GSA Agency-specific IT Security Guidelines. For all Task Orders issued by the GSA, the following GSA policies are required to be followed by GSA Personnel whether acting as the requiring agency or the contract servicing agency. The IT Security policies can be found on the GSA Directives website. See Attachment J-8