{"asOf":"2026-09-05","merchant":"SSDF INC","kind":"clerk","id":"ecfr","title":"eCFR (FAR / DFARS / 32 CFR 170)","kicker":"The text","body":"32 CFR Part 170 is the CMMC program rule. DFARS 252.204-7012 is the cyber-incident / 800-171 clause still in force. DFARS 252.204-7021 (NOV 2025) is contractor CMMC status. DFARS 252.204-7025 is the solicitation fill-in. COTS-only buys are excluded.","url":"https://www.ecfr.gov/current/title-32/part-170","ssdf":"SSDF maps citations. SSDF does not rewrite DFARS."}