StacksVerified U.S. regulatory reference

48 CFR §204.7303

Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
  1. (a)Follow the procedures relating to safeguarding covered defense information at PGI 204.7303.
  2. (b)The contracting officer shall verify that the summary level score of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old, unless a lesser time is specified in the solicitation) (see 252.204-7019) for each covered contractor information system that is relevant to an offer, contract, task order, or delivery order are posted in Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/), prior to—
    1. (1)Awarding a contract, task order, or delivery order to an offeror or contractor that is required to implement NIST SP 800-171 in accordance with the clause at 252.204-7012; or
    2. (2)Exercising an option period or extending the period of performance on a contract, task order, or delivery order with a contractor that is that is required to implement the NIST SP 800-171 in accordance with the clause at 252.204-7012.