SpendQueryBeta

48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

40 sections with “Safeguarding”

  • FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems.
    As prescribed in 4.1903, insert the following clause: Basic Safeguarding of Covered Contractor Information Systems (NOV 2021) (a) Definitions. As used in this clause— Covered contractor information system means an information system that…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    As prescribed in 204.7304(c), use the following clause: Safeguarding Covered Defense Information and Cyber Incident Reporting (MAY 2024) (a) Definitions. As used in this clause— Adequate security means protective measures that are commen…
  • DFARS 252.204-7008 Compliance with safeguarding covered defense information controls.
    As prescribed in 204.7304(a), use the following provision: Compliance With Safeguarding Covered Defense Information Controls (OCT 2016) (a) Definitions. As used in this provision— Controlled technical information, covered contractor info…
  • DFARS 252.223-7007 Safeguarding Sensitive Conventional Arms, Ammunition, and Explosives.
    As prescribed in 223.7203, use the following clause: Safeguarding Sensitive Conventional Arms, Ammunition, and Explosives (NOV 2023) (a) Definition. As used in this clause—Arms, ammunition, and explosives (AA&E) means those items within t…
  • FAR 14.401 Receipt and safeguarding of bids.
    (a) All bids (including modifications) received before the time set for the opening of bids shall be kept secure. Except as provided in paragraph (b) of this section, the bids shall not be opened or viewed, and shall remain in a locked bid …
  • FAR 53.204-1 Safeguarding classified information within industry (DD Form 254, DD Form 441).
    The following forms, which are prescribed by the Department of Defense, shall be used by DoD components and those nondefense agencies with which DoD has agreements to provide industrial security services for the National Industrial Security…
  • DFARS 204.7302 Policy.
    …ors required to implement NIST SP 800-171, in accordance with the clause at 252.204-7012, Safeguarding Covered Defense Information and Cyber incident Reporting, are required at time of award to have at least a Basic NIST SP 800-171 DoD Asse…
  • DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
    … Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this contract. High Assessment means an assessment that is conducted by Gov…
  • DFARS 204.7304 Solicitation provisions and contract clauses.
    (a) Use the provision at 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls, in all solicitations, including solicitations using FAR part 12 procedures for the acquisition of commercial products and commercial s…
  • DFARS 212.371 Inapplicability of certain provisions and clauses to contracts for the acquisition of commercially available off-the-shelf items.
    …r applicability to contracts for the acquisition of COTS items: (a) FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems. (b) 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls. (c) 252…
  • DFARS 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.
    … (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html) that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is— (1) Marked or otherwise…
  • FAR 4.402 General.
    …mends Executive Order 10865, February 20, 1960 (25 FR 1583, February 25, 1960), entitled “Safeguarding Classified Information Within Industry,” as amended by Executive Order 10909, January 17, 1961 (26 FR 508, January 20, 1961). (b) The Na…
  • FAR 24.301 Privacy training.
    … 39.105). (b) Privacy training shall address the key elements necessary for ensuring the safeguarding of personally identifiable information or a system of records. The training shall be role-based, provide foundational as well as more adv…
  • FAR 52.224-3 Privacy Training.
    ….105). (c)(1) Privacy training shall address the key elements necessary for ensuring the safeguarding of personally identifiable information or a system of records. The training shall be role-based, provide foundational as well as more adv…
  • DFARS 212.301 Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.
    …ctors, as prescribed in 204.7203. (B) Use the provision at 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls, as prescribed in 204.7304(a), to comply with section 941 of the National Defense Authorization Act …
  • DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.
    … Covered contractor information system has the meaning given in the clause 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting, of this solicitation. (b) Requirement. In order to be considered for award, if…
  • DFARS 252.228-7001 Ground and Flight Risk.
    …e or in writing by the Contracting Officer, and any other place the aircraft is moved for safeguarding. Covered aircraft means an aircraft owned by or to be delivered to the Government and, when determined by the contracting officer and sp…
  • FAR 1.602-2 Responsibilities.
    …ctions for effective contracting, ensuring compliance with the terms of the contract, and safeguarding the interests of the United States in its contractual relationships. In order to perform these responsibilities, contracting officers sho…
  • FAR 4.802 Contract files.
    …y to principal users; (3) Minimal establishment of duplicate and working files; (4) The safeguarding of classified documents; and (5) Conformance with agency regulations for file location and maintenance. (d) If the contract files or fi…
  • FAR 4.1102 Policy.
