<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE dita
  PUBLIC "-//OASIS//DTD DITA Composite//EN" "ditabase.dtd">
<dita xmlns:ditaarch="http://dita.oasis-open.org/architecture/2005/"
      domains="(topic task)                            (topic concept)                            (topic concept glossentry)                            (topic concept glossgroup)                            (topic reference)                            (topic troubleshooting++task) (topic task)                            (topic abbrev-d)                            a(props deliveryTarget)                            (topic equation-d)                            (topic hazard-d)                            (topic hi-d)                            (topic indexing-d)                            (topic markup-d)                            (topic mathml-d)                            (topic pr-d)                            (topic relmgmt-d)                            (topic sw-d)                            (topic svg-d)                            (topic ui-d)                            (topic ut-d)                            (topic markup-d xml-d)                            (topic task strictTaskbody-c)   "
      ditaarch:DITAArchVersion="1.3">
   <concept id="DFARS_239.7102-1"
            ditaarch:DITAArchVersion="1.3"
            class="- topic/topic concept/concept ">
      <title class="- topic/title ">
         <ph props="autonumber" class="- topic/ph ">239.7102-1</ph> General.</title>
      <conbody class="- topic/body  concept/conbody ">
         <p outputclass="List1" class="- topic/p ">(a)  Agencies shall ensure that information assurance is provided for information technology in accordance with current policies, procedures, and statutes, to include—</p>
         <p outputclass="List2" class="- topic/p ">(1)  The National Security Act;</p>
         <p outputclass="List2" class="- topic/p ">(2)  The Clinger-Cohen Act;</p>
         <p outputclass="List2" class="- topic/p ">(3)  National Security Telecommunications and Information Systems Security Policy No. 11;</p>
         <p outputclass="List2" class="- topic/p ">(4)  Federal Information Processing Standards; </p>
         <p outputclass="List2" class="- topic/p ">(5)  DoD Directive 8500.1, Information Assurance; </p>
         <p outputclass="List2" class="- topic/p ">(6)  DoD Instruction 8500.2, Information Assurance Implementation;</p>
         <p outputclass="List2" class="- topic/p ">(7)  DoD Directive 8140.01, Cyberspace Workforce Management; and</p>
         <p outputclass="List2" class="- topic/p ">(8)  DoD Manual 8570.01-M, Information Assurance Workforce Improvement Program.</p>
         <p outputclass="List1" class="- topic/p ">(b)  For all acquisitions, the requiring activity is responsible for providing to the contracting officer—</p>
         <p outputclass="List2" class="- topic/p ">(1)  Statements of work, specifications, or statements of objectives that meet information assurance requirements as specified in paragraph (a) of this subsection;</p>
         <p outputclass="List2" class="- topic/p ">(2)  Inspection and acceptance contract requirements; and</p>
         <p outputclass="List2" class="- topic/p ">(3)  A determination as to whether the information technology requires protection against compromising emanations.</p>
      </conbody>
   </concept>
</dita>
