48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

37 sections with “information assurance”

  • DFARS 239.7102-3 Information assurance contractor training and certification.
    (a) For acquisitions that include information assurance functional services for DoD information systems, or that require any appropriately cleared contractor personnel to access a DoD information system to perform contract duties, the requi…
  • DFARS 252.239-7001 Information Assurance Contractor Training and Certification.
    As prescribed in 239.7103(b), use the following clause: Information Assurance Contractor Training and Certification (JAN 2008) (a) The Contractor shall ensure that personnel accessing information systems have the proper and current inform…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    As prescribed in 204.7304(c), use the following clause: Safeguarding Covered Defense Information and Cyber Incident Reporting (MAY 2024) (a) Definitions. As used in this clause— Adequate security means protective measures that are commen…
  • DFARS 239.7102-1 General.
    (a) Agencies shall ensure that information assurance is provided for information technology in accordance with current policies, procedures, and statutes, to include— (1) The National Security Act; (2) The Clinger-Cohen Act; (3) National…
  • DFARS 252.239-7000 Protection against compromising emanations.
    … Against Compromising Emanations (OCT 2019) (a) The Contractor shall provide or use only information technology, as specified by the Government, that has been accredited to meet the appropriate information assurance requirements of— (1) T…
  • DFARS 239.7101 Definition.
    Information assurance, as used in this subpart, means measures that protect and defend information, that is entered, processed, transmitted, stored, retrieved, displayed, or destroyed, and information systems, by ensuring their availability…
  • FAR 2.101 Definitions.
    … agencies and by the Department of Defense for defense agencies. Adequate evidence means information sufficient to support the reasonable belief that a particular act or omission has occurred. Advisory and assistance services means those …
  • FAR 4.803 Contents of contract files.
    … files: (a) Contracting office contract file. (1) Purchase request, acquisition planning information, and other presolicitation documents. (2) Justifications and approvals, determinations and findings, and associated documents. (3) Evide…
  • FAR 7.105 Contents of written acquisition plans.
    …02(a), 16.103(d), and 16.505(a)(3)). (ii) For each order contemplated, discuss— (A) For information technology acquisitions, how the capital planning and investment control requirements of 40 U.S.C. 11312 and OMB Circular A-130 will be me…
  • FAR 16.403-2 Fixed-price incentive (successive targets) contracts.
    …centive (successive targets) contract is appropriate when— (1) Available cost or pricing information is not sufficient to permit the negotiation of a realistic firm target cost and profit before award; (2) Sufficient information is availa…
  • FAR 19.705-4 Reviewing the subcontracting plan.
    …ing officer shall review the subcontracting plan for adequacy, ensuring that the required information, goals, and assurances are included (see 19.704). (a) No detailed standards apply to every subcontracting plan. Instead, the contracting …
  • FAR 19.705-7 Compliance with the subcontracting plan.
    …acting officer must look to the totality of the contractor's actions, consistent with the information and assurances provided in its plan. The fact that the contractor failed to meet its subcontracting goals does not, in and of itself, cons…
  • FAR 42.1503 Procedures.
    …tatives, project managers, and program managers). Those individuals identified may obtain information for the evaluation of performance from the program office, administrative contracting office, audit office, end users of the product or se…
  • FAR 50.103-4 Facts and evidence.
    …st the contractor to support any request made under 50.103-3(a) with any of the following information: (1) A brief description of the contracts involved, the dates of execution and amendments, the items being acquired, the price or prices,…
  • FAR 52.212-4 Contract Terms and Conditions—Commercial Products and Commercial Services.
    …only if required elsewhere in this contract. (x) Electronic funds transfer (EFT) banking information. (A) The Contractor shall include EFT banking information on the invoice only if required elsewhere in this contract. (B) If EFT banking…
  • FAR 52.213-4 Terms and Conditions—Simplified Acquisitions (Other Than Commercial Products and Commercial Services).
    …B) Alternate I (MAR 2015) (Applies if the Contracting Officer has filled in the following information with regard to applicable directives or notices: Document title(s), source for obtaining document(s), and contract performance location ou…
  • FAR 52.219-9 Small Business Subcontracting Plan.
    …sts, SAM, veterans service organizations, the National Minority Purchasing Council Vendor Information Service, the Research and Information Division of the Minority Business Development Agency in the Department of Commerce, or small, HUBZon…
  • DFARS 212.301 Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.
