Skip to main content
NSFARAgency supplement

National Science Foundation

NSF's procurement supplement.

Last reviewedJune 9, 2026Version v1

Cybersecurity rules in this supplement

NSF's acquisition supplement (NSFAR) does not publish agency-specific cybersecurity-safeguarding clauses. Cybersecurity obligations for NSF contractors come from the government-wide FAR baseline and any security requirements written into the specific contract.

In plain terms

There is no NSF-specific cyber clause to track. Your cybersecurity duties come from the FAR baseline and your contract's own terms.

Who it applies to

National Science Foundation contractors and subcontractors.

What it requires

Follow the FAR baseline for safeguarding federal information and systems, plus any security requirements stated in your specific contract.

Why it matters

Knowing the supplement adds no special cyber clause helps you scope obligations to the FAR baseline rather than an NSF-specific rule.

Citation

National Science Foundation Acquisition Regulation (NSFAR), codified at 48 C.F.R. Chapter 25.