Clauses · FAR · Cybersecurity
FAR 52.204-2 Security Requirements
Does the regulation require it to flow down?
Yes
(d): insert substantially conforming terms, including paragraph (d) itself, in all subcontracts involving access to classified information
- Form
- substance ('terms that conform substantially', excluding the reference to the Changes clause)
- Reaches
- all tiers
Checked against acquisition.gov on 2026-08-04 · edition MAR 2021 (Basic; Alt I and Alt II of APR 1984) · base v0.9.3 Read the text ↗
What it makes you produce
2 items for your checklist, slowest first.
A program you have to be running
You are either running it or you are not, and what the prime asks for is the date it started.
- 52.204-2(b)(1)
The security program the operating manual at 32 CFR part 117 requires — a facility security officer, cleared people, storage, marking, transmission and reporting
Owed when the same access (a) limits the clause to, and it follows any revision of the manual you are given notice of
A state you have to be in, in a government system
The record has to be posted before the prime can see it, and posting is not the same day as being ready.
- 52.204-2(b)(1)
A facility clearance under the National Industrial Security Program, carried by a signed DD Form 441 security agreement
Owed when the order actually involves access to information classified Confidential, Secret or Top Secret — paragraph (a) limits the clause to that extent
When it is used
Enters when the contract involves access to classified information (prescription 4.404(a)); no value threshold. Flows down only to subcontracts that also involve classified access — a sub that does not touch classified material does not receive this one.
Read closely
A clearance is sponsored and granted rather than applied for, so the calendar belongs to the Government and to the buyer. Paragraph (c) prices a Government change in classification level as an equitable adjustment, and (d) strips the reference to the Changes clause out of the version that reaches a subcontract, so that route is not automatic one tier down. The DD Form 254 the buyer issues is what says which of these actually bite.
Alternates
Alt I · APR 1984
FAR 4.404(b) area — cost R&D contract with an educational institution.
Alternate I adds a step that produces paper: where a raised classification or tighter area controls make performance impractical, the position has to be put to the contracting officer in writing, and everything stays safeguarded while it is considered.
Alt II · APR 1984
Construction or architect-engineer contracts where employee identification is required.
Alternate II adds two things nobody produces under the basic clause: identification issued to and displayed by every employee on the work, and fingerprints when the contracting officer requires them.
The 17 templates that name it, with the line
Source: acquisition.gov, FAR 52.204-2 and 4.404(a) (verified 2026-08-04)
This is research, not legal advice. It states what the regulation says about this clause and cites the paragraph behind it. It does not rule on your order, and it does not rule on whether a prime's markings are correct.