Raytheon TC-001 — General Terms and Conditions of Purchase

Its 51 clauses can ask you for 104 things.

1. A program you have to be running16e.g. Fifteen named controls running on any system of yours that holds or carries the buyer's contract information 52.204-21(b)(1)

   You are either running it or you are not, and what the prime asks for is the date it started.

   • Reasonable procedures in place and in use to prevent and detect kickbacks in your own operations and in your direct business relationships

     FAR 52.203-7(c)(1)

   • An ethics awareness and training program, and an internal control system with a reporting channel such as a hotline that an employee can use anonymously

     Owed within 90 days of award, unless you represented yourself as a small business concern for this award or the contract is for a commercial product or commercial service — (c) opens by excluding both

     FAR 52.203-13(c)

   • Fifteen named controls running on any system of yours that holds or carries the buyer's contract information — access limits, authentication, media sanitization, boundary protection, timely patching and malware scanning

     Owed when federal contract information — information not intended for public release, provided by or generated for the Government under the order — resides in or transits your own system

     52.204-21(b)(1)

   Show 12 moreShow fewer

   • A listing practice, running for the life of the contract: every employment opening listed immediately with the appropriate employment service delivery system, and at least concurrently with any other recruitment source or effort you use

     41 CFR 60-300.5(a)(2) and (a)(3), which FAR 52.222-35(b) makes a term of your contract

   • E-Verify running inside hiring — a case opened for each new hire within three business days of the date of hire, starting within 90 calendar days of enrollment

     FAR 52.222-54(b)(1)(ii)

   • Paid sick leave for everyone working on or in connection with the contract, earned at not less than one hour for every 30 hours worked, up to the 56-hour annual cap

     FAR 52.222-62(c)(1)

   • Initial and annual role-based privacy training, with a test of what was learned

     Owed when an employee will have access to a system of records, handle personally identifiable information, or design, develop, maintain or operate a system of records

     52.224-3(b)

   • A private security operation run to 32 CFR part 159 — personnel registered and managed, weapons authorized and accounted for, armored vehicles registered, incidents reported

     FAR 52.225-26(c)(1)

   • The NIST SP 800-171 security requirements, in the version in effect when the solicitation was issued, running on every system of yours that holds or moves the covered information

     Owed when the system is your own — (b)(1) sends an information technology service operated on the Government's behalf to the contract's own terms instead

     252.204-7012(b)(2)(i)

   • A marking process and the equipment behind it, putting a MIL-STD-130 data matrix and human-readable text on every item the contract calls out

     DFARS 252.211-7003(c)

   • Access controls that keep controlled technical data away from foreign persons, your own foreign employees included, and a license for anything that leaves the country

     DFARS 252.225-7048(b)

   • Administrative, technical and physical safeguards at the level the DoD Cloud Computing Security Requirements Guide sets

     Owed when cloud computing is used to provide information technology services in performing the order, unless the contracting officer notifies you that the DoD Chief Information Officer has waived it

     252.239-7010(b)(2)

   • Hosting that keeps Government data inside the United States or an outlying area

     Owed when the data is not physically located on DoD premises and no written notification from the contracting officer allows another location

     252.239-7010(b)(3)

   • A working practice for knowing who each information technology component came from, and being able to show that trail on demand

     DFARS 252.239-7018(b)

   • A documented counterfeit electronic part detection and avoidance program covering the twelve areas the clause lists — training, inspection and testing, traceability, quarantine, and reporting among them

     DFARS 252.246-7007(c)

   and 1 more, each on its clause's page

2. Something somebody else has to issue you13e.g. Mill certificates giving the country of melt for every specialty metal incorporated in the item DFARS 252.225-7009

   The same day if the issuer is one of your own suppliers, months if it is an assessor or an underwriter.

   • A declaration carrying the certification and disclosure at 52.203-11(c) and (d), obtained from each person requesting or receiving the subcontract and retained by whoever awards it

     Owed where the subcontract exceeds the threshold specified in FAR 3.808 on the date of subcontract award — the clause names no figure, and 3.808 sets it at $200,000 since 2025-10-01

     FAR 52.203-12(g)(1)

   • A written disclosure from your proposed supplier saying whether it or its principals are debarred, suspended, proposed for debarment or voluntarily excluded

     Owed from each proposed supplier whose subcontract will exceed the FAR 9.405-2(b) threshold, other than one furnishing a commercially available off-the-shelf item

     FAR 52.209-6(c)

   • Country-of-origin statements from the suppliers of those components, since the percentage rests on parts somebody else made — and the prime asking for them sets what is enough

     FAR 52.225-1

   Show 10 moreShow fewer

   • A legible copy of the carrier's rated on-board ocean bill of lading, to the contracting officer and to the Maritime Administration

     Owed when contract cargo has moved by sea — 20 working days from the date of loading in the United States, 30 working days from a foreign port

     FAR 52.247-64(c)

   • A DoD-approved medium assurance certificate, bought from an outside certificate authority

