FAR and DFARS › DFARS Part 239: Acquisition of Information Technology › Subpart 239.76
DFARS 239.7601 Definitions.
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
In plain English
This section defines key terms used in DFARS subpart 239.76, which addresses cloud computing and related requirements for DoD contractors. It clarifies what is meant by 'authorizing official,' 'cloud computing,' 'Government data,' 'Government-related data,' 'information system,' and 'media.' Understanding these definitions is important because they determine how contractors must handle and protect data when providing cloud services to DoD.
Applies to: DoD contractors and subcontractors involved with cloud computing services
Key terms: Authorizing official · Cloud computing · Government data · Government-related data · Information system
Written by AI from this section's text. A guide, not legal advice: the text below rules.
The text
As used in this subpart—
Authorizing official, as described in DoD Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), means the senior Federal official or executive with the authority to formally assume responsibility for operating an information system at an acceptable level of risk to organizational operations (including mission, functions, image, or reputation), organizational assets, individuals, other organizations, and the Nation.
Cloud computing means a model for enabling ubiquitous, convenient, on-demand network access to a shared pool of configurable computing resources (e.g., networks, servers, storage, applications, and services) that can be rapidly provisioned and released with minimal management effort or service provider interaction. This includes other commercial terms, such as on-demand self-service, broad network access, resource pooling, rapid elasticity, and measured service. It also includes commercial offerings for software-as-a-service, infrastructure-as-a-service, and platform-as-a-service.
Government data means any information, document, media, or machine readable material regardless of physical form or characteristics, that is created or obtained by the Government in the course of official Government business.
Government-related data means any information, document, media, or machine readable material regardless of physical form or characteristics that is created or obtained by a contractor through the storage, processing, or communication of Government data. This does not include a contractor's business records (e.g., financial records, legal records, etc.) or data such as operating procedures, software coding, or algorithms that are not uniquely applied to the Government data.
Information system means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information.
Media means physical devices or writing surfaces including, but not limited to, magnetic tapes, optical disks, magnetic disks, large-scale integration memory chips, and printouts onto which information is recorded, stored, or printed within an information system.
← 239.7600 Scope of subpart. · 239.7602 Policy and responsibilities. →
Rule changes for DFARS Part 239
- Defense Federal Acquisition Regulation Supplement: Disclosure of Information Regarding Foreign Obligations (DFARS Case 2018-D064) ↗ · proposed 2024-11-15 · comments due 2025-01-14
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.