    …lude an evaluation factor regarding supply chain risk (see subpart 239.73) when acquiring information technology, whether as a service or as a supply, that is a covered system, is a part of a covered system, or is in support of a covered sy…
  • DFARS 239.7103 Contract clauses.
    …000, Protection Against Compromising Emanations, in solicitations and contracts involving information technology that requires protection against compromising emanations. (b) Use the clause at 252.239-7001, Information Assurance Contractor…
  • DFARS 239.7100 Scope of subpart.
    This subpart includes information assurance and Privacy Act considerations. Information assurance requirements are in addition to provisions concerning protection of privacy of individuals (see FAR Subpart 24.1).
  • DFARS 252.242-7006 Accounting System Administration.
    … areas such as indirect and other direct costs, compensation, billing, labor, and general information technology. Material weakness means a deficiency or combination of deficiencies in the internal control over information in contractor bu…
  • FAR 14.201-9 Simplified contract format.
    …nce and delivery dates, period of performance, and f.o.b. point. (8) Other item-peculiar information as necessary (e.g., individual fund citations). (c) Clauses. Include the clauses required by this regulation. Additional clauses shall be…
  • FAR 15.204-2 Part I—The Schedule.
    …used to prepare RFPs. (2) When other than OF 308 or SF 33 is used, include the following information on the first page of the solicitation: (i) Name, address, and location of issuing activity, including room and building where proposals o…
  • DFARS 239.7102-2 Compromising emanations—TEMPEST or other standard.
    For acquisitions requiring information assurance against compromising emanations, the requiring activity is responsible for providing to the contracting officer— (a) The required protections, i.e., an established National TEMPEST standard …
  • FAR 14.201-2 Part I—The Schedule.
    …f the uniform contract format. When the SF 1447 is used as the solicitation document, the information in subdivisions (a)(2)(i) and (a)(2)(iv) of this subsection shall be inserted in block 9 of the SF 1447. (2) When the SF 33 or SF 1447 is…
  • FAR 19.704 Subcontracting plan requirements.
    …he ISRs to all first-tier subcontractors with subcontracting plans so they can enter this information into the eSRS when submitting their ISRs; and (vii) Require that each subcontractor with a subcontracting plan provide the prime contract…
  • DFARS 209.104-1 General standards.
    …See 225.771. (ii) Ownership or control by a foreign government when access to proscribed information is required to perform the contract. (A) Under 10 U.S.C. 4874(a), no DoD contract under a national security program may be awarded to an e…
  • DFARS 215.404-71-2 Performance risk.
    …roduction of simple items; (C) Rote entry or routine integration of Government-furnished information; or (D) Simple operations with Government-furnished property. (4) Technology incentive range. (i) The contracting officer may assign val…
  • DFARS 252.235-7004 Protection of Human Subjects.
    …ins data through intervention or interaction with the individual, or identifiable private information (32 CFR 219.102(f)). For example, this could include the use of human organs, tissue, and body fluids from individually identifiable livin…
  • FAR 9.106-4 Reports.
    …ent's interest but not contractually required. (d) When the surveying activity possesses information that supports a recommendation of complete award without an on-site survey and no special areas for investigation have been requested, the…
  • FAR 41.202 Procedures.
    …y history file shall contain, in addition to applicable documents in 4.803, the following information: (1) The unsigned, tendered contract and any related letter of transmittal. (2) The reasons stated by the utility supplier for not execu…
  • FAR 52.209-1 Qualification Requirements.
    …ered by a qualification requirement has already met the standards specified, the relevant information noted below should be provided. (to the extent known) (d) Even though a product or service subject to a qualification requirement is not…
  • DFARS 209.270-4 Procedures.
    …et the criteria for designation as aviation or ship critical safety items. See additional information at PGI 209.270-4; (2) Approve qualification requirements in accordance with procedures established by the design control activity; and (…
  • DFARS 225.872-5 Contract administration.
    …[email protected]. (b) Follow the contract administration procedures at PGI 225.872-5(b). (c) Information on quality assurance delegations to foreign governments is in Subpart 246.4, Government Contract Quality Assurance.
  • DFARS 242.7501 Definitions.
    … areas such as indirect and other direct costs, compensation, billing, labor, and general information technology.
  • DFARS 246.406 Foreign governments.
    …s for the country where a defense contract will be performed. (See subpart 225.8 for more information about MOUs.)
  • DFARS 253.209-1 Responsible prospective contractors.
    …ther than major factors A-E and other factors A-G, check this factor. Explain the desired information in the Remarks sections.

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.