48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

45 sections with “classified defense information”: the first 40

  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    …ublicly available without restrictions. Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.…
  • FAR 52.211-2 Availability of Defense Specifications, Standards, and Data Item Descriptions in the Acquisition Streamlining and Standardization Information System (ASSIST) website.
    …reamlining and Standardization Information System (ASSIST) Website (SEP 2023) (a) Most unclassified Defense specifications and standards may be downloaded from the ASSIST website at https://assist.dla.mil. (b) Defense documents not availa…
  • FAR 53.204-1 Safeguarding classified information within industry (DD Form 254, DD Form 441).
    …al security services for the National Industrial Security Program if contractor access to classified information is required, as specified in subpart 4.4 and the clause at 52.204-2: (a) DD Form 254 (Department of Defense (DOD)), Contract S…
  • DFARS 252.204-7008 Compliance with safeguarding covered defense information controls.
    …tandards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” (see http://dx.doi.org/10.6028/NIST.SP.800-171)that are in effect at the t…
  • FAR 2.101 Definitions.
    …ssful performance of ongoing Federal operations. All advisory and assistance services are classified in one of the following definitional subdivisions: (1) Management and professional support services, i.e., contractual services that provi…
  • FAR 4.402 General.
    …ndustrial Security Program” (NISP), establishes a program to safeguard Federal Government classified information that is released to contractors, licensees, and grantees of the United States Government. Executive Order 12829 amends Executiv…
  • FAR 4.403 Responsibilities of contracting officers.
    …ntracting officers shall review all proposed solicitations to determine whether access to classified information may be required by offerors, or by a contractor during contract performance. (1) If access to classified information of anothe…
  • FAR 32.112-2 Subcontractor requests for information.
    … (1) Specifically authorized under criteria established by an Executive order to be kept classified in the interest of national defense or foreign policy; and (2) Properly classified pursuant to such Executive order.
  • DFARS 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information.
    …is lawfully publicly available without restrictions. Covered defense information means unclassified controlled technical information or other information (as described in the Controlled Unclassified Information (CUI) Registry at http://www…
  • DFARS 239.7304 Determination and notification.
    …icant supply chain risk to a covered system; (b) Making a determination in writing, in unclassified or classified form, with the concurrence of the Under Secretary of Defense for Acquisition and Sustainment, that— (1) Use of the authority…
  • DFARS 252.204-7000 Disclosure of information.
    …a) The Contractor shall not release to anyone outside the Contractor's organization any unclassified information, regardless of medium (e.g., film, tape, document), pertaining to any part of this contract or any program related to this cont…
  • FAR 4.2301 Definitions.
    …ederal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental i…
  • FAR 5.202 Exceptions.
    …ch disclosure would compromise the national security (e.g., would result in disclosure of classified information). The fact that a proposed solicitation or contract action contains classified information, or that access to classified matter…
  • FAR 8.405-6 Limiting sources.
    …en disclosure would compromise the national security (e.g., would result in disclosure of classified information) or create other security risks. (b) Items peculiar to one manufacturer. An item peculiar to one manufacturer can be a particu…
  • FAR 52.204-28 Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts.
    …ederal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental i…
  • FAR 52.204-30 Federal Acquisition Supply Chain Security Act Orders—Prohibition.
    …ederal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental i…
  • FAR 52.247-52 Clearance and Documentation Requirements—Shipments to DOD Air or Water Terminal Transshipment Points.
    …re; and (2) Each shipment weighing less than 10,000 pounds; if the cargo either— (i) Is classified TOP SECRET, SECRET, OR CONFIDENTIAL; (ii) Will require exclusive use of a motor vehicle; (iii) Will occupy full visible capacity of a rai…
  • DFARS 204.7301 Definitions.
    …ublicly available without restrictions. Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense information.…
  • DFARS 225.872-7 Industrial security for qualifying countries.
    The required procedures for safeguarding classified defense information necessary for the performance of contracts awarded to qualifying country sources are in the National Industrial Security Program Operating Manual, 32 CFR part 117 (impl…
  • DFARS 252.245-7005 Management and Reporting of Government Property.
    …m's original identity, utility, form, fit, and function have been destroyed. Items can be classified as scrap if processed by cutting, tearing, crushing, mangling, shredding, or melting. Intact or recognizable components and parts are not “…
  • FAR 16.505 Ordering.
