Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

Global Accelerated Learning • Est. 1999
Glossary Term DFARS

Training Camp • Cybersecurity Glossary

What is DFARS?

DFARS is the DoD acquisition supplement whose 252.204-7012 clause mandates NIST 800-171 controls and 72-hour cyber incident reporting.

Glossary > Governance, Risk & Compliance > DFARS

Understanding DFARS

The Defense Federal Acquisition Regulation Supplement DFARS is a set of regulations that govern Department of Defense procurement and impose cybersecurity obligations on contractors. The widely cited clause DFARS 252.204-7012 requires defense contractors to safeguard Controlled Unclassified Information by implementing the security controls in NIST SP 800-171 and to report cyber incidents within 72 hours. It is a key precursor to the CMMC program.

Learn More About DFARS:

Ready to Get Certified?

Turn knowledge into credentials with our instructor-led cybersecurity boot camps.

View All Courses →