48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

43 sections with “Information technology systems”: the first 40

  • DFARS 252.204-7008 Compliance with safeguarding covered defense information controls.
    …n 204.7304(a), use the following provision: Compliance With Safeguarding Covered Defense Information Controls (OCT 2016) (a) Definitions. As used in this provision— Controlled technical information, covered contractor information system,…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    As prescribed in 204.7304(c), use the following clause: Safeguarding Covered Defense Information and Cyber Incident Reporting (MAY 2024) (a) Definitions. As used in this clause— Adequate security means protective measures that are commen…
  • FAR 2.101 Definitions.
    … agencies and by the Department of Defense for defense agencies. Adequate evidence means information sufficient to support the reasonable belief that a particular act or omission has occurred. Advisory and assistance services means those …
  • FAR 4.2301 Definitions.
    As used in this subpart— Covered article, as defined in 41 U.S.C. 4713(k), means— (1) Information technology, as defined in 40 U.S.C. 11101, including cloud computing services of all types; (2) Telecommunications equipment or telecommuni…
  • FAR 7.103 Agency-head responsibilities.
    …raining services, and automated self-service technical support) descriptions that address information and communication technology (ICT) accessibility standards (see 36 CFR 1194.1) in proposed acquisitions and that these standards are inclu…
  • FAR 7.105 Contents of written acquisition plans.
    …02(a), 16.103(d), and 16.505(a)(3)). (ii) For each order contemplated, discuss— (A) For information technology acquisitions, how the capital planning and investment control requirements of 40 U.S.C. 11312 and OMB Circular A-130 will be me…
  • FAR 9.508 Examples.
    …specific acquisition. These companies may supply the item. (e) Before an acquisition for information technology is conducted, Company A is awarded a contract to prepare data system specifications and equipment performance criteria to be us…
  • FAR 39.001 Applicability.
    This part applies to the acquisition of— (a) Information technology by or for the use of agencies except for acquisitions of information technology for national security systems. However, acquisitions of information technology for national…
  • FAR 39.101 Policy.
    (a)(1) In acquiring information technology, agencies shall identify their requirements pursuant to— (i) OMB Circular A-130, including consideration of security of resources, protection of privacy, national security and emergency preparedne…
  • FAR 39.103 Modular contracting.
    …ments need for timely access to rapidly changing technology. Consistent with the agency's information technology architecture, agencies should, to the maximum extent practicable, use modular contracting to acquire major systems (see 2.101) …
  • FAR 52.204-28 Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts.
    …s. As used in this clause— Covered article, as defined in 41 U.S.C. 4713(k), means— (1) Information technology, as defined in 40 U.S.C. 11101, including cloud computing services of all types; (2) Telecommunications equipment or telecommu…
  • FAR 52.204-30 Federal Acquisition Supply Chain Security Act Orders—Prohibition.
    …s. As used in this clause— Covered article, as defined in 41 U.S.C. 4713(k), means— (1) Information technology, as defined in 40 U.S.C. 11101, including cloud computing services of all types; (2) Telecommunications equipment or telecommu…
  • DFARS 202.101 Definitions.
    … manufacturer's designs, formulas, and/or specifications. Compromise means disclosure of information to unauthorized persons, or a violation of the security policy of a system, in which unauthorized intentional or unintentional disclosure,…
  • DFARS 239.7102-1 General.
    (a) Agencies shall ensure that information assurance is provided for information technology in accordance with current policies, procedures, and statutes, to include— (1) The National Security Act; (2) The Clinger-Cohen Act; (3) National…
  • DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
    …e Contractor's review of their system security plan(s) associated with covered contractor information system(s); (2) Is conducted in accordance with the NIST SP 800-171 DoD Assessment Methodology; and (3) Results in a confidence level of …
  • DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.
    …EQUIREMENTS (NOV 2025) (a) Definitions. As used in this clause- Controlled unclassified information means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, t…
  • DFARS 252.225-7045 Balance of Payments Program—Construction Material Under Trade Agreements.
    …he simplified acquisition threshold in part 2 of the Federal Acquisition Regulation; (2) Information technology that is a commercial product; or (3) The construction material or components listed by the Government as follows: [Contractin…
  • DFARS 252.227-7013 Rights in Technical Data—Other Than Commercial Products and Commercial Services.
    … the clause at 252.227-7025, Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends. Detailed manufacturing or process data means technical data that describe the steps, sequences, and cond…
  • DFARS 252.227-7015 Technical Data—Commercial Products and Commercial Services.
    … the clause at 252.227-7025, Limitations on the Use or Disclosure of Government-Furnished Information Marked with Restrictive Legends. Form, fit, and function data means technical data that describe the required overall physical, functiona…
  • DFARS 252.239-7000 Protection against compromising emanations.
    … Against Compromising Emanations (OCT 2019) (a) The Contractor shall provide or use only information technology, as specified by the Government, that has been accredited to meet the appropriate information assurance requirements of— (1) T…
