U.S. flag
          An official website of the United States Government  Main navigation
  

        

              Data Initiatives
                              Regulations
                                                                        Row 1
                                              FAR FAR
                              Smart Matrix Smart Matrix
                              Chapter 99 (CAS) Chapter 99 (CAS)
                              Row 2
                                              DFARS DFARS
                              DFARSPGI DFARSPGI
                              AFARS AFARS
                              DAFFARS DAFFARS
                              DAFFARS MP DAFFARS MP
                              DARS DARS
                              DLAD DLAD
                              NMCARS NMCARS
                              Row 3
                                              SOFARS SOFARS
                              TRANSFARS TRANSFARS
                              AGAR AGAR
                              AIDAR AIDAR
                              CAR CAR
                              DEAR DEAR
                              DIAR DIAR
                              DOLAR DOLAR
                              Row 4
                                              DOSAR DOSAR
                              DTAR DTAR
                              EDAR EDAR
                              EPAAR EPAAR
                              FEHBAR FEHBAR
                              GSAM/R GSAM/R
                              HHSAR HHSAR
                              HSAR HSAR
                              Row 5
                                              HUDAR HUDAR
                              IAAR IAAR
                              JAR JAR
                              LIFAR LIFAR
                              NFS NFS
                              NRCAR NRCAR
                              TAR TAR
                              VAAR VAAR
                              Tools
                                                                        Archives
                              Smart Matrix
                              Regulations Search
                              Acquisition Regulation Comparator (ARC)
                              Policy Network
                                                                        CAOC
                              CAAC
                              FAR Council
                              ISDC
 Breadcrumb
        Home
                            Regulations
                            HSAR
                            Subpart 3004.4—Safeguarding Classified and Controlled Unclassified Information Within Industry
        
                  HTML
HSARPart Number: 3004
        
                  

                                
                  
        Homeland Security Acquisition Regulations
« PreviousNext »
Subpart 3004.4—Safeguarding Classified and Controlled Unclassified Information Within IndustrySubpart 3004.4—Safeguarding Classified and Controlled Unclassified Information Within Industry       Source:                               88 FR 40597, June 21, 2023, unless otherwise noted.    **Parent topic:**  PART 3004—ADMINISTRATIVE MATTERS3004.470-1 Scope.       This section implements DHS policies for assuring adequate security of unclassified facilities, information resources, and controlled unclassified information (CUI) during the acquisition lifecycle.3004.470-2 Definitions.       As used in this subpart—          *Incident* means an occurrence that—                    (1)  			Actually or imminently jeopardizes, without lawful authority, the integrity, confidentiality, or availability of information or an information system; or          (2) Constitutes a violation or imminent threat of violation of law, security policies, security procedures, or acceptable use policies.3004.470-3 Policy.       (a) DHS requires that CUI be safeguarded when it resides on DHS-owned and operated information systems, DHS-owned and contractor-operated information systems, contractor-owned and/or operated information systems operating on behalf of the Department, and any situation where contractor and/or subcontractor employees may have access to CUI because of their relationship with DHS. There are several Department policies and procedures (accessible at *https://www.dhs.gov/dhs-security-and-training-requirements-contractors*) that also address the safeguarding of CUI. Compliance with these policies and procedures, as amended, is required.          (b) DHS requires contractor employees that require recurring access to government facilities or access to CUI to complete such forms as may be necessary for security or other reasons, including the conduct of background investigations to determine fitness. Department policies and procedures that address contractor employee fitness are contained in Instruction Handbook Number 121–01–007, *The Department of Homeland Security Personnel Suitability and Security Program.* Compliance with these policies and procedures, as amended, is required.3004.470-4 Contract clauses.       (a) Contracting officers shall insert the basic clause at (HSAR) 48 CFR 3052.204–71, *Contractor Employee Access,* in solicitations and contracts when contractor and/or subcontractor employees require recurring access to government facilities or access to CUI. Contracting officers shall insert the basic clause with its Alternate I for acquisitions requiring contractor access to government information resources. For acquisitions in which contractor and/or subcontractor employees will not have access to government information resources, but the department has determined contractor and/or subcontractor employee access to CUI or government facilities must be limited to U.S. citizens and lawful permanent residents, the contracting officer shall insert the clause with its Alternate II. Neither the basic clause nor its alternates shall be used unless contractor and/or subcontractor employees will require recurring access to government facilities or access to CUI. Neither the basic clause nor its alternates should ordinarily be used in contracts with educational institutions.          (b)          (1)  			Contracting officers shall insert the clause at (HSAR) 48 CFR 3052.204–72, *Safeguarding of Controlled Unclassified Information,* in solicitations and contracts where:          (i) Contractor and/or subcontractor employees will have access to CUI; or          (ii) CUI will be collected or maintained on behalf of the agency.          (2) Contracting officers shall insert the basic clause with its alternate when Federal information systems, which include contractor information systems operated on behalf of the agency, are used to collect, process, store, or transmit CUI.          (c) Contracting officers shall insert the clause at (HSAR) 48 CFR 3052.204–73, *Notification and Credit Monitoring Requirements for Personally Identifiable Information Incidents,* in solicitations and contracts where contractor and/or subcontractor employees have access to PII.
« PreviousNext »
FavoriteX

      HSAR Parts
            Regulations Hsar Menu
  

        
      Index
                              3000
                              3001
                              3002
                              3003
                              3004
                              3005
                              3006
                              3007
                              3008
                              3009
                              3010
                              3011
                              3012
                              3013
                              3014
                              3015
                              3016
                              3017
                              3018
                              3019
                              3022
                              3023
                              3024
                              3025
                              3026
                              3027
                              3028
                              3029
                              3030
                              3031
                              3032
                              3033
                              3034
                              3035
                              3036
                              3037
                              3038
                              3039
                              3040
                              3041
                              3042
                              3043
                              3044
                              3046
                              3047
                              3048
                              3049
                              3050
                              3051
                              3052
                              3053
                              30203021
                              30543099

      ×
        Data Initiatives
                                                              Regulations
                                                              Tools
                                              Archives
                                                              Smart Matrix
                                                              Regulations Search
                                                              Acquisition Regulation Comparator (ARC)
                                                              Policy Network
                                              CAO.gov
                                                        CAO Home
                                                              Council Member
                                                                    Large Agencies
                                                              Small Agencies
                                                              Council Defining Documents
                                                                    CAOC History
                                                              CAOC Charter
                                                              Civilian Agency Acquisition Council (CAAC)
                                                              Federal Acquisition Regulatory Council
                                                              Interagency Suspension and Debarment Committee (ISDC)
                                                              Search
 ˄ Top Sign up for FAR News

                            Share the FAR
                        Upper Footer Menu
  

        
      Useful Links
                              FAR Resources
                              Training
                              Acquisition Systems
            
                            **Contact Us/FAQs**
                        **Privacy and Security Notice**
                        **Accessibility Aids**
                        **Last Updated 03/29/2024**
 ACQUISITION.GOV
                An official website of the General Services Administration About GSA
                Accessibility support
                FOIA requests
                No FEAR Act data
                Office of the Inspector General
                Performance reports
                Privacy policy Looking for U.S. government information and services?
            Visit USA.gov
 «
    
    Tt