In plain terms. DARS is the Defense Information Systems Agency's acquisition supplement, sitting on top of the FAR and DFARS for the agency that runs much of DoD's IT and communications.
Who it applies to. Contractors providing IT, networking, and communications to DISA and DoD.
What it requires. Meet the FAR and DFARS, then DISA additions. Because DISA work is IT-centric, expect close attention to the DFARS safeguarding and incident-reporting clauses. Because the work is Department of Defense work, contracts here generally carry the core DFARS cyber clause 252.204-7012 — protect covered defense information to NIST SP 800-171 and report cyber incidents to DoD within 72 hours — plus CMMC requirements as they phase in.
Why it matters. DISA contracts often touch sensitive defense networks, so the DFARS cyber clauses are especially consequential here.
Citation. DARS, the DISA Acquisition Regulation Supplement supplement to the Federal Acquisition Regulation (FAR), codified in the FAR System at Title 48 of the C.F.R.