The Federal Acquisition Regulations Council is close to finalizing rules for threat hunting, secure software development and securing unclassified information systems.