FAR and DFARS › DFARS Part 252: Solicitation Provisions and Contract Clauses › Subpart 252.2
DFARS 252.239-7000 Protection against compromising emanations.
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
In plain English
This clause requires the Contractor to provide or use only information technology that has been accredited to meet specified information assurance standards, such as NSA TEMPEST standards or other standards named in the contract. It also lets the Government run additional tests and requires the Contractor to fix or replace deficient accepted items within one year at no cost to the Government.
Applies to: Contractors providing or using information technology under this contract
What it requires
- Provide or use only information technology accredited to meet the specified information assurance standards
- Provide documentation supporting the accreditation upon the Contracting Officer's request
- Correct or replace accepted information technology found deficient within 1 year after proper installation, at no cost to the Government
Key terms: compromising emanations · accreditation · information assurance requirements · TEMPEST · Warranty of Supplies or Warranty of Systems and Equipment
Written by AI from this section's text. A guide, not legal advice: the text below rules.
The text
As prescribed in 239.7103(a), use the following clause:
Protection Against Compromising Emanations (OCT 2019)
(a) The Contractor shall provide or use only information technology, as specified by the Government, that has been accredited to meet the appropriate information assurance requirements of—
(1) The National Security Agency National TEMPEST Standards (NSTISSAM TEMPEST 1-92, Compromising Emanations Laboratory Test Requirements, Electromagnetics (U)); or
(2) Other standards specified by this contract, including the date through which the required accreditation is current or valid for the contract.
(b) Upon request of the Contracting Officer, the Contractor shall provide documentation supporting the accreditation.
(c) The Government may, as part of its inspection and acceptance, conduct additional tests to ensure that information technology delivered under this contract satisfies the information assurance standards specified. The Government may conduct additional tests—
(1) At the installation site or contractor's facility; and
(2) Notwithstanding the existence of valid accreditations of information technology prior to the award of this contract.
(d) Unless otherwise provided in this contract under the Warranty of Supplies or Warranty of Systems and Equipment clause, the Contractor shall correct or replace accepted information technology found to be deficient within 1 year after proper installations.
(1) The correction or replacement shall be at no cost to the Government.
(2) Should a modification to the delivered information technology be made by the Contractor, the 1-year period applies to the modification upon its proper installation.
(3) This paragraph (d) applies regardless of f.o.b. point or the point of acceptance of the deficient information technology.
(End of clause)
← 252.237-7027 Transfer and Adoption of Military Animals. · 252.239-7001 Information Assurance Contractor Training and Certification. →
Rule changes for DFARS Part 252
- Defense Federal Acquisition Regulation Supplement: Modifications to Printed Circuit Board Acquisition Restrictions (DFARS Case 2022-D011) ↗ · proposed 2026-07-02 · comments due 2026-08-31
- Defense Federal Acquisition Regulation Supplement: Certification Requirement for Military Recruitment Advertising (DFARS Case 2024-D022) ↗ · proposed 2026-06-25 · comments due 2026-08-24
- Defense Federal Acquisition Regulation Supplement: Small Purchase Exception for the Acquisition of U.S. Flags (DFARS Case 2024-D013) ↗ · proposed 2026-06-25 · comments due 2026-08-24
- Defense Federal Acquisition Regulation Supplement: Mitigating Risks Related to Foreign Ownership, Control, or Influence (DFARS Case 2021-D011) ↗ · proposed 2026-05-07 · comments due 2026-07-06
- Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041) ↗ · final rule 2025-09-10 · effective 2025-11-10
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023); Correction ↗ · final rule 2025-08-28 · effective 2025-08-28
- Defense Federal Acquisition Regulation Supplement: Disclosure of DoD Funding in Technical Publications (DFARS Case 2024-D003) ↗ · proposed 2025-08-25 · comments due 2025-10-24
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023) ↗ · final rule 2025-08-25 · effective 2025-08-25
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.