48 CFR §4.1903
Verified against eCFR.gov as of June 20, 2026View official text on eCFR.gov ↗
The contracting officer shall insert the clause at 52.204-21, Basic Safeguarding of Covered Contractor Information Systems, in solicitations and contracts when the contractor or a subcontractor at any tier may have Federal contract information residing in or transiting through its information system.