SpendQueryBeta

48 CFR · Federal Acquisition Regulation and Defense supplement

FAR and DFARS navigator

The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.

Ask the FAR

Try: · · ·

Clear

28 sections with “information assurance requirements”

  • DFARS 239.7102-3 Information assurance contractor training and certification.
    (a) For acquisitions that include information assurance functional services for DoD information systems, or that require any appropriately cleared contractor personnel to access a DoD information system to perform contract duties, the requi…
  • DFARS 252.239-7001 Information Assurance Contractor Training and Certification.
    As prescribed in 239.7103(b), use the following clause: Information Assurance Contractor Training and Certification (JAN 2008) (a) The Contractor shall ensure that personnel accessing information systems have the proper and current inform…
  • DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.
    As prescribed in 204.7304(c), use the following clause: Safeguarding Covered Defense Information and Cyber Incident Reporting (MAY 2024) (a) Definitions. As used in this clause— Adequate security means protective measures that are commen…
  • DFARS 239.7102-1 General.
    (a) Agencies shall ensure that information assurance is provided for information technology in accordance with current policies, procedures, and statutes, to include— (1) The National Security Act; (2) The Clinger-Cohen Act; (3) National…
  • DFARS 252.239-7000 Protection against compromising emanations.
    … Against Compromising Emanations (OCT 2019) (a) The Contractor shall provide or use only information technology, as specified by the Government, that has been accredited to meet the appropriate information assurance requirements of— (1) T…
  • FAR 2.101 Definitions.
    … agencies and by the Department of Defense for defense agencies. Adequate evidence means information sufficient to support the reasonable belief that a particular act or omission has occurred. Advisory and assistance services means those …
  • FAR 4.803 Contents of contract files.
    … files: (a) Contracting office contract file. (1) Purchase request, acquisition planning information, and other presolicitation documents. (2) Justifications and approvals, determinations and findings, and associated documents. (3) Evide…
  • FAR 7.105 Contents of written acquisition plans.
    …02(a), 16.103(d), and 16.505(a)(3)). (ii) For each order contemplated, discuss— (A) For information technology acquisitions, how the capital planning and investment control requirements of 40 U.S.C. 11312 and OMB Circular A-130 will be me…
  • FAR 19.704 Subcontracting plan requirements.
    …he ISRs to all first-tier subcontractors with subcontracting plans so they can enter this information into the eSRS when submitting their ISRs; and (vii) Require that each subcontractor with a subcontracting plan provide the prime contract…
  • FAR 19.705-4 Reviewing the subcontracting plan.
    …ing officer shall review the subcontracting plan for adequacy, ensuring that the required information, goals, and assurances are included (see 19.704). (a) No detailed standards apply to every subcontracting plan. Instead, the contracting …
  • FAR 19.705-7 Compliance with the subcontracting plan.
    …acting officer must look to the totality of the contractor's actions, consistent with the information and assurances provided in its plan. The fact that the contractor failed to meet its subcontracting goals does not, in and of itself, cons…
  • FAR 42.1503 Procedures.
    …tatives, project managers, and program managers). Those individuals identified may obtain information for the evaluation of performance from the program office, administrative contracting office, audit office, end users of the product or se…
  • FAR 52.212-4 Contract Terms and Conditions—Commercial Products and Commercial Services.
    …only if required elsewhere in this contract. (x) Electronic funds transfer (EFT) banking information. (A) The Contractor shall include EFT banking information on the invoice only if required elsewhere in this contract. (B) If EFT banking…
  • FAR 52.213-4 Terms and Conditions—Simplified Acquisitions (Other Than Commercial Products and Commercial Services).
    …B) Alternate I (MAR 2015) (Applies if the Contracting Officer has filled in the following information with regard to applicable directives or notices: Document title(s), source for obtaining document(s), and contract performance location ou…
  • FAR 52.219-9 Small Business Subcontracting Plan.
    …sts, SAM, veterans service organizations, the National Minority Purchasing Council Vendor Information Service, the Research and Information Division of the Minority Business Development Agency in the Department of Commerce, or small, HUBZon…
  • DFARS 212.301 Solicitation provisions and contract clauses for the acquisition of commercial products and commercial services.
    …lude an evaluation factor regarding supply chain risk (see subpart 239.73) when acquiring information technology, whether as a service or as a supply, that is a covered system, is a part of a covered system, or is in support of a covered sy…
  • FAR 52.209-1 Qualification Requirements.
    …ered by a qualification requirement has already met the standards specified, the relevant information noted below should be provided. (to the extent known) (d) Even though a product or service subject to a qualification requirement is not…
  • DFARS 239.7100 Scope of subpart.
    This subpart includes information assurance and Privacy Act considerations. Information assurance requirements are in addition to provisions concerning protection of privacy of individuals (see FAR Subpart 24.1).
  • FAR 14.201-9 Simplified contract format.
    …nce and delivery dates, period of performance, and f.o.b. point. (8) Other item-peculiar information as necessary (e.g., individual fund citations). (c) Clauses. Include the clauses required by this regulation. Additional clauses shall be…
  • FAR 15.204-2 Part I—The Schedule.
    …used to prepare RFPs. (2) When other than OF 308 or SF 33 is used, include the following information on the first page of the solicitation: (i) Name, address, and location of issuing activity, including room and building where proposals o…
  • FAR 14.201-2 Part I—The Schedule.
    …f the uniform contract format. When the SF 1447 is used as the solicitation document, the information in subdivisions (a)(2)(i) and (a)(2)(iv) of this subsection shall be inserted in block 9 of the SF 1447. (2) When the SF 33 or SF 1447 is…
  • DFARS 209.104-1 General standards.
    …See 225.771. (ii) Ownership or control by a foreign government when access to proscribed information is required to perform the contract. (A) Under 10 U.S.C. 4874(a), no DoD contract under a national security program may be awarded to an e…
  • DFARS 215.404-71-2 Performance risk.
    …roduction of simple items; (C) Rote entry or routine integration of Government-furnished information; or (D) Simple operations with Government-furnished property. (4) Technology incentive range. (i) The contracting officer may assign val…
  • DFARS 252.235-7004 Protection of Human Subjects.
    …ins data through intervention or interaction with the individual, or identifiable private information (32 CFR 219.102(f)). For example, this could include the use of human organs, tissue, and body fluids from individually identifiable livin…
  • FAR 9.106-4 Reports.
    …ent's interest but not contractually required. (d) When the surveying activity possesses information that supports a recommendation of complete award without an on-site survey and no special areas for investigation have been requested, the…
  • DFARS 209.270-4 Procedures.
    …et the criteria for designation as aviation or ship critical safety items. See additional information at PGI 209.270-4; (2) Approve qualification requirements in accordance with procedures established by the design control activity; and (…
  • DFARS 239.7102-2 Compromising emanations—TEMPEST or other standard.
    For acquisitions requiring information assurance against compromising emanations, the requiring activity is responsible for providing to the contracting officer— (a) The required protections, i.e., an established National TEMPEST standard …
  • DFARS 253.209-1 Responsible prospective contractors.
    …ther than major factors A-E and other factors A-G, check this factor. Explain the desired information in the Remarks sections.

FAR (chapter 1)

DFARS (chapter 2, Defense)

Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.