  • DFARS 252.239-7010 Cloud Computing Services.
    …fficial, as described in DoD Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), means the senior Federal official or executive with the authority to formally assume responsibility for operating an info…
  • FAR 39.002 Definitions.
    As used in this part— Modular contracting means use of one or more contracts to acquire information technology systems in successive, interoperable increments. National security system means any telecommunications or information system op…
  • FAR 52.225-9 Buy American—Construction Materials.
    …d in paragraphs (b)(2) and (b)(3) of this clause. (2) This requirement does not apply to information technology that is a commercial product or to the construction materials or components listed by the Government as follows: ________ [Con…
  • FAR 52.225-11 Buy American—Construction Materials Under Trade Agreements.
    …of this clause. (3) The requirement in paragraph (b)(2) of this clause does not apply to information technology that is a commercial product or to the construction materials or components listed by the Government as follows: [Contracting …
  • DFARS 252.225-7044 Balance of Payments Program—Construction Material.
    …he simplified acquisition threshold in part 2 of the Federal Acquisition Regulation; (2) Information technology that is a commercial product; or (3) The construction material or components listed by the Government as follows: [Contractin…
  • DFARS 252.242-7006 Accounting System Administration.
    … areas such as indirect and other direct costs, compensation, billing, labor, and general information technology. Material weakness means a deficiency or combination of deficiencies in the internal control over information in contractor bu…
  • FAR 39.000 Scope of part.
    This part prescribes acquisition policies and procedures for use in acquiring— (a) Information technology, including financial management systems, consistent with other parts of this regulation, OMB Circular No. A-127, Financial Management…
  • FAR 39.102 Management of risk.
    (a) Prior to entering into a contract for information technology, an agency should analyze risks, benefits, and costs. (See part 7 for additional information regarding requirements definition.) Reasonable risk taking is appropriate as long …
  • DFARS 204.2103 Procedures.
    …ll” in paragraph (d) of the provision at DFARS 252.204-7017, the offeror must provide the information required by paragraph (e) of the provision. When an offeror completes paragraph (e) of either of the provisions at FAR 52.204-24 or DFARS …
  • FAR 4.502 Policy.
    …recognized standards that broaden interoperability and ease the electronic interchange of information, such as standards established by the National Institute of Standards and Technology. (c) Before using electronic commerce, the agency he…
  • FAR 4.2104 Waivers.
    …nsibilities described in law, regulation, and policy; (ii) Establish participation in an information-sharing environment when and as required by the Federal Acquisition Security Council (FASC) to facilitate interagency sharing of relevant …
  • DFARS 204.7102 Policy.
    …hem; or (2) The contract is a communications service authorization issued by the Defense Information Systems Agency's Defense Information Technology Contracting Organization.
  • DFARS 215.101-2-70 Limitations and prohibitions.
    ….101) of the product(s) or service(s) being acquired (see PGI 215.101-2-70(a)(1)(vii) for information on obtaining this determination); and (viii) The contracting officer documents the contract file describing the circumstances justifying …
  • DFARS 215.404-71-2 Performance risk.
    …roduction of simple items; (C) Rote entry or routine integration of Government-furnished information; or (D) Simple operations with Government-furnished property. (4) Technology incentive range. (i) The contracting officer may assign val…
  • DFARS 215.407-4 Should-cost review.
    …hile minimizing the impact on program schedule by engaging stakeholders early, relying on information already available before requesting additional data, and establishing a team with the relevant expertise early. (iii) The should-cost rev…
  • DFARS 239.7305 Exclusion and limitation on disclosure.
    …bject to 239.7304, the individuals authorized in 239.7303 may, in the course of procuring information technology, whether as a service or as a supply, that is a covered system, is a part of a covered system, or is in support of a covered sy…
  • FAR 15.101-2 Lowest price technically acceptable source selection process.
    …n process in the case of a procurement that is predominantly for the acquisition of— (1) Information technology services, cybersecurity services, systems engineering and technical assistance services, advanced electronic testing, audit or …
  • FAR 22.1003-4 Administrative limitations, variations, tolerances, and exemptions.
    …ph (c)(2) of this subsection are met: (i) Automated data processing equipment and office information/word processing systems. (ii) Scientific equipment and medical apparatus or equipment if the application of micro-electronic circuitry or…
  • DFARS 209.571-1 Definitions.
    …sistance”— (i) Means a combination of activities related to the development of technical information to support various acquisition processes. Examples of systems engineering and technical assistance activities include, but are not limited…
  • DFARS 225.7501 Policy.
    …dustrial gas; (v) A brand drug specified by the Defense Medical Materiel Board; or (vi) Information technology that is a commercial product, using fiscal year 2004 or subsequent funds (section 535 of Division F of the Consolidated Appropr…

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.