# 48 CFR § 1239.7001: 1239.7001 Definitions

> Federal · Regulations · In force

URL: https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7001

## Section

- **Citation:** 48 CFR § 1239.7001
- **Heading:** 1239.7001 Definitions
- **Jurisdiction:** Federal
- **Kind:** Regulations
- **Status:** In force
- **Text as of:** September 22, 2026
- **Source:** Publisher's official text
- **Location:** Title 48—Federal Acquisition Regulations System > CHAPTER 12—DEPARTMENT OF TRANSPORTATION > SUBCHAPTER F—SPECIAL CATEGORIES OF CONTRACTING > PART 1239—ACQUISITION OF INFORMATION TECHNOLOGY > Subpart 1239.70—Information Security and Incident Response Reporting

## Text

As used in this subpart—
Adequate security means protective measures that are commensurate with the consequences and probability of loss, misuse, or unauthorized access to, or modification of information.
Contractor attributional/proprietary information means information that identifies the contractor(s), whether directly or indirectly, by the grouping of information that can be traced back to the contractor(s) (e.g., program description, facility locations), personally identifiable information, as well as trade secrets, commercial or financial information, or other commercially sensitive information that is not customarily shared outside of the company.
Contractor information system means an unclassified information system that is owned, or operated by or for, a contractor and that processes, stores, or transmits DOT sensitive information.
Cyber incident means actions taken through the use of computer networks that result in a compromise or an actual or potentially adverse effect on an information system and/or the information residing therein.
DOT sensitive data means unclassified information that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Governmentwide policies, and is—
(1) Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DOT in support of the performance of the contract; or
(2) Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.
Rapidly report means reporting within two (2) hours of discovery of any cyber incident.
Technical information means recorded information, regardless of the form or method of the recording, of a scientific or technical nature (including computer software documentation). The term does not include computer software or data incidental to contract administration, such as financial and/or management information. Examples of technical information include research and engineering data, engineering drawings, and associated lists, specifications, standards, process sheets, manuals, technical reports, technical orders, catalog-item identifications, data sets, studies and analyses and related information, and computer software executable code and source code.

## Nearby sections

- [48 CFR § 1239.101-71 1239.101-71 Scope.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.101-71.md)
- [48 CFR § 1239.101-72 1239.101-72 Definitions.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.101-72.md)
- [48 CFR § 1239.101-73 1239.101-73 Policy.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.101-73.md)
- [48 CFR § 1239.106-70 1239.106-70 Contract clauses.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.106-70.md)
- [48 CFR § 1239.201 1239.201 Scope of subpart.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.201.md)
- [48 CFR § 1239.203 1239.203 Applicability.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.203.md)
- [48 CFR § 1239.203-70 1239.203-70 Information and communication technology accessibility standards—contract clause and provision.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.203-70.md)
- [48 CFR § 1239.7000 1239.7000 Scope of subpart.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7000.md)
- [48 CFR § 1239.7001 1239.7001 Definitions.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7001.md)
- [48 CFR § 1239.7002 1239.7002 Policy.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7002.md)
- [48 CFR § 1239.7003 1239.7003 Contract clauses.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7003.md)
- [48 CFR § 1239.7100 1239.7100 Scope of subpart.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7100.md)
- [48 CFR § 1239.7101 1239.7101 Definitions.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7101.md)
- [48 CFR § 1239.7102 1239.7102 Policy.](https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7102.md)

---

Source: Frix Law Library, https://www.frixlaw.com/law-library/statutes/ecfr-48-1239.7001. Check the current official text before relying on it. Not legal advice.