FAR and DFARS › DFARS Part 204: Administrative and Information Matters › Subpart 204.73

DFARS 204.7303 Procedures.

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

In plain English

This section tells contracting officers how to handle covered defense information and requires them to check that a current NIST SP 800-171 DoD Assessment summary score is posted in SPRS before making certain awards or extending certain contracts. It matters to contractors because it means their assessment score must be current and posted in SPRS for the relevant systems before the government can award or extend work requiring NIST SP 800-171 implementation.

Applies to: Contracting officers and contractors required to implement NIST SP 800-171 under the clause at 252.204-7012

What it requires

  • Follow the procedures relating to safeguarding covered defense information at PGI 204.7303
  • Ensure the summary level score of a current NIST SP 800-171 DoD Assessment for each relevant covered contractor information system is posted in SPRS before award or option exercise/extension

Key terms: covered defense information · NIST SP 800-171 DoD Assessment · summary level score · Supplier Performance Risk System (SPRS) · covered contractor information system

Written by AI from this section's text. A guide, not legal advice: the text below rules.

The text

(a) Follow the procedures relating to safeguarding covered defense information at PGI 204.7303.

(b) The contracting officer shall verify that the summary level score of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old, unless a lesser time is specified in the solicitation) (see 252.204-7019) for each covered contractor information system that is relevant to an offer, contract, task order, or delivery order are posted in Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/), prior to—

(1) Awarding a contract, task order, or delivery order to an offeror or contractor that is required to implement NIST SP 800-171 in accordance with the clause at 252.204-7012; or

(2) Exercising an option period or extending the period of performance on a contract, task order, or delivery order with a contractor that is that is required to implement the NIST SP 800-171 in accordance with the clause at 252.204-7012.

Sections it refers to

  • 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.
  • 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.

Sections that refer to it

← 204.7302 Policy. · 204.7304 Solicitation provisions and contract clauses. →

Rule changes for DFARS Part 204

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.

DFARS 204.7303 Procedures · SpendQuery