     Owed when an incident has to be reported — the certificate is what the reporting channel authenticates against, so it is held before the incident rather than obtained after it

     252.204-7012(c)(3)

   • A cloud service provider meeting security requirements equivalent to the FedRAMP Moderate baseline, and complying with (c) through (g) on reporting and forensics

     Owed when covered information sits on a cloud service you did not build — the paragraph reaches an external provider only

     252.204-7012(b)(2)(ii)(D)

   • A mill certificate naming the country where the metal was melted or produced, from the mill or the service center that sold it — evidence the prime weighs, not paper the clause names

     DFARS 252.225-7008

   • Mill certificates giving the country of melt for every specialty metal incorporated in the item, gathered back through the bill of material — evidence the prime weighs, not paper the clause names

     DFARS 252.225-7009

   • A letter of authorization generated from that system and signed by the contracting officer, which is what gets a person into theater and onto meals, transport and medical support

     DFARS 252.225-7040(c)

   • The preliminary personnel requirements (e) lists as one set — clearances, medical, dental and psychological fitness, required immunizations, theater-specific qualifications, passports and visas, and the training the paragraph names

     DFARS 252.225-7040(e)

   • An origin declaration from the supplier of each covered material — samarium-cobalt and neodymium-iron-boron magnets, tantalum, tungsten powder, and tungsten heavy alloy — naming where it was melted or produced, and the prime asking for it sets what is enough

     DFARS 252.225-7052

   • A license from the owner of any copyrighted material built into a deliverable, obtained for the Government, plus written approval and a statement of the license on the transmittal

     Owed when copyrighted material you do not own is going into technical data you will deliver

     252.227-7013(e)

   • A copy of the carrier's rated on-board ocean bill of lading, within 30 days of the shipment

     Owed when a shipment covered by the clause has moved

     DFARS 252.247-7023(f)
3. A state you have to be in, in a government system4e.g. Enrollment as a Federal Contractor in E-Verify FAR 52.222-54(b)(1)(i)

   The record has to be posted before the prime can see it, and posting is not the same day as being ready.

   • Enrollment as a Federal Contractor in E-Verify, within 30 calendar days of award

     FAR 52.222-54(b)(1)(i)

   • An account in the Government's electronic submission system, with each item's record posted through it into the item unique identification registry

     DFARS 252.211-7003(f)

   • Every deployed person entered in the Synchronized Predeployment and Operational Tracker, with the record kept current for the whole deployment

     DFARS 252.225-7040(g)

   Show 1 moreShow fewer

   • Registration with the Department of State under the ITAR, which the clause names in its own words, for a shop that manufactures or exports defense articles

     DFARS 252.225-7048(b)
4. Something you write46e.g. A written code of business ethics and conduct FAR 52.203-13(b)(1)

   Days to weeks, and nobody outside your company has to agree to it.

   • A written report to the agency Inspector General, or to the Attorney General where the agency has none

     Owed promptly on reasonable grounds to believe a kickback described in (b) may have occurred

     FAR 52.203-7(c)(2)

   • A written code of business ethics and conduct, made available to each employee engaged in performance, within 30 days of award

     FAR 52.203-13(b)(1)

   • A written disclosure to the agency Inspector General, copy to the contracting officer

     Owed on credible evidence that a principal, employee, agent or subcontractor committed fraud, bribery, a gratuity or conflict of interest violation, or a civil False Claims Act violation

     FAR 52.203-13(b)(3)(i)

   Show 12 moreShow fewer

   • A written notice to current employees and suppliers that existing confidentiality terms blocking a report of waste, fraud or abuse are no longer in effect

     Owed where agreements or statements signed before this contract carry prohibitions inconsistent with (b)

     FAR 52.203-19(c)

   • A written notice from a corporate officer to the contracting officer, naming the supplier, the reasons it is listed, the compelling reason for using it anyway, and the systems protecting the Government's interest

     Owed before entering into a subcontract with a party that is debarred, suspended, proposed for debarment or voluntarily excluded, other than one furnishing a commercially available off-the-shelf item

     FAR 52.209-6(d)

   • The notices provided by the contracting officer, posted in conspicuous places available to employees and applicants for employment

     Owed when the contracting officer provides them — this posts notices you do not write, and whether they are issued is not in your hands

     FAR 52.222-26(c)(3)

   • The line in all solicitations or advertisements for employees stating that all qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity or national origin

     FAR 52.222-26(c)(4)

   • The pay transparency policy statement, put into your employee manual or handbook and disseminated by electronic posting or by a copy posted in conspicuous places available to employees and applicants — a second posting, separate from the notices at (c)(3)

     FAR 52.222-26(c)(5)(ii)

   • The notice provided by the contracting officer, sent to each labor union or representative of workers you hold a collective bargaining agreement or other understanding with

     Owed when you have such an agreement or understanding AND the contracting officer provides the notice — both, and the second is not in your hands

     FAR 52.222-26(c)(6)

