48 CFR · Federal Acquisition Regulation and Defense supplement
FAR and DFARS navigator
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
Ask the FAR
Try: · · ·
12 sections with “Cybersecurity risk”
- DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.As prescribed in 204.7504(a), use the following clause: CONTRACTOR COMPLIANCE WITH THE CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL REQUIREMENTS (NOV 2025) (a) Definitions. As used in this clause- Controlled unclassified information …
- DFARS 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.As prescribed in 204.7504(b), use the following provision: Notice of Cybersecurity Maturity Model Certification Level Requirements (NOV 2025) (a) Definitions. As used in this provision, controlled unclassified information (CUI), current, …
- FAR 40.202-4 Exemptions.…n, training, testing, or analysis for electronic warfare, information warfare operations, cybersecurity, or development of unmanned aircraft system or counter-unmanned aircraft system technology; (2) Is for the sole purposes of conducting …
- DFARS 204.7302 Policy.…SP 800-171 DoD Assessment will not duplicate efforts from any other DoD assessment or the Cybersecurity Maturity Model Certification (CMMC) (see subpart 204.75), except for rare circumstances when a re-assessment may be necessary, such as, …
- DFARS 204.7501 Definitions.…issemination controls (32 CFR 2002.4(h)). Current means— (1) With regard to Conditional Cybersecurity Maturity Model Certification (CMMC) Status— (i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Leve…
- DFARS 252.225-7049 Prohibition on Acquisition of Certain Foreign Commercial Satellite Services—Representations.…FARS) 252.225-7051, Prohibition on Acquisition of Certain Commercial Satellite Services. Cybersecurity risk means threats to and vulnerabilities of information or information systems and any related consequences caused by or resulting from…
- DFARS 225.772-1 Definitions.…n Federation; or (4) Any country that is a state sponsor of terrorism. (10 U.S.C. 2279) Cybersecurity risk means threats to and vulnerabilities of information or information systems and any related consequences caused by or resulting from…
- DFARS 225.772-2 Prohibitions.…vered foreign country; or (iii) Entering into such contract would create an unacceptable cybersecurity risk for DoD, as determined by the Under Secretary of Defense for Acquisition and Sustainment or the Under Secretary of Defense for Poli…
- DFARS 225.772-3 Procedures.…ng satellite services provided by a foreign entity if such award presents an unacceptable cybersecurity risk, as determined by the Under Secretary of Defense for Acquisition and Sustainment or the Under Secretary of Defense for Policy. (2)…
- DFARS 212.301 Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.…sessment Requirements, as prescribed in 204.7304(e). (L) Use the clause at 252.204-7021, Cybersecurity Maturity Model Certification Requirements, as prescribed in 204.7504(a). (M) Use the clause at 252.204-7022, Expediting Contract Closeo…
- DFARS 217.207 Exercise of options.…e posted (see 204.7303); and (ii) If there is a requirement for the contractor to have a Cybersecurity Maturity Model Certification (CMMC) status at a specific CMMC level, the contractor has a current CMMC status at the CMMC level required…
- DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.…g Basic Assessments to SPRS. (i) The email shall include the following information: (A) Cybersecurity standard assessed (e.g., NIST SP 800-171 Rev 1). (B) Organization conducting the assessment (e.g., Contractor self-assessment). (C) Fo…
FAR (chapter 1)
- Part 1 Federal Acquisition Regulations System 58 sections
- Part 2 Definitions of Words and Terms 3 sections
- Part 3 Improper Business Practices and Personal Conflicts of Interest 98 sections
- Part 4 Administrative and Information Matters 116 sections
- Part 5 Publicizing Contract Actions 34 sections
- Part 6 Competition Requirements 34 sections
- Part 7 Acquisition Planning 34 sections
- Part 8 Required Sources of Supplies and Services 67 sections
- Part 9 Contractor Qualifications 106 sections
- Part 10 Market Research 4 sections
- Part 11 Describing Agency Needs 33 sections
- Part 12 Acquisition of Commercial Products and Commercial Services 38 sections
- Part 13 Simplified Acquisition Procedures 49 sections
- Part 14 Sealed Bidding 82 sections
- Part 15 Contracting by Negotiation 81 sections
- Part 16 Types of Contracts 74 sections
- Part 17 Special Contracting Methods 50 sections
