48 CFR · Federal Acquisition Regulation and Defense supplement
FAR and DFARS navigator
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
Ask the FAR
Try: · · ·
7 sections with “Cybersecurity Maturity Model Certification (CMMC)”
- DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.As prescribed in 204.7504(a), use the following clause: CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025) (a) Definitions. As used in this clause- Controlled unclassified information …
- DFARS 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.As prescribed in 204.7504(b), use the following provision: Notice of Cybersecurity Maturity Model Certification Level Requirements (NOV 2025) (a) Definitions. As used in this provision, controlled unclassified information (CUI), current, …
- DFARS 204.7501 Definitions.…issemination controls (32 CFR 2002.4(h)). Current means— (1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status— (i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Leve…
- DFARS 204.7302 Policy.…SP 800-171 DoD Assessment will not duplicate efforts from any other DoD assessment or the Cybersecurity Maturity Model Certification (CMMC) (see subpart 204.75), except for rare circumstances when a re-assessment may be necessary, such as, …
- DFARS 204.7500 Scope of subpart.(a) This subpart prescribes policies and procedures for including the Cybersecurity Maturity Model Certification (CMMC) level requirements in DoD contracts. CMMC is a framework (see 32 CFR part 170) for assessing a contractor's information …
- DFARS 217.207 Exercise of options.…e posted (see 204.7303); and (ii) If there is a requirement for the contractor to have a Cybersecurity Maturity Model Certification (CMMC) status at a specific CMMC level, the contractor has a current CMMC status at the CMMC level required…
- DFARS 204.7504 Solicitation provision and contract clause.…t 32 CFR 170.5(d) are met, use the clause at 252.204-7021, Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirements, as follows: (1) Until November 9, 2028, in solicitations and contracts, task orders, o…
FAR (chapter 1)
- Part 1 Federal Acquisition Regulations System 58 sections
- Part 2 Definitions of Words and Terms 3 sections
- Part 3 Improper Business Practices and Personal Conflicts of Interest 98 sections
- Part 4 Administrative and Information Matters 116 sections
- Part 5 Publicizing Contract Actions 34 sections
- Part 6 Competition Requirements 34 sections
- Part 7 Acquisition Planning 34 sections
- Part 8 Required Sources of Supplies and Services 67 sections
- Part 9 Contractor Qualifications 106 sections
- Part 10 Market Research 4 sections
- Part 11 Describing Agency Needs 33 sections
- Part 12 Acquisition of Commercial Products and Commercial Services 38 sections
- Part 13 Simplified Acquisition Procedures 49 sections
- Part 14 Sealed Bidding 82 sections
- Part 15 Contracting by Negotiation 81 sections
- Part 16 Types of Contracts 74 sections
- Part 17 Special Contracting Methods 50 sections
- Part 18 Emergency Acquisitions 34 sections
- Part 19 Small Business Programs 126 sections
- Part 22 Application of Labor Laws to Government Acquisitions 205 sections
- Part 23 Environment, Sustainable Acquisition, and Material Safety 38 sections
- Part 24 Protection of Privacy and Freedom of Information 10 sections
- Part 25 Foreign Acquisition 81 sections
- Part 26 Other Socioeconomic Programs 36 sections
- Part 27 Patents, Data, and Copyrights 59 sections
- Part 28 Bonds and Insurance 61 sections
- Part 29 Taxes 23 sections
- Part 30 Cost Accounting Standards Administration 30 sections
- Part 31 Contract Cost Principles and Procedures 87 sections
- Part 32 Contract Financing 175 sections
- Part 33 Protests, Disputes, and Appeals 23 sections
- Part 34 Major System Acquisition 20 sections
- Part 35 Research and Development Contracting 25 sections
- Part 36 Construction and Architect-engineer Contracts 81 sections
- Part 37 Service Contracting 46 sections
- Part 38 Federal Supply Schedule Contracting 3 sections
- Part 39 Acquisition of Information Technology 14 sections
- Part 40 Information Security and Supply Chain Security 12 sections
- Part 41 Acquisition of Utility Services 17 sections
- Part 42 Contract Administration and Audit Services 84 sections
- Part 43 Contract Modifications 14 sections
- Part 44 Subcontracting Policies and Procedures 24 sections
- Part 45 Government Property 33 sections
- Part 46 Quality Assurance 60 sections
- Part 47 Transportation 106 sections
- Part 48 Value Engineering 13 sections
- Part 49 Termination of Contracts 108 sections
- Part 50 Extraordinary Contractual Actions and the Safety Act 34 sections
- Part 51 Use of Government Sources by Contractors 15 sections
- Part 52 Solicitation Provisions and Contract Clauses 680 sections
- Part 53 Forms 61 sections
DFARS (chapter 2, Defense)
- Part 201 Federal Acquisition Regulations System 24 sections
- Part 202 Definitions of Words and Terms 1 sections
- Part 203 Improper Business Practices and Personal Conflicts of Interest 28 sections
- Part 204 Administrative and Information Matters 76 sections
- Part 205 Publicizing Contract Actions 11 sections
- Part 206 Competition Requirements 20 sections
- Part 207 Acquisition Planning 22 sections
- Part 208 Required Sources of Supplies and Services 31 sections
- Part 209 Contractor Qualifications 55 sections
- Part 210 Market Research 2 sections
- Part 211 Describing Agency Needs 22 sections
- Part 212 Acquisition of Commercial Products and Commercial Services 24 sections
- Part 213 Simplified Acquisition Procedures 23 sections
- Part 214 Sealed Bidding 14 sections
- Part 215 Contracting by Negotiation 66 sections
- Part 216 Types of Contracts 36 sections
- Part 217 Special Contracting Methods 64 sections
- Part 218 Emergency Acquisitions 7 sections
- Part 219 Small Business Programs 47 sections
- Part 222 Application of Labor Laws to Government Acquisitions 56 sections
- Part 223 Environment, Sustainable Acquisition, and Material Safety 34 sections
- Part 224 Protection of Privacy and Freedom of Information 2 sections
- Part 225 Foreign Acquisition 251 sections
- Part 226 Other Socioeconomic Programs 14 sections
- Part 227 Patents, Data, and Copyrights 99 sections
- Part 228 Bonds and Insurance 17 sections
- Part 229 Taxes 9 sections
- Part 230 Cost Accounting Standards Administration 2 sections
- Part 231 Contract Cost Principles and Procedures 13 sections
- Part 232 Contract Financing 74 sections
- Part 233 Protests, Disputes, and Appeals 8 sections
- Part 234 Major System Acquisition 13 sections
- Part 235 Research and Development Contracting 16 sections
- Part 236 Construction and Architect-engineer Contracts 25 sections
- Part 237 Service Contracting 67 sections
- Part 239 Acquisition of Information Technology 38 sections
- Part 241 Acquisition of Utility Services 8 sections
- Part 242 Contract Administration and Audit Services 40 sections
- Part 243 Contract Modifications 18 sections
- Part 244 Subcontracting Policies and Procedures 13 sections
- Part 245 Government Property 23 sections
- Part 246 Quality Assurance 39 sections
- Part 247 Transportation 27 sections
- Part 249 Termination of Contracts 14 sections
- Part 250 Extraordinary Contractual Actions and the Safety Act 16 sections
- Part 251 Use of Government Sources by Contractors 5 sections
- Part 252 Solicitation Provisions and Contract Clauses 405 sections
- Part 253 Forms 10 sections
- Part 270 Defense Contracting Programs 7 sections
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.