48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

129 sections with “assessment”: the first 40

  • DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.
    As prescribed in 204.7304(d), use the following provision: NOTICE OF NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS (NOV 2023) (a) Definitions. Basic Assessment, Medium Assessment, and High Assessment have the meaning given in the clause 25…
  • DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
    As prescribed in 204.7304(e), use the following clause: NIST SP 800-171 DOD Assessment Requirements (NOV 2023) (a) Definitions. Basic Assessment means a contractor's self-assessment of the contractor's implementation of NIST SP 800-171 t…
  • DFARS 246.470-1 Assessment of additional costs.
    …h (c) of this subsection, the quality assurance representative (QAR) may believe that the assessment of additional costs is warranted. If so, the representative shall recommend that the contracting officer take the necessary action and prov…
  • FAR 31.205-41 Taxes.
    …owable under subparagraph (a)(1) above, but upon which a claim of illegality or erroneous assessment exists; provided the contractor, before paying such taxes— (i) Promptly requests instructions from the contracting officer concerning such…
  • DFARS 204.7302 Policy.
    …ent Reporting, are required at time of award to have at least a Basic NIST SP 800-171 DoD Assessment that is current (i.e., not more than 3 years old unless a lesser time is specified in the solicitation) (see 252.204-7019). (3) The NIST S…
  • DFARS 204.7501 Definitions.
    … Certification (CMMC) Status— (i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level 2 (certified third-party assessment organization (C3PAO)) assessments, with— (A) No changes in compliance with the …
  • DFARS 204.7603 Procedures.
    …at is available as described at PGI 204.7603, the contracting officer shall also consider assessments of item risk, if available, as a part of the award decision. Offerors or quoters without a risk assessment in SPRS shall not be considered…
  • DFARS 222.302 Liquidated damages and overtime pay.
    …n notification of the withholding and a statement of the basis for the liquidated damages assessment. The written notification shall also inform the contractor of its 60 days right to appeal the assessment, through the contracting officer, …
  • DFARS 252.204-7010 Requirement for Contractor To Notify DoD if the Contractor's Activities are Subject to Reporting Under the U.S.-International Atomic Energy Agency Additional Protocol.
    … with paragraph (a) of this clause, the DoD Program Manager will— (1) Conduct a security assessment to determine if and by what means access may be granted to the IAEA; or (2) Provide written justification to the component or agency treat…
  • DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.
    … Certification (CMMC) Status— (i) Not older than 180 days for Conditional Level 2 (Self) assessments and Conditional Level 2 (certified third-party assessment organization (C3PAO)) assessments, with— (A) No changes in compliance with the …
  • DFARS 252.204-7024 Notice on the Use of the Supplier Performance Risk System.
    …actor information on contracts from Government reporting systems in order to develop risk assessments. (c) The Contracting Officer will consider SPRS risk assessments during the evaluation of quotations or offers received in response to th…
  • DFARS 253.209-1 Responsible prospective contractors.
    …. (i) The factors in Section III, Block 19, generally mean— (A) Technical capability. An assessment of the prospective contractor's key management personnel to determine if they have the basic technical knowledge, experience, and understan…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    …onal information and equipment necessary for forensic analysis, and cyber incident damage assessment. (3) Apply other information systems security measures when the Contractor reasonably determines that information systems security measure…
  • FAR 15.305 Proposal evaluation.
    (a) Proposal evaluation is an assessment of the proposal and the offeror's ability to perform the prospective contract successfully. An agency shall evaluate competitive proposals and then assess their relative qualities solely on the facto…
  • FAR 52.209-12 Certification Regarding Tax Matters.
    …ot [ ], more than 90 days prior to certification, been notified of any unpaid Federal tax assessment for which the liability remains unsatisfied, unless the assessment is the subject of an installment agreement or offer in compromise that h…
  • DFARS 208.405 Ordering procedures for Federal Supply Schedules.
    …03 for procedures on the required use of the Supplier Performance Risk System (SPRS) risk assessments. (i) The contracting officer shall ensure SPRS assessments of price risk and supplier risk are considered as a part of the award decision…
  • DFARS 216.505 Ordering.
    …03 for procedures on the required use of the Supplier Performance Risk System (SPRS) risk assessments. (i) The contracting officer shall ensure SPRS assessments of price risk and supplier risk are considered as a part of the award decision…
  • DFARS 227.7203-2 Acquisition of other than commercial computer software and computer software documentation and associated rights.
    …e. (ii) Alternatives to delivery of source code and related software design details. The assessment of life-cycle needs should consider alternatives to the delivery of source code and related software design details for privately developed…
  • DFARS 242.1104 Surveillance requirements.
    … and (iii) When production surveillance is required, shall— (A) Conduct a periodic risk assessment of the contractor to determine the degree of production surveillance needed for all contracts awarded to that contractor. The risk assessme…
  • DFARS 252.239-7010 Cloud Computing Services.
    …or equipment that is necessary to conduct a forensic analysis. (h) Cyber incident damage assessment activities. If DoD elects to conduct a damage assessment, the Contracting Officer will request that the Contractor provide all of the damag…
