Contract Policy - Cyber

We formulate contracting policy to implement Federal cybersecurity requirements in DoD contracts.

Section 889

Prohibition on Certain Telecommunications and Video Surveillance Services or Equipment - Implemented at FAR 4.21

Learn More

Cybersecurity Maturity Model Certification (CMMC)

Implemented at DFARS 205.75

Learn More

Safeguarding Information and Cyber Incident Reporting

Safeguarding Covered Defense Information and Cyber Incident Reporting

Learn More

Section 2339a

Requirements for Information Relating to Supply Chain Risk

Learn More

Supplier Performance Risk System (SPRS)

The authoritative source for supplier and product performance information assessments for the DoD acquisition community.

Learn More

Governmentwide Purchase Card (GPC)

Cyber policies applicable to GPC

Learn More

Other Transactions (OTs)

Cyber policies applicable to OTs

Learn More