Federal Requirements
Requirements by Agency
Most federal agencies layer their own cybersecurity clauses on top of the FAR baseline. Pick an agency to see its supplement code and what changes for contractors.
Showing 33 of 33 agencies · sorted A → Z
Agency for Global Media
IAARUSAGM's acquisition supplement — for U.S. international broadcasting.
View requirements →Agency for International Development
AIDARUSAID's procurement supplement — for international development work.
View requirements →Army Corps of Engineers
UAIThe Army Corps of Engineers' acquisition instructions for its engineering and construction work.
View requirements →Defense Information Systems Agency
DARSDISA's acquisition supplement for defense IT and communications buys.
View requirements →Defense Logistics Agency
DLADDLA's acquisition supplement for defense supply and logistics contracts.
View requirements →Department of Agriculture
AGARUSDA's procurement supplement.
View requirements →Department of Commerce
CARCommerce's procurement supplement — home to NIST and NOAA.
View requirements →Department of Defense
DFARSThe Department of Defense's master add-on to the federal procurement rules — the source of the defense cybersecurity clauses most contractors must meet.
View requirements →Department of Education
EDARThe Education Department's procurement supplement — significant for student data.
View requirements →Department of Energy
DEARDOE's procurement supplement — notable for national-security and nuclear-related work.
View requirements →Department of Health & Human Services
HHSARHHS's procurement supplement — important wherever contracts touch health data.
View requirements →Department of Homeland Security
HSARDHS's procurement supplement, with its own safeguarding and IT-security clauses.
View requirements →Department of Housing & Urban Development
HUDARHUD's procurement supplement.
View requirements →Department of Justice
JARDOJ's procurement supplement.
View requirements →Department of Labor
DOLARThe Labor Department's procurement supplement.
View requirements →Department of State
DOSARThe State Department's procurement supplement.
View requirements →Department of the Air Force
DAFFARSThe Air Force's procurement supplement, layered on the DoD-wide defense rules.
View requirements →Department of the Army
AFARSThe Army's procurement instructions, layered on top of the DoD-wide defense supplement.
View requirements →Department of the Interior
DIARInterior's procurement supplement.
View requirements →Department of the Navy
NMCARSThe Navy and Marine Corps procurement supplement, on top of the DoD-wide defense rules.
View requirements →Department of the Treasury
DTARTreasury's procurement supplement — relevant for financial and taxpayer data.
View requirements →Department of Transportation
TARDOT's procurement supplement.
View requirements →Department of Veterans Affairs
VAARThe VA's procurement supplement — significant for its handling of veteran health and personal data.
View requirements →Environmental Protection Agency
EPAARThe EPA's procurement supplement.
View requirements →Federal Employees Group Life Insurance
LIFARThe FEGLI acquisition rules — for the federal group life-insurance program.
View requirements →Federal Employees Health Benefits
FEHBARThe FEHB acquisition rules — for federal employee health-insurance carriers.
View requirements →General Services Administration
GSAR/GSAMGSA's procurement supplement — central because of the GSA Schedules many contractors use.
View requirements →National Aeronautics & Space Administration
NFSNASA's procurement supplement for space and aeronautics contracts.
View requirements →National Science Foundation
NSFARNSF's procurement supplement.
View requirements →Nuclear Regulatory Commission
NRCARThe NRC's procurement supplement — sensitive given nuclear safeguards information.
View requirements →Office of Personnel Management
OPM's procurement rules — notable after its history with personnel-data security.
View requirements →Social Security Administration
SSARSSA's procurement supplement — important for its handling of Social Security data.
View requirements →Special Operations Command
SOFARSSOCOM's acquisition supplement for special-operations procurements.
View requirements →