48 CFR · Federal Acquisition Regulation and Defense supplement
FAR and DFARS navigator
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
Ask the FAR
Try: · · ·
25 sections with “Controlled unclassified information”
- DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.…ommercially sensitive information that is not customarily shared outside of the company. Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reprod…
- DFARS 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.…oss of an object, or the copying of information to unauthorized media may have occurred. Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reprod…
- DFARS 252.204-7008 Compliance with safeguarding covered defense information controls.…red Defense Information Controls (OCT 2016) (a) Definitions. As used in this provision— Controlled technical information, covered contractor information system, covered defense information, cyber incident, information system, and technica…
- FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems.…d contractor information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556. (c) Subcontracts. The Contractor shall include the substance of th…
- DFARS 204.7301 Definitions.…ommercially sensitive information that is not customarily shared outside of the company. Controlled technical information means technical information with military or space application that is subject to controls on the access, use, reprod…
- DFARS 252.204-7014 Limitations on the Use or Disclosure of Information by Litigation Support Contractors.…tigation support under a contract that contains this clause. Sensitive information means controlled unclassified information of a commercial, financial, proprietary, or privileged nature. The term includes technical data and computer softw…
- DFARS 252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support.…Disclosure of Information by Litigation Support Contractors. Sensitive information means controlled unclassified information of a commercial, financial, proprietary, or privileged nature. The term includes technical data and computer softw…
- FAR 2.101 Definitions.…m engaging in the unlawful manufacture, distribution, dispensing, possession, or use of a controlled substance. Earned value management system means a project management tool that effectively integrates the project scope of work with cost,…
- DFARS 252.209-7002 Disclosure of Ownership or Control by a Foreign Government.…ernment (DEC 2022) (a) Definitions. As used in this provision— (1) Effectively owned or controlled means that a foreign government or any entity controlled by a foreign government has the power, either directly or indirectly, whether exer…
- DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.…ucted by Government personnel using NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information that— (1) Consists of— (i) A review of a contractor's Basic Assessment; (ii) A thorough document review; (iii)…
- DFARS 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.… Certification Level Requirements (NOV 2025) (a) Definitions. As used in this provision, controlled unclassified information (CUI), current, Cybersecurity Maturity Model Certification (CMMC) status, Cybersecurity Maturity Model Certificati…
- FAR 4.2301 Definitions.…mation on a Federal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or…
- FAR 52.204-28 Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts.…mation on a Federal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or…
- FAR 52.204-30 Federal Acquisition Supply Chain Security Act Orders—Prohibition.…mation on a Federal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or…
- FAR 52.209-13 Violation of Arms Control Treaties or Agreements—Certification.…affairs/bureau-of-arms-control-verification-and-compliance/; and (ii) No entity owned or controlled by the Offeror has engaged in any activity that contributed to or was a significant factor in the President's or Secretary of State's deter…
- DFARS 204.7302 Policy.…cted by Government personnel using NIST SP 800-171A, “Assessing Security Requirements for Controlled Unclassified Information.” (5) The NIST SP 800-171 DoD Assessment will not duplicate efforts from any other DoD assessment or the Cybersec…
- DFARS 204.7401 Definitions.…Disclosure of Information by Litigation Support Contractors. Sensitive information means controlled unclassified information of a commercial, financial, proprietary, or privileged nature. The term includes technical data and computer softw…
- DFARS 204.7501 Definitions.As used in this subpart— Controlled unclassified information means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Governmentwide…
- DFARS 217.207 Exercise of options.…ctor information systems that process, store, or transmit Federal contract information or controlled unclassified information (see 204.7503(c)).
- DFARS 227.7103-13 Government right to review, verify, challenge, and validate asserted restrictions.…ted correspondence shall be subject to handling procedures for classified information and controlled unclassified information. A contractor's or subcontractor's failure to respond to the challenge notice cannot be the sole basis for issuing…
- DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.…on to that listed in this section. DoD will retain and protect any such documentation as “Controlled Unclassified Information (CUI)” and intended for internal DoD use only. The information will be protected against unauthorized use and rele…
- DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.…EL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025) (a) Definitions. As used in this clause- Controlled unclassified information means information the Government creates or possesses, or information an entity creates or possesses for or on beh…
- DFARS 252.227-7037 Validation of Asserted Restrictions on Technical Data.…ted correspondence shall be subject to handling procedures for classified information and controlled unclassified information. Such challenge will— (i) State the specific grounds for challenging the asserted restriction including, for comm…
