Cybersecurity rules in this supplement
The USAID Acquisition Regulation (AIDAR) governs access to USAID systems and IT security:
AIDAR Part 739 — Acquisition of Information Technology. Sets USAID policy for acquiring and securing IT.
AIDAR clause 752.239-70 — Information Technology Authorization. Requires authorization for IT systems used on USAID work.
AIDAR clause 752.204-72 — Access to USAID Facilities and USAID's Information Systems. Governs contractor access to USAID systems and facilities, including security and credentialing conditions.
AIDAR clause 752.204-2 — Security Requirements. Applies security requirements, including for classified work where relevant.
In plain terms
If you use IT systems for USAID or need access to USAID's networks and facilities, you must get the required authorizations and meet USAID's security and access conditions before you connect.
Who it applies to
Contractors and subcontractors that access USAID information systems or facilities or provide IT for USAID work.
What it requires
Follow the FAR baseline, then: obtain IT authorization, meet USAID's access and security requirements for systems and facilities, and follow applicable security requirements for sensitive or classified work.
Why it matters
USAID operates worldwide and relies on contractor-run systems, so its authorization and access-security rules are gatekeepers for getting on the network.
Citation
USAID Acquisition Regulation (AIDAR), codified at 48 C.F.R. Chapter 7.