HomeGlossaryCompliance & Security

Compliance & Security

Plain-language definitions of every Compliance & Security term that shows up in government contracting work.


Compliance & Security

Berry Amendment

The Berry Amendment requires the Department of Defense to buy specialty items such as food, clothing, textiles, and hand tools that are grown, reprocessed, or manufactured in the United States.

Read definition
Compliance & SecurityBAA

Buy American Act (BAA)

The Buy American Act requires the federal government to give preference to domestically produced goods in procurement, with specific content and manufacturing requirements that contractors must meet.

Read definition
Compliance & SecurityCUI

Controlled Unclassified Information (CUI)

Controlled Unclassified Information is government-designated sensitive information that is not classified but requires safeguarding controls and access restrictions by contractors.

Read definition
Compliance & SecurityCMMC

Cybersecurity Maturity Model Certification (CMMC)

CMMC is the DoD's mandatory cybersecurity certification framework requiring defense contractors to demonstrate compliance with NIST security controls before receiving contracts.

Read definition
Compliance & Security

DD Form 254

DD Form 254 is the DoD Contract Security Classification Specification that defines the classified information requirements for a defense contract and the security obligations of the performing contractor.

Read definition
Compliance & SecurityFCL

Facility Security Clearance (FCL)

A Facility Security Clearance is the government authorization allowing a contractor organization to access, receive, and store classified information and to employ cleared personnel.

Read definition
Compliance & SecurityFCI

Federal Contract Information (FCI)

Federal Contract Information is information provided by or generated for the government under contract that is not intended for public release, triggering basic cybersecurity requirements.

Read definition
Compliance & SecurityFISMA

Federal Information Security Modernization Act (FISMA)

FISMA is the federal law requiring government agencies to develop, document, and implement information security programs protecting federal information systems and data.

Read definition
Compliance & SecurityFedRAMP

FedRAMP (Federal Risk and Authorization Management Program)

FedRAMP is the federal government's standardized security authorization program for cloud services, enabling agencies to use cloud products that have been pre-approved for federal use.

Read definition
Compliance & SecurityITAR

International Traffic in Arms Regulations (ITAR)

ITAR is the US regulatory framework governing the export and import of defense articles and services, requiring registration and licensing for any company that manufactures, exports, or brokers defense items.

Read definition
Compliance & Security

NIST SP 800-171

NIST SP 800-171 is the federal cybersecurity standard defining 110 security controls that contractors must implement to protect Controlled Unclassified Information in non-federal systems.

Read definition
Compliance & Security

Section 508 Accessibility

Section 508 requires federal agencies to make electronic and information technology accessible to people with disabilities, imposing compliance obligations on IT contractors and vendors.

Read definition
Compliance & Security

Security Clearance in Government Contracting

A security clearance is a government-granted authorization allowing individuals or organizations to access classified national security information at specified sensitivity levels.

Read definition
Compliance & SecuritySCRM

Supply Chain Risk Management (SCRM)

Supply Chain Risk Management is the practice of identifying, assessing, and mitigating risks arising from vulnerabilities in the global supply chains of hardware, software, and services used in government contracts.

Read definition
Compliance & SecurityTAA

Trade Agreements Act (TAA)

The Trade Agreements Act requires that products sold to the federal government above specific thresholds be manufactured or substantially transformed in the US or designated trade partner countries.

Read definition

Put Compliance & Security to work

See how Bidovate turns these government contracting terms into pipeline. Explore the platform or book a 15-minute demo.