- Part 18 Emergency Acquisitions 34 sections
- Part 19 Small Business Programs 126 sections
- Part 22 Application of Labor Laws to Government Acquisitions 205 sections
- Part 23 Environment, Sustainable Acquisition, and Material Safety 38 sections
- Part 24 Protection of Privacy and Freedom of Information 10 sections
- Part 25 Foreign Acquisition 81 sections
- Part 26 Other Socioeconomic Programs 36 sections
- Part 27 Patents, Data, and Copyrights 59 sections
- Part 28 Bonds and Insurance 61 sections
- Part 29 Taxes 23 sections
- Part 30 Cost Accounting Standards Administration 30 sections
- Part 31 Contract Cost Principles and Procedures 87 sections
- Part 32 Contract Financing 175 sections
- Part 33 Protests, Disputes, and Appeals 23 sections
- Part 34 Major System Acquisition 20 sections
- Part 35 Research and Development Contracting 25 sections
- Part 36 Construction and Architect-engineer Contracts 81 sections
- Part 37 Service Contracting 46 sections
- Part 38 Federal Supply Schedule Contracting 3 sections
- Part 39 Acquisition of Information Technology 14 sections
- Part 40 Information Security and Supply Chain Security 12 sections
- Part 41 Acquisition of Utility Services 17 sections
- Part 42 Contract Administration and Audit Services 84 sections
- Part 43 Contract Modifications 14 sections
- Part 44 Subcontracting Policies and Procedures 24 sections
- Part 45 Government Property 33 sections
- Part 46 Quality Assurance 60 sections
- Part 47 Transportation 106 sections
- Part 48 Value Engineering 13 sections
- Part 49 Termination of Contracts 108 sections
- Part 50 Extraordinary Contractual Actions and the Safety Act 34 sections
- Part 51 Use of Government Sources by Contractors 15 sections
- Part 52 Solicitation Provisions and Contract Clauses 680 sections
- Part 53 Forms 61 sections
DFARS (chapter 2, Defense)
- Part 201 Federal Acquisition Regulations System 24 sections
- Part 202 Definitions of Words and Terms 1 sections
- Part 203 Improper Business Practices and Personal Conflicts of Interest 28 sections
- Part 204 Administrative and Information Matters 76 sections
- Part 205 Publicizing Contract Actions 11 sections
- Part 206 Competition Requirements 20 sections
- Part 207 Acquisition Planning 22 sections
- Part 208 Required Sources of Supplies and Services 31 sections
- Part 209 Contractor Qualifications 55 sections
- Part 210 Market Research 2 sections
- Part 211 Describing Agency Needs 22 sections
- Part 212 Acquisition of Commercial Products and Commercial Services 24 sections
- Part 213 Simplified Acquisition Procedures 23 sections
- Part 214 Sealed Bidding 14 sections
- Part 215 Contracting by Negotiation 66 sections
- Part 216 Types of Contracts 36 sections
- Part 217 Special Contracting Methods 64 sections
- Part 218 Emergency Acquisitions 7 sections
- Part 219 Small Business Programs 47 sections
- Part 222 Application of Labor Laws to Government Acquisitions 56 sections
- Part 223 Environment, Sustainable Acquisition, and Material Safety 34 sections
- Part 224 Protection of Privacy and Freedom of Information 2 sections
- Part 225 Foreign Acquisition 251 sections
- Part 226 Other Socioeconomic Programs 14 sections
- Part 227 Patents, Data, and Copyrights 99 sections
- Part 228 Bonds and Insurance 17 sections
- Part 229 Taxes 9 sections
- Part 230 Cost Accounting Standards Administration 2 sections
- Part 231 Contract Cost Principles and Procedures 13 sections
- Part 232 Contract Financing 74 sections
- Part 233 Protests, Disputes, and Appeals 8 sections
- Part 234 Major System Acquisition 13 sections
- Part 235 Research and Development Contracting 16 sections
- Part 236 Construction and Architect-engineer Contracts 25 sections
- Part 237 Service Contracting 67 sections
- Part 239 Acquisition of Information Technology 38 sections
- Part 241 Acquisition of Utility Services 8 sections
- Part 242 Contract Administration and Audit Services 40 sections
- Part 243 Contract Modifications 18 sections
- Part 244 Subcontracting Policies and Procedures 13 sections
- Part 245 Government Property 23 sections
- Part 246 Quality Assurance 39 sections
- Part 247 Transportation 27 sections
- Part 249 Termination of Contracts 14 sections
- Part 250 Extraordinary Contractual Actions and the Safety Act 16 sections
- Part 251 Use of Government Sources by Contractors 5 sections
- Part 252 Solicitation Provisions and Contract Clauses 405 sections
- Part 253 Forms 10 sections
- Part 270 Defense Contracting Programs 7 sections
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.