FAR and DFARS › DFARS Part 217: Special Contracting Methods › Subpart 217.2

DFARS 217.207 Exercise of options.

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

In plain English

This section requires contracting officers to exercise options only after verifying that the contractor's registration in SAM is active and that its unique entity identifier, CAGE code, name, and physical address are accurately reflected in the contract. It also requires checking the Supplier Performance Risk System to confirm that a current NIST SP 800-171 DoD Assessment summary score is posted for relevant contractor information systems and, if required, that the contractor holds the necessary CMMC status. These checks matter because they ensure the contractor remains eligible and compliant before an option is exercised.

Applies to: Contracting officers exercising options under DoD contracts

What it requires

  • Determine that the contractor's record in SAM is active and that its unique entity identifier, CAGE code, name, and physical address are accurately reflected in the contract document.
  • Work with the program office or requiring activity to verify in the Supplier Performance Risk System that the summary level score of a current NIST SP 800-171 DoD Assessment is posted for each covered contractor information system relevant to the offer, contract, task order, or delivery order.
  • If the contract requires a specific CMMC level, verify that the contractor has a current CMMC status at that level or higher for each applicable CMMC unique identifier.

Key terms: System for Award Management (SAM) · unique entity identifier · Commercial and Government Entity (CAGE) code · Supplier Performance Risk System · NIST SP 800-171 DoD Assessment

Written by AI from this section's text. A guide, not legal advice: the text below rules.

The text

(c) In addition to the requirements at FAR 17.207(c), exercise an option only after—

(1) Determining that the contractor's record in the System for Award Management database is active and the contractor's unique entity identifier number, Commercial and Government Entity (CAGE) code, name, and physical address are accurately reflected in the contract document. See PGI 217.207 for the requirement to perform cost or price analysis of spare parts prior to exercising any option for firm-fixed-price contracts containing spare parts; and

(2) Working with the program office or requiring activity to verify in the Supplier Performance Risk System (https://piee.eb.mil) that—

(i) The summary level score of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old, unless a lesser time is specified in the solicitation) for each covered contractor information system that is relevant to an offer, contract, task order, or delivery order are posted (see 204.7303); and

(ii) If there is a requirement for the contractor to have a Cybersecurity Maturity Model Certification (CMMC) status at a specific CMMC level, the contractor has a current CMMC status at the CMMC level required by the contract, or higher, for each of the CMMC unique identifiers applicable to each of the contractor information systems that process, store, or transmit Federal contract information or controlled unclassified information (see 204.7503(c)).

Sections it refers to

← 217.204 Contracts. · 217.208 Solicitation provisions and contract clauses. →

Rule changes for DFARS Part 217

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.

DFARS 217.207 Exercise of options · SpendQuery