FAR 52.204-21
The FAR clause requiring basic safeguarding of Federal Contract Information on contractor systems. Specifies 15 security requirements aligned with CMMC Level 1.
Related Terms
FAR
The primary regulation governing all federal procurement, establishing uniform policies and procedures for acquiring supplies and services by executive agencies.
FCI
Information not intended for public release that is provided by or generated for the government under a contract to develop or deliver a product or service.
CMMC Level 1 (Foundational)
The basic CMMC tier requiring the 15 safeguarding requirements at FAR 52.204-21(b)(1)(i)-(xv) for protecting Federal Contract Information (32 CFR 170.14(c)(2)). Allows annual self-assessment.
Related Guides
Check Your CMMC Readiness
Run our free compliance tools to see where your organization stands.
Audit Your Tech Stack FreeTurn this gap analysis into a remediation plan
This FAR 52.204-21 explainer is the start, not the answer. Book a 25-minute compliance assessment — you leave with a prioritized roadmap and a fixed-fee implementation quote.
Apply for an evaluationRelated: how much CMMC certification costs — DoD’s own priced figures