1239.7000 Scope of subpart.

FederalRegulations

Ask Donna

How this section applies to your facts.

Title 48—Federal Acquisition Regulations System > CHAPTER 12—DEPARTMENT OF TRANSPORTATION > SUBCHAPTER F—SPECIAL CATEGORIES OF CONTRACTING > PART 1239—ACQUISITION OF INFORMATION TECHNOLOGY > Subpart 1239.70—Information Security and Incident Response Reporting

This text was captured on Sep 22, 2026. It is a snapshot, not a live feed, so check the official code before relying on it.

Text

(a) This subpart applies to contracts and subcontracts requiring contractors and subcontractors to safeguard DOT sensitive data that resides in or transits through covered contractor information systems by applying specified network security requirements. It also requires reporting of cyber incidents.

(b) This subpart does not abrogate any other requirements regarding contractor physical, personnel, information, technical, or general administrative security operations governing the protection of unclassified information, nor does it affect requirements of the National Industrial Security Program.

This is a copy of a public record, reproduced as it was published. It is not legal advice, and it may not be the version a court would rely on. Check the official source before you cite it.

A word about cookies

We need a few to keep you signed in and the library working. The rest help us see which pages people use and where they get stuck. They stay off unless you say yes.

1239.7000 Scope of subpart. · 48 CFR § 1239.7000 | Frix