48 CFR § 204.7303 - 204.7303 Procedures.

---
identifier: "/us/cfr/t48/s204.7303"
source: "ecfr"
legal_status: "authoritative_unofficial"
title: "48 CFR § 204.7303 - 204.7303   Procedures."
title_number: 48
title_name: "Federal Acquisition Regulations System"
section_number: "204.7303"
section_name: "204.7303   Procedures."
chapter_number: 2
chapter_name: "DEFENSE ACQUISITION REGULATIONS SYSTEM, DEPARTMENT OF DEFENSE"
subchapter_number: "A"
subchapter_name: "GENERAL"
part_number: "204"
part_name: "ADMINISTRATIVE AND INFORMATION MATTERS"
positive_law: false
currency: "2026-03-24"
last_updated: "2026-03-24"
format_version: "1.1.0"
generator: "[email protected]"
authority: "41 U.S.C. 1303 and 48 CFR chapter 1."
regulatory_source: "56 FR 36289, July 31, 1991, unless otherwise noted."
cfr_part: "204"
---


# 204.7303 204.7303   Procedures.

(a) Follow the procedures relating to safeguarding covered defense information at PGI 204.7303.

(b) The contracting officer shall verify that the summary level score of a current NIST SP 800-171 DoD Assessment (*i.e.,* not more than 3 years old, unless a lesser time is specified in the solicitation) (see 252.204-7019) for each covered contractor information system that is relevant to an offer, contract, task order, or delivery order are posted in Supplier Performance Risk System (SPRS) (*https://www.sprs.csd.disa.mil/*), prior to—

(1) Awarding a contract, task order, or delivery order to an offeror or contractor that is required to implement NIST SP 800-171 in accordance with the clause at 252.204-7012; or

(2) Exercising an option period or extending the period of performance on a contract, task order, or delivery order with a contractor that is that is required to implement the NIST SP 800-171 in accordance with the clause at 252.204-7012.

[85 FR 61519, Sept. 29, 2020]