    …en disclosure would compromise the national security (e.g., would result in disclosure of classified information) or create other security risks. (D) The justification is subject to the screening requirement in paragraph (b)(2)(ii)(D)(4) o…
  • FAR 50.103-6 Disposition.
    …mstances justifying the decision; (e) Identification of any of the foregoing information classified “Confidential” or higher (instead of being included in the memorandum, such information may be set forth in a separate classified document …
  • FAR 52.204-16 Commercial and Government Entity Code Reporting.
    … includes FAR clause 52.204-2, Security Requirements, a subcontractor requiring access to classified information under a contract shall be identified with a CAGE code on the DD Form 254. The Contractor shall require a subcontractor requirin…
  • DFARS 203.903 Policy.
    …ive and is within the authority of the executive branch official making the request. (2) Classified information. As provided in section 827(h) of the National Defense Authorization Act for Fiscal Year 2013, nothing in this subpart provides…
  • DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.
    …rnment personnel using NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information that— (1) Consists of— (i) A review of a contractor's Basic Assessment; (ii) A thorough document review; (iii) Verification…
  • DFARS 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.
    …n Level Requirements (NOV 2025) (a) Definitions. As used in this provision, controlled unclassified information (CUI), current, Cybersecurity Maturity Model Certification (CMMC) status, Cybersecurity Maturity Model Certification unique ide…
  • DFARS 252.235-7011 Final scientific or technical report.
    …ports, follow the instructions at https://discover.dtic.mil/submit-documents/. (c) Email classified reports (up to Secret) to [email protected]. If a SIPRNET email capability is not available, follow the classified submi…
  • DFARS 252.239-7016 Telecommunications security equipment, devices, techniques, and services.
    …, when employed by Government agencies, contractors, and subcontractors to transmit— (i) Classified or sensitive information; (ii) Matters involving intelligence activities, cryptologic activities related to national security, the command…
  • FAR 4.606 Reporting Data.
    …ise national security). (6) Contract actions in which the required data would constitute classified information. (7) Resale activity (i.e., commissary or exchange activity). (8) Revenue generating arrangements (i.e., concessions). (9) T…
  • FAR 7.105 Contents of written acquisition plans.
    …see 11.002 and part 23). (18) Security considerations. (i) For acquisitions dealing with classified matters, discuss how adequate security will be established, maintained, and monitored (see subpart 4.4). (ii) For information technology a…
  • FAR 11.201 Identification and availability of specifications.
    …R Part 101-29, may be viewed at the ASSIST website at https://assist.dla.mil. (2) Most unclassified Defense specifications and standards may be downloaded from the ASSIST website at https://assist.dla.mil. (3) Defense documents not availa…
  • FAR 14.403 Recording of bids.
    …h information as the contracting activity deems necessary. (b) Abstracts of offers for unclassified acquisitions shall be available for public inspection. Such abstracts shall not contain information regarding failure to meet minimum stand…
  • FAR 51.101 Policy.
    …(b) Contractors with fixed-price Government contracts that require protection of security classified information may acquire security equipment through GSA sources (see 41 CFR 101-26.507). (c) Contracting officers shall authorize contracto…
  • FAR 52.212-1 Instructions to Offerors—Commercial Products and Commercial Services.
    …on may be obtained from the address in paragraph (i)(1)(i) of this provision. (2) Most unclassified Defense specifications and standards may be downloaded from the ASSIST website at https://assist.dla.mil. (3) Defense documents not availa…
  • FAR 52.247-68 Report of Shipment (REPSHIP).
    …tice of shipment to the consignee transportation officer— (i) For all shipments of— (A) Classified material, protected sensitive, and protected controlled material; (B) Explosives and poisons, class 1, division 1.1, 1.2 and 1.3; class 2,…
  • DFARS 204.7300 Scope.
    …n, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program.
  • DFARS 204.7302 Policy.
    …nment personnel using NIST SP 800-171A, “Assessing Security Requirements for Controlled Unclassified Information.” (5) The NIST SP 800-171 DoD Assessment will not duplicate efforts from any other DoD assessment or the Cybersecurity Maturit…
  • DFARS 204.7501 Definitions.
    As used in this subpart— Controlled unclassified information means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the Government, that a law, regulation, or Governmentwide…
  • DFARS 213.301 Governmentwide commercial purchase card.
    ….7; (E) Is not for ball or roller bearings as end items; (F) Does not require access to classified or Privacy Act information; and (G) Does not require transportation of supplies by sea; and (ii) The individual making the purchase— (A)…
  • DFARS 225.872-2 Applicability.
    …pt those restricted by— (1) U.S. National Disclosure Policy, DoDD 5230.11, Disclosure of Classified Military Information to Foreign Governments and International Organizations; (2) U.S. defense mobilization base requirements purchased und…

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.