FAR 52.204-21: Basic Safeguarding of Contractor Information Systems

Under the Federal Acquisition Regulation (FAR) 52.204-21, contractors are required to apply specific basic safeguarding requirements and procedures to "covered contractor information systems," which are systems owned or operated by a contractor that process, store, or transmit Federal contract information.