A community resource for the acquisition workforce — not a .gov website
part52.dev Federal Acquisition Clause Monitor

PGI 212.371: Inapplicability of certain provisions and clauses to contracts for the acquisition of commercially available off-the-shelf items.

PGI › Part 212 › PGI 212.371

This PGI section supplements: DFARS 212.371 · FAR 12.371
The corresponding FAR Part 12 and DFARS Part 212 have been overhauled under the RFO. PGI replacement text is provided in the RFO deviation attachment. View FAR Part 12

Current Content

Commercially available off-the-shelf (COTS) items are a subset of commercial products. Therefore, the provisions and clauses listed in 212.370 as not applicable to contracts or subcontracts for the acquisition of commercial products are also not applicable to contracts or subcontracts for the acquisition of COTS items. In addition, the following provisions and clauses published after October 13, 1994, not expressly authorized in law, are not applicable or are modified in their applicability to contracts for the acquisition of COTS items:

(a) FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems.

(b) 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls.

(c) 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting.

(d) 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirements.

(e) 252.204-7020, NIST SP 800-171 DoD Assessment Requirements.

(f) 252.204-7021, Cybersecurity Maturity Model Certification Requirements.

(g) 252.205-7000, Provision of Information to Cooperative Agreement Holders.

(h) 252.270-7000, Pilot Program to Incentivize Contracting with Employee-Owned Businesses—Representation.

(i) 252.270-7001, Pilot Program to Incentivize Contracting with Employee-Owned Businesses—Subcontracting Certification.

(j) 252.270-7002, Pilot Program to Incentivize Contracting with Employee-Owned Businesses.

Change History

Detected Type Summary
detected 2026-04-17 [PGI] PGI_MODIFIED PGI 212.371 updated: 2 lines added, 2 lines removed
View diff 
--- previous
+++ current
@@ -6,6 +6,6 @@
 (e) 252.204-7020, NIST SP 800-171 DoD Assessment Requirements.
 (f) 252.204-7021, Cybersecurity Maturity Model Certification Requirements.
 (g) 252.205-7000, Provision of Information to Cooperative Agreement Holders.
-(h) 252.270-7000, Pilot Program to Incentivize Contracting with Employee-Owned Businesses—Representation.
-(i) 252.270-7001, Pilot Program to Incentivize Contracting with Employee-Owned Businesses—Subcontracting Certification.
+(h) 252.270-7000, Pilot Program to Incentivize Contracting with Employee-Owned Businesses--Representation.
+(i) 252.270-7001, Pilot Program to Incentivize Contracting with Employee-Owned Businesses--Subcontracting Certification.
 (j) 252.270-7002, Pilot Program to Incentivize Contracting with Employee-Owned Businesses.
Sources: Search on acquisition.gov · View on acq.osd.mil