Skip to main content
govconCyber

General educational information — not legal advice in any jurisdiction. Read the full disclaimer.

Find My Requirements

Answer a few questions about your organization, contract, and data to get a plain-language summary of your cybersecurity compliance obligations.

Educational estimate only — general guidance, not legal advice or a definitive determination of your obligations.

  1. 1Org / Contract
  2. 2Where You Operate
  3. 3Data
  4. 4Company Size
  5. 5Industry

What type of contract are you working under?

Select all that apply — many contractors work across multiple vehicles.

How This Tool Works

Each answer narrows a curated set of rules that map contract type, data category, and industry to specific FAR/DFARS clauses, frameworks, and statutes. A rule appears when every one of its conditions either matches your answer or is left open as a wildcard. We sort by priority so the highest-impact obligations show first, and we de-duplicate so the same clause never appears twice.

The rule set is maintained by practitioners and updated when new federal rules are finalized. It is intentionally conservative — when in doubt, we surface the broader baseline rather than guess.