DFARSDefense Federal Acquisition Regulation Supplement
DoD-specific supplement to the FAR that implements defense acquisition policies, including cybersecurity clauses like DFARS 252.204-7012 for CUI protection.
Related Terms
FAR
The primary regulation governing all federal procurement, establishing uniform policies and procedures for acquiring supplies and services by executive agencies.
CUI
Government-created or -owned information that requires safeguarding controls per law, regulation, or government-wide policy, but is not classified.
NIST SP 800-171
The NIST standard for protecting CUI in non-federal systems. Revision 2 — the revision DoD assesses — specifies 110 security requirements and forms the basis of CMMC Level 2 and DFARS 252.204-7012 compliance.
CMMC
A DoD framework requiring defense contractors to meet specific cybersecurity standards before handling federal contract information.
Related Guides
Check Your CMMC Readiness
Run our free compliance tools to see where your organization stands.
Audit Your Tech Stack FreeTalk this gap analysis through with a founder
This Defense Federal Acquisition Regulation Supplement explainer is the start, not the answer. Book a 25-minute fit call with a founder who builds and runs the platform, and find out whether we are the right people to help you close the gaps.
Book a 25-minute fit callRelated: how much CMMC certification costs — DoD’s own priced figures