DoD acquisition
DFARS clause reference for DoD contractors
Plain-English reference for the Defense Federal Acquisition Regulation Supplement clauses that flow on DoD contracts: cybersecurity (252.204-7012 and the SPRS series), Buy American specialty metals, and noncommercial data rights. Each entry covers applicability tests, contractor pitfalls, audit-flag patterns, and the live regulatory text.
Authoritative source: https://www.acquisition.gov/dfars. Snapshot date 2026-05-08.
- DFARS 252.204-7012Safeguarding Covered Defense Information and Cyber Incident ReportingRequires DoD contractors to implement NIST SP 800-171 security controls on systems that process or store Covered Defense Information (CDI), and to report cyber incidents to DoD within 72 hours.
- DFARS 252.204-7019Notice of NIST SP 800-171 DoD Assessment RequirementsSolicitation provision that puts offerors on notice that, to be considered for a DoD award involving Covered Defense Information, they must have a current NIST SP 800-171 Basic Assessment posted in the Supplier Performance Risk System (SPRS).
- DFARS 252.204-7020NIST SP 800-171 DoD Assessment RequirementsContract clause that obligates the contractor to have a current NIST SP 800-171 assessment in SPRS, to provide DoD access for Medium or High assessments when scheduled, and to flow the requirement to subcontractors handling CDI.
- DFARS 252.225-7001Buy American and Balance of Payments ProgramDoD-specific implementation of the Buy American Act and Balance of Payments Program. Restricts acquisition of supplies to domestic end products or qualifying-country end products unless an exception or waiver applies.
- DFARS 252.225-7008Restriction on Acquisition of Specialty MetalsImplements 10 U.S.C. 4863 (formerly 10 U.S.C. 2533b) to require that specialty metals incorporated into certain DoD end items be melted or produced in the United States or in a qualifying country, with limited exceptions.
- DFARS 252.227-7013Rights in Technical Data—Noncommercial ItemsEstablishes the government's license rights in technical data delivered under DoD contracts for noncommercial items. The default license category turns on who funded the development.
- DFARS 252.227-7014Rights in Noncommercial Computer Software and Noncommercial Computer Software DocumentationThe companion to 252.227-7013 for noncommercial computer software. Establishes unlimited rights, government purpose rights, restricted rights, and specifically negotiated license rights based on development funding.
Cross-references
- Looking for clauses tied to a specific industry? NAICS reference maps the most common FAR / DFARS clauses to each NAICS code.
- Working on indirect-rate compliance? FieldLedger Indirect Rate Engine implements FAR 31.203 / CAS 418 pool definition and rate tracking.
- See how FieldLedger structures DCAA-ready accounting around these clauses on the methodology page.