    … contracts (see 2.101) when registration in SAM, or use of SAM data, could compromise the safeguarding of classified information or national security; (3) Contracts awarded by— (i) Deployed contracting officers in the course of military o…
  • FAR 4.1901 Definitions.
    …aintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502). Safeguarding means measures or controls that are prescribed to protect information systems.
  • FAR 4.1903 Contract clause.
    The contracting officer shall insert the clause at 52.204-21, Basic Safeguarding of Covered Contractor Information Systems, in solicitations and contracts when the contractor or a subcontractor at any tier may have Federal contract informat…
  • FAR 12.301 Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.
    … Code Maintenance, as prescribed in 4.1804(c). (5) Insert the clause at 52.204-21, Basic Safeguarding of Covered Contractor Information Systems, in solicitations and contracts (except for acquisitions of COTS items), as prescribed in 4.190…
  • FAR 14.202-7 Facsimile bids.
    …uacy of administrative procedures and controls for receiving, identifying, recording, and safeguarding facsimile bids, and ensuring their timely delivery to the bids opening location. (b) If facsimile bids are authorized, contracting offic…
  • FAR 15.203 Requests for proposals.
    …uacy of administrative procedures and controls for receiving, identifying, recording, and safeguarding facsimile proposals, and ensuring their timely delivery to the designated proposal delivery location. (2) If facsimile proposals are aut…
  • FAR 32.1103 Applicability.
    …but see 32.1106(b)); (d) Payment by EFT under a classified contract could compromise the safeguarding of classified information or national security, or arrangements for appropriate EFT payments would be impractical due to security conside…
  • FAR 52.204-2 Security Requirements.
    …solution of the problem is made by the Contracting Officer, the Contractor shall continue safeguarding all classified material as required by this contract. (f) After receiving the written notification, the Contracting Officer shall explor…
  • FAR 52.213-4 Terms and Conditions—Simplified Acquisitions (Other Than Commercial Products and Commercial Services).
    …products). (2) Listed below are additional clauses that may apply: (i) 52.204-21, Basic Safeguarding of Covered Contractor Information Systems (NOV 2021) (Applies to contracts when the contractor or a subcontractor at any tier may have Fe…
  • FAR 52.244-6 Subcontracts for Commercial Products and Commercial Services.
    …rtain Internal Confidentiality Agreements or Statements (JAN 2017). (v) 52.204-21, Basic Safeguarding of Covered Contractor Information Systems (NOV 2021), other than subcontracts for commercially available off-the-shelf items, if flow dow…
  • DFARS 204.7301 Definitions.
    … (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html) that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is— (1) Marked or otherwise…
  • DFARS 204.7303 Procedures.
    (a) Follow the procedures relating to safeguarding covered defense information at PGI 204.7303. (b) The contracting officer shall verify that the summary level score of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years …
  • DFARS 204.7400 Scope of subpart.
    This subpart prescribes policies and procedures for the release and safeguarding of information to litigation support contractors. It implements the requirements at 10 U.S.C. 129d.
  • DFARS 204.7402 Policy.
    …contracting officers shall ensure that all other applicable requirements for handling and safeguarding the relevant types of sensitive information are included in the contract (e.g., FAR subparts 4.4 and 24.1; DFARS subparts 204.4 and 224.1…
  • DFARS 204.7501 Definitions.
    …a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)). Current means— (1) With regard to Conditional Cybersecurity Maturity Model Certification …
  • DFARS 223.7203 Contract clause.
    Use the clause at 252.223-7007, Safeguarding Sensitive Conventional Arms, Ammunition, and Explosives, in all solicitations and contracts to which DoD Manual 5100.76 applies, in accordance with the policy at 223.7201. Complete paragraph (b) …
  • DFARS 225.872-7 Industrial security for qualifying countries.
    The required procedures for safeguarding classified defense information necessary for the performance of contracts awarded to qualifying country sources are in the National Industrial Security Program Operating Manual, 32 CFR part 117 (impl…
  • DFARS 228.370-1 Definitions.
    …o include taxi test made in the performance of the contract, or flight for the purpose of safeguarding the aircraft. All aircraft off the contractor's premises shall be considered to be in flight when on the ground or water for reasonable p…
  • DFARS 232.7002 Policy.
    … submission and processing of payment requests and receiving reports could compromise the safeguarding of classified information or national security; (2) Cases in which contractor submission of electronic payment requests and receiving re…
  • DFARS 252.204-7000 Disclosure of information.
    … involves no covered defense information (as defined in the clause at DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting) and has been scoped and negotiated by the contracting activity with the contrac…
  • DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.
    …a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls (32 CFR 2002.4(h)). Current means— (1) With regard to Conditional Cybersecurity Maturity Model Certification …

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.