Cybersecurity rules in this supplement
The Interior Acquisition Regulation (DIAR) does not add agency-specific cybersecurity-safeguarding clauses. Its information rules are privacy-focused:
DIAR Subpart 1424.1 — Protection of Individual Privacy and clause 1452.224-1 — Privacy Act Notification. Apply Privacy Act obligations to covered work.
For cybersecurity obligations, Interior contractors look to the FAR baseline.
In plain terms
Interior's supplement covers Privacy Act handling, not a dedicated cybersecurity clause. Your cyber duties come from the government-wide FAR baseline and your specific contract terms.
Who it applies to
Interior contractors and subcontractors, particularly those operating Privacy Act systems of records.
What it requires
Follow the FAR baseline for safeguarding information, and comply with Interior's Privacy Act provisions where they apply.
Why it matters
Scoping correctly matters: there is no DIAR-specific cyber rule, so the FAR baseline sets your cybersecurity floor.
Citation
Interior Acquisition Regulation (DIAR), codified at 48 C.F.R. Chapter 14.