FAR and DFARS › DFARS Part 252: Solicitation Provisions and Contract Clauses › Subpart 252.2
DFARS 252.239-7001 Information Assurance Contractor Training and Certification.
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
In plain English
This clause requires the contractor to make sure that personnel who access information systems hold proper and current information assurance certifications for the information assurance functions they perform, as set out in DoD 8570.01-M. It also requires the contractor to give the Government documentation of those certifications on request, and personnel without proper and current certifications will be denied access to DoD information systems for information assurance work.
Applies to: Contractors whose personnel perform information assurance functions on DoD information systems
What it requires
- Ensure personnel accessing information systems have proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M
- Meet applicable information assurance certification requirements, including DoD-approved workforce certifications for each category and level in the current DoD 8570.01-M and appropriate operating system certification for information assurance technical positions
- Provide documentation supporting the information assurance certification status of personnel performing information assurance functions upon request by the Government
Key terms: information assurance certification · information assurance functions · DoD 8570.01-M · information assurance workforce certifications · operating system certification
Written by AI from this section's text. A guide, not legal advice: the text below rules.
The text
As prescribed in 239.7103(b), use the following clause:
Information Assurance Contractor Training and Certification (JAN 2008)
(a) The Contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement Program. The Contractor shall meet the applicable information assurance certification requirements, including—
(1) DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and
(2) Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.
(b) Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.
(c) Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions.
(End of clause)
← 252.239-7000 Protection against compromising emanations. · 252.239-7002 Access. →
Rule changes for DFARS Part 252
- Defense Federal Acquisition Regulation Supplement: Modifications to Printed Circuit Board Acquisition Restrictions (DFARS Case 2022-D011) ↗ · proposed 2026-07-02 · comments due 2026-08-31
- Defense Federal Acquisition Regulation Supplement: Certification Requirement for Military Recruitment Advertising (DFARS Case 2024-D022) ↗ · proposed 2026-06-25 · comments due 2026-08-24
- Defense Federal Acquisition Regulation Supplement: Small Purchase Exception for the Acquisition of U.S. Flags (DFARS Case 2024-D013) ↗ · proposed 2026-06-25 · comments due 2026-08-24
- Defense Federal Acquisition Regulation Supplement: Mitigating Risks Related to Foreign Ownership, Control, or Influence (DFARS Case 2021-D011) ↗ · proposed 2026-05-07 · comments due 2026-07-06
- Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041) ↗ · final rule 2025-09-10 · effective 2025-11-10
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023); Correction ↗ · final rule 2025-08-28 · effective 2025-08-28
- Defense Federal Acquisition Regulation Supplement: Disclosure of DoD Funding in Technical Publications (DFARS Case 2024-D003) ↗ · proposed 2025-08-25 · comments due 2025-10-24
- Defense Federal Acquisition Regulation Supplement: Limitation on Certain Institutes of Higher Education (DFARS Case 2024-D023) ↗ · final rule 2025-08-25 · effective 2025-08-25
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Plain words for the terms: glossary.