   • Your books, accounts and records, and access to your premises during normal business hours, for an on-site compliance evaluation

     Owed when the contracting agency or the Office of Federal Contract Compliance Programs conducts an on-site compliance evaluation

     FAR 52.222-26(c)(9)

   • The notices in the form the Director prescribes, posted in conspicuous places available to employees and applicants for employment

     41 CFR 60-300.5(a)(9), which FAR 52.222-35(b) makes a term of your contract

   • Notice to each labor organization or representative of workers that you are bound by the terms of the veterans' statute

     Owed when you have a collective bargaining agreement or other contract or understanding with a labor organization or representative of workers

     41 CFR 60-300.5(a)(10), which FAR 52.222-35(b) makes a term of your contract

   • The Department of Labor notice of employee rights under the National Labor Relations Act, posted where you post other notices to employees, in the languages your workforce reads

     FAR 52.222-40(b)

   • Time and payroll records for each service employee — name, classification, rate, fringe benefits, hours worked and deductions — made and kept for three years from completion of the work and open to the Wage and Hour Division

     FAR 52.222-41(i)

   • Notice to each service employee starting work of the minimum wage and fringe benefits owed, given in writing or delivered by posting the wage determination with Department of Labor publication WH-1313

     FAR 52.222-41(g)

   and 31 more, each on its clause's page

5. Something you fill in and send back14e.g. A cyber incident report filed at dibnet.dod.mil within 72 hours of discovering the incident 252.204-7012(c)(1)(ii)

   Hours, once you know which one is missing.

   • Standard Form LLL naming the lobbying registrants, including the individuals performing the services

     Owed when no form went in with the offer and a registrant has since made a lobbying contact for you on this contract

     FAR 52.203-12(d)(1)

   • An updated Standard Form LLL to the contracting officer, within 30 days of the end of the calendar quarter the change fell in

     Owed where a form was already filed under 52.203-11(d) and a change affects Block 10 of it — the name and address of the registrant, or the individuals performing the services

     FAR 52.203-12(d)(2)

   • Your identity and award data for the prime's first-tier report — unique entity identifier, company name, physical address and the primary place of performance

     FAR 52.204-10(d)(2)

   Show 11 moreShow fewer

   • The names and total compensation of your five most highly compensated executives for your preceding completed fiscal year

     Owed only where all of (d)(3) holds: in your preceding fiscal year 80 percent or more of your annual gross revenues came from federal contracts, subcontracts, loans, grants and other federal financial assistance; $25,000,000 or more of your annual gross revenues came from those same sources; and the public cannot already reach executive compensation figures through filings under section 13(a) or 15(d) of the Securities Exchange Act of 1934 or section 6104 of the Internal Revenue Code

     FAR 52.204-10(d)(3)

   • A report — contract number, supplier, brand, model number and item description — with mitigation detail and the prevention steps taken and planned within 10 business days after it

     Owed when you identify a Kaspersky Lab covered article in what you supply or use — the first report is due within three business days of that

     FAR 52.204-23(c)

   • Standard Form 100 (EEO-1), or any successor form, filed as 41 CFR part 60-1 prescribes, together with the information and reports the clause requires

     FAR 52.222-26(c)(8)

   • The VETS-4212 report to the Department of Labor each year by September 30 — protected veterans by category and location, total new hires, and how many of those were protected veterans

     FAR 52.222-37(b)

   • Standard Form 1444, Request for Authorization of Additional Classification and Rate, submitted to the buyer

     Owed when a class of employee that the wage determination does not list performs work on the contract — the form is due no later than 30 days after that work begins

     FAR 52.222-41(c)(2)(ii)

   • A certification to the buyer, at award and once a year after that, that the plan is implemented and that after due diligence nothing prohibited was found — or that remedial and referral action was taken

     Owed when the same $700,000 outside-the-United-States portion that brings the plan with it

     FAR 52.222-50(h)(5)

   • An immediate report to the buyer and to the agency inspector general, naming the action taken against whoever was responsible

     Owed when you receive credible information that an employee, agent or subcontractor has engaged in the prohibited conduct

     FAR 52.222-50(d)(1)

   • A cyber incident report filed at dibnet.dod.mil within 72 hours of discovering the incident

     Owed when an incident affecting a covered system, the covered information on it, or your ability to perform the order is discovered

     252.204-7012(c)(1)(ii)

   • A Certificate of Current Cost or Pricing Data as prescribed by FAR 15.406-2

     DFARS 252.215-7010(c)(2)

   • The attachment listing the technical data you will hand over with restrictions on it

     Owed when you intend to deliver technical data with a restrictive marking — nothing may be delivered marked unless it is on that list, and (f)(3) is the route for an assertion found after award

     252.227-7013(f)(2)

   • A report of every cyber incident related to the cloud service provided under the order

     Owed when an incident related to that service is discovered

     252.239-7010(d)
6. Nothing to send now11They are terms that decide what money moves later or rules you follow while you work.