FAR and DFARS › DFARS Part 252: Solicitation Provisions and Contract Clauses › Subpart 252.2

DFARS 252.239-7001 Information Assurance Contractor Training and Certification.

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

In plain English

This clause requires the contractor to make sure that personnel who access information systems hold proper and current information assurance certifications for the information assurance functions they perform, as set out in DoD 8570.01-M. It also requires the contractor to give the Government documentation of those certifications on request, and personnel without proper and current certifications will be denied access to DoD information systems for information assurance work.

Applies to: Contractors whose personnel perform information assurance functions on DoD information systems

What it requires

  • Ensure personnel accessing information systems have proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M
  • Meet applicable information assurance certification requirements, including DoD-approved workforce certifications for each category and level in the current DoD 8570.01-M and appropriate operating system certification for information assurance technical positions
  • Provide documentation supporting the information assurance certification status of personnel performing information assurance functions upon request by the Government

Key terms: information assurance certification · information assurance functions · DoD 8570.01-M · information assurance workforce certifications · operating system certification

Written by AI from this section's text. A guide, not legal advice: the text below rules.

The text

As prescribed in 239.7103(b), use the following clause:

Information Assurance Contractor Training and Certification (JAN 2008)

(a) The Contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement Program. The Contractor shall meet the applicable information assurance certification requirements, including—

(1) DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and

(2) Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.

(b) Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.

(c) Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions.

(End of clause)

Sections it refers to

Sections that refer to it

← 252.239-7000 Protection against compromising emanations. · 252.239-7002 Access. →

Rule changes for DFARS Part 252

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.

DFARS 252.239-7001 Information Assurance Contractor Training and Certification · SpendQuery