- DFARS 252.239-7010 Cloud Computing Services.…rmation system. Spillage security incident that results in the transfer of classified or controlled unclassified information onto an information system not accredited (i.e., authorized) for the appropriate security level. (b) Cloud comput…
- FAR 9.109-4 Certification by the offeror.…fication-and-compliance/”; and (ii) Similarly certify with regard to any entity owned or controlled by the offeror; or (2) Provide with its offer information that the President of the United States has— (i) Waived application under 22 U.…
FAR (chapter 1)
- Part 1 Federal Acquisition Regulations System 58 sections
- Part 2 Definitions of Words and Terms 3 sections
- Part 3 Improper Business Practices and Personal Conflicts of Interest 98 sections
- Part 4 Administrative and Information Matters 116 sections
- Part 5 Publicizing Contract Actions 34 sections
- Part 6 Competition Requirements 34 sections
- Part 7 Acquisition Planning 34 sections
- Part 8 Required Sources of Supplies and Services 67 sections
- Part 9 Contractor Qualifications 106 sections
- Part 10 Market Research 4 sections
- Part 11 Describing Agency Needs 33 sections
- Part 12 Acquisition of Commercial Products and Commercial Services 38 sections
- Part 13 Simplified Acquisition Procedures 49 sections
- Part 14 Sealed Bidding 82 sections
- Part 15 Contracting by Negotiation 81 sections
- Part 16 Types of Contracts 74 sections
- Part 17 Special Contracting Methods 50 sections
- Part 18 Emergency Acquisitions 34 sections
- Part 19 Small Business Programs 126 sections
- Part 22 Application of Labor Laws to Government Acquisitions 205 sections
- Part 23 Environment, Sustainable Acquisition, and Material Safety 38 sections
- Part 24 Protection of Privacy and Freedom of Information 10 sections
- Part 25 Foreign Acquisition 81 sections
- Part 26 Other Socioeconomic Programs 36 sections
- Part 27 Patents, Data, and Copyrights 59 sections
- Part 28 Bonds and Insurance 61 sections
- Part 29 Taxes 23 sections
- Part 30 Cost Accounting Standards Administration 30 sections
- Part 31 Contract Cost Principles and Procedures 87 sections
- Part 32 Contract Financing 175 sections
- Part 33 Protests, Disputes, and Appeals 23 sections
- Part 34 Major System Acquisition 20 sections
- Part 35 Research and Development Contracting 25 sections
- Part 36 Construction and Architect-engineer Contracts 81 sections
- Part 37 Service Contracting 46 sections
- Part 38 Federal Supply Schedule Contracting 3 sections
- Part 39 Acquisition of Information Technology 14 sections
- Part 40 Information Security and Supply Chain Security 12 sections
- Part 41 Acquisition of Utility Services 17 sections
- Part 42 Contract Administration and Audit Services 84 sections
- Part 43 Contract Modifications 14 sections
- Part 44 Subcontracting Policies and Procedures 24 sections
- Part 45 Government Property 33 sections
- Part 46 Quality Assurance 60 sections
- Part 47 Transportation 106 sections
- Part 48 Value Engineering 13 sections
- Part 49 Termination of Contracts 108 sections
- Part 50 Extraordinary Contractual Actions and the Safety Act 34 sections
- Part 51 Use of Government Sources by Contractors 15 sections
- Part 52 Solicitation Provisions and Contract Clauses 680 sections
- Part 53 Forms 61 sections
DFARS (chapter 2, Defense)
- Part 201 Federal Acquisition Regulations System 24 sections
- Part 202 Definitions of Words and Terms 1 sections
- Part 203 Improper Business Practices and Personal Conflicts of Interest 28 sections
- Part 204 Administrative and Information Matters 76 sections
- Part 205 Publicizing Contract Actions 11 sections
- Part 206 Competition Requirements 20 sections
- Part 207 Acquisition Planning 22 sections
- Part 208 Required Sources of Supplies and Services 31 sections
- Part 209 Contractor Qualifications 55 sections
- Part 210 Market Research 2 sections
- Part 211 Describing Agency Needs 22 sections
- Part 212 Acquisition of Commercial Products and Commercial Services 24 sections
- Part 213 Simplified Acquisition Procedures 23 sections
- Part 214 Sealed Bidding 14 sections
- Part 215 Contracting by Negotiation 66 sections
- Part 216 Types of Contracts 36 sections
- Part 217 Special Contracting Methods 64 sections
- Part 218 Emergency Acquisitions 7 sections
- Part 219 Small Business Programs 47 sections
- Part 222 Application of Labor Laws to Government Acquisitions 56 sections
- Part 223 Environment, Sustainable Acquisition, and Material Safety 34 sections
- Part 224 Protection of Privacy and Freedom of Information 2 sections
- Part 225 Foreign Acquisition 251 sections
- Part 226 Other Socioeconomic Programs 14 sections
- Part 227 Patents, Data, and Copyrights 99 sections
- Part 228 Bonds and Insurance 17 sections
- Part 229 Taxes 9 sections
- Part 230 Cost Accounting Standards Administration 2 sections
- Part 231 Contract Cost Principles and Procedures 13 sections
- Part 232 Contract Financing 74 sections
- Part 233 Protests, Disputes, and Appeals 8 sections
- Part 234 Major System Acquisition 13 sections
- Part 235 Research and Development Contracting 16 sections
- Part 236 Construction and Architect-engineer Contracts 25 sections
- Part 237 Service Contracting 67 sections
- Part 239 Acquisition of Information Technology 38 sections
- Part 241 Acquisition of Utility Services 8 sections
- Part 242 Contract Administration and Audit Services 40 sections
- Part 243 Contract Modifications 18 sections
- Part 244 Subcontracting Policies and Procedures 13 sections
- Part 245 Government Property 23 sections
- Part 246 Quality Assurance 39 sections
- Part 247 Transportation 27 sections
- Part 249 Termination of Contracts 14 sections
- Part 250 Extraordinary Contractual Actions and the Safety Act 16 sections
- Part 251 Use of Government Sources by Contractors 5 sections
- Part 252 Solicitation Provisions and Contract Clauses 405 sections
- Part 253 Forms 10 sections
- Part 270 Defense Contracting Programs 7 sections
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.