Procedures.

(a) Follow the procedures relating to safeguarding covered defense information at PGI 204.7303. (b) The contracting officer shall verify that the summary level score of a current NIST SP 800-171 DoD Assessment ( i.e., not more than 3 years old, unless a lesser time is specified in the solicitation) (see 252.204-7019) for each covered contractor information system that is relevant to an offer, contract, task order, or delivery order are posted in Supplier Performance Risk System (SPRS) ( https://www.sprs.csd.disa.mil/ ), prior to— (1) Awarding a contract, task order, or delivery order to an offeror or contractor that is required to implement NIST SP 800-171 in accordance with the clause at 252.204-7012; or (2) Exercising an option period or extending the period of performance on a contract, task order, or delivery order with a contractor that is that is required to implement the NIST SP 800-171 in accordance with the clause at 252.204-7012. [85 FR 61519, Sept. 29, 2020]