Low RiskDFARSCybersecurity

252.239-7001Information Assurance Contractor Training and Certification.

Researched by the BidStride Research Team

What This Clause Requires

DFARS 252.239-7001 — Information Assurance Contractor Training and Certification.. This clause is part of the Defense Federal Acquisition Regulation Supplement and applies specifically to Department of Defense contracts.

Official Regulation Text

252.239-7001 Information Assurance Contractor Training and Certification. As prescribed in 239.7103(b), use the following clause: Information Assurance Contractor Training and Certification (JAN 2008) (a) The Contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement Program. The Contractor shall meet the applicable information assurance certification requirements, including— (1) DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and (2) Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M. (b) Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions. (c) Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions. (End of clause) [73 FR 1829, Jan. 10, 2008]

Source: eCFR, 48 CFR 252.239-7001 (https://www.ecfr.gov/current/title-48/section-252.239-7001)

Compliance Checklist

  • As prescribed in 239.7103(b), use the following clause: Information Assurance Contractor Training and Certification (JAN 2008) (a) The Contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement Program.
  • The Contractor shall meet the applicable information assurance certification requirements, including— (1) DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and (2) Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.
  • (b) Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.
  • (c) Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions.

Flow-Down to Subcontractors

No flow-down required

This clause applies only to the prime contract and does not need to be flowed down to subcontractors.

Frequently Asked Questions

BidStride automatically scans your RFPs for 252.239-7001

Stop hunting through solicitations manually. BidStride identifies every FAR and DFARS clause in your RFP, flags risk level, and surfaces compliance requirements before you submit your bid.

This summary is for informational purposes only and reflects the BidStride Research Team's plain-English interpretation of the regulation. It is not legal advice and does not constitute an attorney-client relationship. Always consult the official Federal Acquisition Regulation (FAR) or Defense Federal Acquisition Regulation Supplement (DFARS) text and qualified legal counsel for compliance decisions.