  • FAR 2.101 Definitions.
    …s, analyses and evaluations, i.e., contracted services that provide organized, analytical assessments/evaluations in support of policy development, decision-making, management, or administration. Included are studies in support of R&D activ…
  • FAR 15.404-1 Proposal analysis techniques.
    …in quality or service shortfalls. Results of the analysis may be used in performance risk assessments and responsibility determinations. However, proposals shall be evaluated using the criteria in the solicitation, and the offered prices sh…
  • FAR 22.406-8 Investigations.
    …mages, the request must state that the contractor has 60 days to request relief from such assessment. (d) Contracting officer's report. After taking the actions prescribed in paragraphs (b) and (c) of this subsection— (1) The contracting …
  • FAR 35.017-4 Reviewing FFRDC's.
    … to exist. (2) Consideration of alternative sources to meet the sponsor's needs. (3) An assessment of the efficiency and effectiveness of the FFRDC in meeting the sponsor's needs, including the FFRDC's ability to maintain its objectivity,…
  • FAR 40.202-7 Procedures.
    …s, exceptions, or waivers are identified in the solicitation and resultant contract. (b) Assessment of unmanned aircraft systems. Except where an exemption, exception, or waiver applies, the contracting officer shall work with the program …
  • FAR 42.708 Quick-closeout procedure.
    …tract, task order, or delivery order amount; (3) The contracting officer performs a risk assessment and determines that the use of the quick-closeout procedure is appropriate. The risk assessment shall include— (i) Consideration of the co…
  • FAR 52.237-10 Identification of Uncompensated Overtime.
    …or rates, or that do not otherwise demonstrate cost realism, will be considered in a risk assessment and will be evaluated for award in accordance with that assessment. (e) The offeror shall include a copy of its policy addressing uncompen…
  • FAR 52.245-1 Government Property.
    …ent system effectiveness and shall perform periodic internal reviews, surveillances, self assessments, or audits. Significant findings or results of such reviews and audits pertaining to Government property shall be made available to the Pr…
  • DFARS 204.7304 Solicitation provisions and contract clauses.
    …tion of COTS items. (d) Use the provision at 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirements, in all solicitations, including solicitations using FAR part 12 procedures for the acquisition of commercial products and com…
  • DFARS 204.7602 Applicability.
    Use of SPRS risk assessments is required for the evaluation of quotations or offers in response to solicitations for supplies and services, including solicitations using FAR part 12 procedures for the acquisition of commercial products and …
  • DFARS 207.106 Additional requirements for major systems.
    …DoD; or (B) Competition for contracts for sustainment of the systems or subsystems. (2) Assessments and corresponding acquisition strategies developed under this section shall— (i) Be developed before issuance of a solicitation for the w…
  • DFARS 209.105-1 Obtaining information.
    …ne source of information relating to contractor performance is the Contractor Performance Assessment Reporting System (CPARS), available at https://www.cpars.gov/. (ii) Information relating to contract terminations for cause and for defaul…
  • DFARS 209.571-1 Definitions.
    …rting acquisition efforts such as— (A) Deriving requirements; (B) Performing technology assessments; (C) Developing acquisition strategies; (D) Conducting risk assessments; (E) Developing cost estimates; (F) Determining specifications…
  • DFARS 212.301 Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.
    …8 (Pub. L. 115-91). (J) Use the provision at 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirements, as prescribed in 204.7304(d). (K) Use the clause at 252.204-7020, NIST SP 800-171 DoD Assessment Requirements, as prescribed…
  • DFARS 212.371 Inapplicability of certain provisions and clauses to contracts for the acquisition of commercially available off-the-shelf items.
    …nformation and Cyber Incident Reporting. (d) 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirements. (e) 252.204-7020, NIST SP 800-171 DoD Assessment Requirements. (f) 252.204-7021, Cybersecurity Maturity Model Certification…
  • DFARS 215.304 Evaluation factors and significant subfactors.
    …or services, the contracting officer shall ensure Supplier Performance Risk System (SPRS) assessments of price risk and supplier risk are considered as a part of the award decision. See 204.7603. (B) When procuring an end product identifie…
  • DFARS 219.702-70 Statutory requirements for the Test Program for Negotiation of Comprehensive Small Business Subcontracting Plans.
    …when performing any DoD contract or subcontract that requires a subcontracting plan. (d) Assessment. The contracting officer designated to manage the comprehensive subcontracting plan shall conduct a compliance review during the fiscal yea…
  • DFARS 219.7102 General.
    … that establish a developmental assistance program for a protégé firm; (c) A preliminary assessment of the protégé firm's cybersecurity readiness. The DoD Office of Small Business Programs (OSBP), Office of the Under Secretary of Defense, …
  • DFARS 222.406-8 Investigations.
    …inform the contractor that— (1) It has 60 days after receipt of the notice to appeal the assessment of liquidated damages; and (2) The appeal must demonstrate either that the alleged violations did not occur at all, occurred inadvertently…
  • DFARS 222.406-9 Withholding from or suspension of contract payments.
    …ust liquidated damages of $500 or less when the amount assessed is incorrect or waive the assessment when the violations— (1) Were nonwillful or inadvertent; and (2) Occurred notwithstanding the exercise of due care by the contractor, its…

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.