DFARS 204.7500 Scope of subpart
Section Defense Federal Acquisition Regulation Supplement
Facts
- Citation
- DFARS 204.7500
- Type
- Section
- Supplements
- FAR Part 4 Administrative and Information Matters
- Last amended
- 90 FR 43560 Effective Nov 10, 2025
- Text as of
- DFARS Change May 7, 2026
- Official text
- acquisition.gov
Text from acquisition.gov. Federal Register history from the Federal Register's records of the rules that amended this section.
Text
(a) This subpart prescribes policies and procedures for including the Cybersecurity Maturity Model Certification (CMMC) level requirements in DoD contracts. CMMC is a framework (see 32 CFR part 170) for assessing a contractor’s information security protections.
(b) This subpart does not abrogate any other requirements regarding contractor physical, personnel, information, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program.
(c) This subpart applies to unclassified contractor information systems.
Federal Register history
Quick answers
What is DFARS 204.7500?
DFARS 204.7500 is a section of the Defense Federal Acquisition Regulation Supplement, titled "Scope of subpart".
When was DFARS 204.7500 last changed?
The most recent final rule on record is "Defense Federal Acquisition Regulation Supplement: Assessing Contractor Implementation of Cybersecurity Requirements (DFARS Case 2019-D041)" (90 FR 43560), published Sep 10, 2025 and effective Nov 10, 2025.
Are changes to DFARS 204.7500 proposed?
No proposed rule from the last 3 years is waiting on a final rule.
On GovTribe
Follow the rules behind federal contracts
- Search Federal Register rules and proposed rules for the FAR, DFARS and agency supplements
- Solicitations, awards and government files in one search
- Ask GovTribe AI about the rules that apply to a contract