FAR 52.204-21 Basic Safeguarding of Covered Contractor Information Systems
Prescribed in 4.1903 | |
Effective Date: | 1 June 2016 |
Clause or Provision: | Clause |
Provision or Clause Number: | 52.204-21 Basic Safeguarding of Covered Contractor Information Systems |
Principle Type And/Or Purpose of Contract: | |
Required: | |
Applicable: | |
Optional: | |
Subject: | |
ProcurementType: | |
Contract Threshold: | |
Prescription Overview: |
The contracting officer shall insert the clause at 52.204-21, Basic Safeguarding of Covered Contractor Information Systems, in solicitations and contracts when the contractor or a subcontractor at any tier may have Federal contract information residing in or transiting through its information system. |
Clause Overview: |
Basic Safeguarding of Covered Contractor Information Systems (Jun 2016)(a) Definitions. As used in this clause–“Covered contractor information system” means an information system that is owned or operated by a contractor that processes, stores, or transmits Federal contract information. “Federal contract information” means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public websites) or simple transactional information, such as necessary to process payments. “Information” means any communication or representation of knowledge such as facts, data, or opinions, in any medium or form, including textual, numerical, graphic, cartographic, narrative, or audiovisual (Committee on National Security Systems Instruction (CNSSI) 4009). “Information system” means a discrete set of information resources organized for the collection, processing, maintenance, use, sharing, dissemination, or disposition of information (44 U.S.C. 3502). “Safeguarding” means measures or controls that are prescribed to protect information systems. (b) Safeguarding requirements and procedures.(1) The Contractor shall apply the following basic safeguarding requirements and procedures to protect covered contractor information systems. Requirements and procedures for basic safeguarding of covered contractor information systems shall include, at a minimum, the following security controls:
(c) SubcontractsThe Contractor shall include the substance of this clause, including this paragraph (c), in subcontracts under this contract (including subcontracts for the acquisition of commercial items, other than commercially available off-the-shelf items), in which the subcontractor may have Federal contract information residing in or transiting through its information system. |
Important Notes/Requirements: | |
Subcontract Threshold: | |
Incorporated by Reference: | Yes |
Uniform Contract Format: | |
Editor: | Marshall |
Personal notes.