REGULATORY LIBRARY
98 docs in this shelf
The load-bearing documents for a DIB program — CMMC / DFARS regulatory text (eCFR), federal rulemaking, NIST publications and OIRA review — organized as a library. Pick a document; the reader shows the dex dossier: what it says, why it matters, and the concrete obligations it imposes. Originals open at the source.
DIRECTORY_TREE
▾CMMC / DFARS · eCFR
98
●
DFARS 252.204 (cyber clauses): 252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7004 Antiterrorism Awareness Training for Contractors. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7009 Limitations on the Use or Disclosure of Third-Party Contractor Reported Cyber Incident Information. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7014 Limitations on the Use or Disclosure of Information by Litigation Support Contractors. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7020 NIST SP 800-171 DoD Assessment Requirements. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirement. amended 2023-01-31
2023-01-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2022-05-26
2022-05-26 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7020 NIST SP 800-171 DoD Assessment Requirements. amended 2022-03-18
2022-03-18 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements. amended 2022-03-18
2022-03-18 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7023 Reporting Requirements for Contracted Services. amended 2021-07-09
2021-07-09 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services. amended 2021-07-09
2021-07-09 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2021-05-20
2021-05-20 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7022 Expediting Contract Closeout. amended 2021-05-20
2021-05-20 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7017 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services - Representation. amended 2021-05-20
2021-05-20 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services. amended 2021-01-15
2021-01-15 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7020 NIST SP 800-171 DoD Assessment Requirements. amended 2020-11-30
2020-11-30 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirement. amended 2020-11-30
2020-11-30 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7019 Notice of NIST SP 800-171 DoD Assessment Requirements. amended 2020-11-30
2020-11-30 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2020-11-23
2020-11-23 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7020 xxx amended 2020-09-29
2020-09-29 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7019 xxx amended 2020-09-29
2020-09-29 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7021 xxx amended 2020-09-29
2020-09-29 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7006 Billing instructions. amended 2020-04-08
2020-04-08 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7002 Payment for Contract Line or Subline Items Not Separately Priced. amended 2020-04-08
2020-04-08 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2020-04-08
2020-04-08 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7018 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services. amended 2019-12-31
2019-12-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2019-12-31
2019-12-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7012 Safeguarding covered defense information and cyber incident reporting. amended 2019-12-31
2019-12-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7016 Covered Defense Telecommunications Equipment or Services - Representation. amended 2019-12-31
2019-12-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7017 Prohibition on the Acquisition of Covered Defense Telecommunications Equipment or Services - Representation. amended 2019-12-31
2019-12-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7014 Limitations on the Use or Disclosure of Information by Litigation Support Contractors. amended 2019-10-31
2019-10-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7013 [Reserved] amended 2019-10-31
2019-10-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7015 Notice of Authorized Disclosure of Information for Litigation Support. amended 2019-10-31
2019-10-31 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2019-06-28
2019-06-28 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7005 [Reserved] amended 2019-04-01
2019-04-01 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2019-04-01
2019-04-01 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7004 Antiterrorism Awareness Training for Contractors. amended 2019-02-15
2019-02-15 · ecfr-amendment
●
DFARS 252.204 (cyber clauses): 252.204-7007 Alternate A, Annual Representations and Certifications. amended 2018-12-21
2018-12-21 · ecfr-amendment
▸Federal rulemaking
14
▸NIST publications
12
▸OIRA · OMB review
1
LAST_SYNC: 2026-08-15 00:00
DOC_VIEWER
open original ↗
eCFR
rule
2025-11-10
◆ DEX DOSSIER
DFARS 252.204 (cyber clauses): 252.204-7021 Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements. amended 2025-11-10
This DFARS clause requires contractors to represent their CMMC certification level in solicitations and contracts.
DFARS 252.204-7025 mandates that contractors include a representation regarding their Cybersecurity Maturity Model Certification (CMMC) level in solicitations and contracts. This clause ensures that the government is aware of the contractor's cybersecurity posture and compliance level before awarding or continuing a contract.
--- [ Regulatory impact ] ---
DIBs must accurately represent their CMMC level to avoid contract disqualification or non-compliance findings during audits.
Obligations it imposes · 2
- Include a representation of CMMC certification level in solicitations and contracts.
- Ensure the represented CMMC level matches the actual certification status.
OPEN_ORIGINAL ↗
PERMALINK ⎘
ecfr/496c8b2d-9e9c-4bea-a500-6deb5074891f◈ IRIX
document body stays at the source — we index, enrich & link
CONTROL FAMILIES
None identified for this document.
RELATED DOCUMENTS
No related documents yet.