48 CFR · Federal Acquisition Regulation and Defense supplement
FAR and DFARS navigator
The codified text (eCFR, as of 2026-10-02). Under the Revolutionary FAR Overhaul ↗, agencies follow class deviations with new text for many parts while the formal rules go through the Federal Register: check the solicitation and your contract's clauses, which rule.
Ask the FAR
Try: · · ·
16 sections with “unclassified contractor information systems”
- FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems.…r information systems generally or other Federal safeguarding requirements for controlled unclassified information (CUI) as established by Executive Order 13556. (c) Subcontracts. The Contractor shall include the substance of this clause, …
- DFARS 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting.… publicly available without restrictions. Covered contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits covered defense informatio…
- DFARS 204.7500 Scope of subpart.…ion, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program. (c) This subpart applies to unclassified contr…
- DFARS 252.204-7008 Compliance with safeguarding covered defense information controls.… Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” (see http://dx.doi.org/10.6028/NIST.SP.800-171)that are in effect at the…
- DFARS 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements.…ATION LEVEL REQUIREMENTS (NOV 2025) (a) Definitions. As used in this clause- Controlled unclassified information means information the Government creates or possesses, or information an entity creates or possesses for or on behalf of the …
- DFARS 252.204-7020 NIST SP 800-171 DoD Assessment Requirements.…vernment personnel using NIST SP 800-171A, Assessing Security Requirements for Controlled Unclassified Information that— (1) Consists of— (i) A review of a contractor's Basic Assessment; (ii) A thorough document review; (iii) Verificati…
- DFARS 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.…ion Level Requirements (NOV 2025) (a) Definitions. As used in this provision, controlled unclassified information (CUI), current, Cybersecurity Maturity Model Certification (CMMC) status, Cybersecurity Maturity Model Certification unique i…
- FAR 2.101 Definitions.…ance. A contract may be a classified contract even though the contract document itself is unclassified. Classified information means any knowledge that can be communicated or any documentary material, regardless of its physical form or cha…
- FAR 4.2301 Definitions.… Federal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental…
- FAR 52.204-28 Federal Acquisition Supply Chain Security Act Orders—Federal Supply Schedules, Governmentwide Acquisition Contracts, and Multi-Agency Contracts.… Federal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental…
- FAR 52.204-30 Federal Acquisition Supply Chain Security Act Orders—Prohibition.… Federal or non-Federal information system, subject to the requirements of the Controlled Unclassified Information program (see 32 CFR part 2002); or (4) Hardware, systems, devices, software, or services that include embedded or incidental…
- DFARS 204.7300 Scope.…ion, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program.
- DFARS 204.7302 Policy.…ernment personnel using NIST SP 800-171A, “Assessing Security Requirements for Controlled Unclassified Information.” (5) The NIST SP 800-171 DoD Assessment will not duplicate efforts from any other DoD assessment or the Cybersecurity Matur…
- DFARS 217.207 Exercise of options.…ation systems that process, store, or transmit Federal contract information or controlled unclassified information (see 204.7503(c)).
- DFARS 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements.…listed in this section. DoD will retain and protect any such documentation as “Controlled Unclassified Information (CUI)” and intended for internal DoD use only. The information will be protected against unauthorized use and release, includ…
- DFARS 252.239-7010 Cloud Computing Services.…tem. Spillage security incident that results in the transfer of classified or controlled unclassified information onto an information system not accredited (i.e., authorized) for the appropriate security level. (b) Cloud computing securit…
FAR (chapter 1)
- Part 1 Federal Acquisition Regulations System 58 sections
- Part 2 Definitions of Words and Terms 3 sections
- Part 3 Improper Business Practices and Personal Conflicts of Interest 98 sections
- Part 4 Administrative and Information Matters 116 sections
- Part 5 Publicizing Contract Actions 34 sections
- Part 6 Competition Requirements 34 sections
- Part 7 Acquisition Planning 34 sections
- Part 8 Required Sources of Supplies and Services 67 sections
- Part 9 Contractor Qualifications 106 sections
- Part 10 Market Research 4 sections
- Part 11 Describing Agency Needs 33 sections
