Cybersecurity rules in this supplement
The Treasury Acquisition Regulation (DTAR) does not publish a general cybersecurity-safeguarding clause in the supplement itself. Cybersecurity obligations come from the government-wide FAR baseline and contract-specific terms.
Note: Treasury bureaus that handle Federal Tax Information impose separate, statute-driven safeguards (IRS Publication 1075) outside the acquisition supplement.
In plain terms
Treasury's supplement adds no standalone cyber clause, so your general cyber duties come from the FAR baseline. But work touching federal tax information triggers separate, strict IRS safeguarding rules.
Who it applies to
Treasury contractors and subcontractors; heightened rules apply separately to anyone handling Federal Tax Information.
What it requires
Follow the FAR baseline for safeguarding information, and meet IRS Publication 1075 (or other bureau-specific) safeguards where your contract involves federal tax or financial data.
Why it matters
The supplement itself adds no cyber clause, but Treasury's taxpayer-data work can trigger some of the strictest safeguarding rules in government — so identifying the right authority matters.
Citation
Department of the Treasury Acquisition Regulation (DTAR), codified at 48 C.F.R. Chapter 10.