep 2025 cybersecurity, contractor compliance, federal acquisition, defense, regulation

🛡️New DFARS Cybersecurity Requirements for Contractors

The Defense Acquisition Regulations System has submitted to OMB for clearance the following proposal for collection of information under the provisions of the Paperwork Reduction Act.

Learn More