{
  "node_id": "us-far-part-4-administrative-information-matters",
  "title": "FAR Part 4 - Administrative and Information Matters (SAM, FPDS, FFATA, Classified Info, CUI/NIST SP 800-171, Section 889 Covered Telecom, FASCSA Orders, Kaspersky and TikTok Prohibitions)",
  "domain": "Public Sector & Government Procurement",
  "version": "1.0.0",
  "last_updated": "2026-06-02",
  "bluf": "Federal Acquisition Regulation (FAR) Part 4 governs administrative aspects of contract execution, distribution, reporting, retention, and security prohibitions across federal procurements. Subpart 4.4 (Safeguarding Classified Information Within Industry) implements Executive Orders 12829 and 10865 under the National Industrial Security Program Operating Manual (NISPOM) at 32 CFR Part 117, requires DD Form 254 (Contract Security Classification Specification) for any classified contract, and mandates inclusion of clause 52.204-2 (Security Requirements) when access to classified information is required. Subpart 4.6 (Contract Reporting) implements the Federal Funding Accountability and Transparency Act (FFATA, Pub. L. 109-282) requiring contract action reports (CARs) to be completed in the Federal Procurement Data System (FPDS) within 3 business days after award (30 days for FAR 6.302-2 actions). Subpart 4.11 (System for Award Management) requires contractor SAM registration before award; Subpart 4.13 requires acquisition of NIST-approved Personal Identity Verification (PIV) products and services; Subpart 4.14 implements FFATA executive compensation and first-tier subcontract award reporting (FSRS). Subpart 4.19 (Basic Safeguarding of Covered Contractor Information Systems) and clause 52.204-21 require contractors handling Federal Contract Information (FCI) to implement the 15 basic safeguarding controls; broader Controlled Unclassified Information (CUI) handling is governed by NIST SP 800-171 incorporated through agency-specific clauses including DFARS 252.204-7012 and the FAR Council CUI rule. Subpart 4.21 implements Section 889 of the NDAA FY2019 prohibiting agencies from procuring or using covered telecommunications equipment or services from Huawei, ZTE, Hytera, Hikvision, and Dahua and from contracting with entities that use such equipment in any system, with clauses 52.204-24, 52.204-25, and 52.204-26. Subpart 4.20 prohibits Kaspersky Lab products with clause 52.204-23; Subpart 4.22 prohibits the TikTok application and other ByteDance-covered applications on contractor systems. Subpart 4.23 implements Federal Acquisition Security Council Supply Chain Risk Management (FASCSA) orders requiring contracting officers to review and apply exclusion orders before award, with clauses 52.204-27 and 52.204-30, and agency head authorisation required for any waiver.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0"
  },
  "crosswalks": {
    "_available_keys": [
      "statutory_basis",
      "key_clauses_taxonomy",
      "section_889_scope",
      "cui_safeguarding_scope",
      "fascsa_order_process",
      "fpds_reporting_thresholds",
      "industry_mapping"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "us-far-part-7-acquisition-planning",
    "us-far-part-15-contracting-by-negotiation",
    "us-far-part-19-small-business-set-asides",
    "us-far-part-39-acquisition-information-technology"
  ],
  "primary_citations_count": 7
}