- Part 12 Acquisition of Commercial Products and Commercial Services 38 sections
- Part 13 Simplified Acquisition Procedures 49 sections
- Part 14 Sealed Bidding 82 sections
- Part 15 Contracting by Negotiation 81 sections
- Part 16 Types of Contracts 74 sections
- Part 17 Special Contracting Methods 50 sections
- Part 18 Emergency Acquisitions 34 sections
- Part 19 Small Business Programs 126 sections
- Part 22 Application of Labor Laws to Government Acquisitions 205 sections
- Part 23 Environment, Sustainable Acquisition, and Material Safety 38 sections
- Part 24 Protection of Privacy and Freedom of Information 10 sections
- Part 25 Foreign Acquisition 81 sections
- Part 26 Other Socioeconomic Programs 36 sections
- Part 27 Patents, Data, and Copyrights 59 sections
- Part 28 Bonds and Insurance 61 sections
- Part 29 Taxes 23 sections
- Part 30 Cost Accounting Standards Administration 30 sections
- Part 31 Contract Cost Principles and Procedures 87 sections
- Part 32 Contract Financing 175 sections
- Part 33 Protests, Disputes, and Appeals 23 sections
- Part 34 Major System Acquisition 20 sections
- Part 35 Research and Development Contracting 25 sections
- Part 36 Construction and Architect-engineer Contracts 81 sections
- Part 37 Service Contracting 46 sections
- Part 38 Federal Supply Schedule Contracting 3 sections
- Part 39 Acquisition of Information Technology 14 sections
- Part 40 Information Security and Supply Chain Security 12 sections
- Part 41 Acquisition of Utility Services 17 sections
- Part 42 Contract Administration and Audit Services 84 sections
- Part 43 Contract Modifications 14 sections
- Part 44 Subcontracting Policies and Procedures 24 sections
- Part 45 Government Property 33 sections
- Part 46 Quality Assurance 60 sections
- Part 47 Transportation 106 sections
- Part 48 Value Engineering 13 sections
- Part 49 Termination of Contracts 108 sections
- Part 50 Extraordinary Contractual Actions and the Safety Act 34 sections
- Part 51 Use of Government Sources by Contractors 15 sections
- Part 52 Solicitation Provisions and Contract Clauses 680 sections
- Part 53 Forms 61 sections
DFARS (chapter 2, Defense)
- Part 201 Federal Acquisition Regulations System 24 sections
- Part 202 Definitions of Words and Terms 1 sections
- Part 203 Improper Business Practices and Personal Conflicts of Interest 28 sections
- Part 204 Administrative and Information Matters 76 sections
- Part 205 Publicizing Contract Actions 11 sections
- Part 206 Competition Requirements 20 sections
- Part 207 Acquisition Planning 22 sections
- Part 208 Required Sources of Supplies and Services 31 sections
- Part 209 Contractor Qualifications 55 sections
- Part 210 Market Research 2 sections
- Part 211 Describing Agency Needs 22 sections
- Part 212 Acquisition of Commercial Products and Commercial Services 24 sections
- Part 213 Simplified Acquisition Procedures 23 sections
- Part 214 Sealed Bidding 14 sections
- Part 215 Contracting by Negotiation 66 sections
- Part 216 Types of Contracts 36 sections
- Part 217 Special Contracting Methods 64 sections
- Part 218 Emergency Acquisitions 7 sections
- Part 219 Small Business Programs 47 sections
- Part 222 Application of Labor Laws to Government Acquisitions 56 sections
- Part 223 Environment, Sustainable Acquisition, and Material Safety 34 sections
- Part 224 Protection of Privacy and Freedom of Information 2 sections
- Part 225 Foreign Acquisition 251 sections
- Part 226 Other Socioeconomic Programs 14 sections
- Part 227 Patents, Data, and Copyrights 99 sections
- Part 228 Bonds and Insurance 17 sections
- Part 229 Taxes 9 sections
- Part 230 Cost Accounting Standards Administration 2 sections
- Part 231 Contract Cost Principles and Procedures 13 sections
- Part 232 Contract Financing 74 sections
- Part 233 Protests, Disputes, and Appeals 8 sections
- Part 234 Major System Acquisition 13 sections
- Part 235 Research and Development Contracting 16 sections
- Part 236 Construction and Architect-engineer Contracts 25 sections
- Part 237 Service Contracting 67 sections
- Part 239 Acquisition of Information Technology 38 sections
- Part 241 Acquisition of Utility Services 8 sections
- Part 242 Contract Administration and Audit Services 40 sections
- Part 243 Contract Modifications 18 sections
- Part 244 Subcontracting Policies and Procedures 13 sections
- Part 245 Government Property 23 sections
- Part 246 Quality Assurance 39 sections
- Part 247 Transportation 27 sections
- Part 249 Termination of Contracts 14 sections
- Part 250 Extraordinary Contractual Actions and the Safety Act 16 sections
- Part 251 Use of Government Sources by Contractors 5 sections
- Part 252 Solicitation Provisions and Contract Clauses 405 sections
- Part 253 Forms 10 sections
- Part 270 Defense Contracting Programs 7 sections
Source: eCFR, 48 CFR chapters 1 and 2 (GPO GovInfo bulk data) ↗. Rule changes in progress: FAR, DFARS. Terms: glossary.