Skip to main content
DAFFARS

DAFFARS

Change Number: ARCHIVE
Effective Date: 03/18/2026

<?xml encoding="UTF-8" ?>Subpart 5304.73 - SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING

Subpart 5304.73 - SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING

5304.7303 Policy

Contracting Officers shall document in the contract file verification of the Supplier Performance Risk System (SPRS) NIST SP 800-171 summary level score.

Contracting Officers shall document acceptance or non-acceptance of receipt of a Contractor’s system security plan to validate NIST SP 800-171 security requirements in accordance with DFARS 252.204-7020 NIST SP 800-171 Assessments Requirements.