TPRM for Government Contractors: General Services Administration Policies | UpGuard

This blog post explains how the U.S. General Services Administration (GSA) interacts with third-party contractors across procurement, Public Buildings Service, technology, and small business engagement, and summarizes the federal third-party risk management frameworks contractors must follow—including FedRAMP, NIST SP 800-161, DFARS, FAR, sector-specific regulations, and executive orders like EO 14028. It emphasizes the need for compliance, audits, supply chain risk management, and continuous monitoring, and promotes UpGuard’s Vendor Risk platform as a tool for automating assessments, monitoring vendor security, and reporting.