FAR 52.204-2—Security Requirements.
Plain-English Summary
FAR 52.204-2, Security Requirements, is the standard clause used when a contract will involve access to classified information at the Confidential, Secret, or Top Secret level. It tells contractors which industrial security rules apply, primarily the Security Agreement (DD Form 441) and the National Industrial Security Program Operating Manual (NISPOM) at 32 CFR part 117, including later revisions that have been furnished to the contractor. The clause also addresses what happens if the Government changes security classification levels or other security requirements after award: the contract may be equitably adjusted for added or reduced security costs or other affected terms, as if the change were issued under the Changes clause. It requires flowdown of substantially the same security terms to subcontracts involving access to classified information. The clause also includes two special alternates: Alternate I for certain cost-reimbursement R&D contracts with educational institutions, which adds procedures for handling security changes that make performance impracticable and may lead to convenience termination; and Alternate II for construction or architect-engineer contracts where employee identification is required, which covers badges, display requirements, return of identification, and fingerprint submission when directed. In practice, this clause is the contract’s bridge between procurement terms and national security obligations, and it can affect staffing, facility clearance, subcontracting, cost accounting, schedule, and termination risk.
Key Rules
Applies to classified access
This clause applies only to the extent the contract involves access to Confidential, Secret, or Top Secret information. If no classified access is involved, the clause generally has no operative effect.
Follow DD Form 441 and NISPOM
The contractor must comply with the Security Agreement (DD Form 441) and the NISPOM at 32 CFR part 117, including any revisions that have been furnished to the contractor. This makes the industrial security program requirements contractually binding.
Security changes may be adjusted
If the Government changes security classification or security requirements after award and those changes increase or decrease security costs or otherwise affect contract terms, the contract is subject to an equitable adjustment. The adjustment is treated as if the change were directed under the Changes clause.
Flow down to classified subcontracts
The contractor must insert substantially the same security terms in all subcontracts that involve access to classified information. The flowdown must include paragraph (d), but it must not refer to the prime contract’s Changes clause.
Alternate I for educational R&D
For certain cost-reimbursement research and development contracts with educational institutions, Alternate I adds procedures for handling security changes that raise classification or impose more restrictive area controls. The contractor must make reasonable efforts to continue performance, notify the contracting officer if performance is not practicable, and continue safeguarding classified material while the issue is resolved.
Convenience termination path
Under Alternate I, if the issue is not withdrawn or resolved within 15 days after the contracting officer receives the contractor’s notice, the contractor may request termination in whole or in part. The contracting officer must terminate as appropriate, and the termination is treated as a termination for convenience.
Alternate II for ID and fingerprints
For construction or architect-engineer contracts where identification is required, Alternate II makes the contractor responsible for furnishing approved identification, requiring employees to display it, returning it to the contracting officer when employees are released, and submitting fingerprints when directed.
Responsibilities
Contracting Officer
Determine whether the contract involves classified access and whether the basic clause or an alternate applies. Furnish any applicable revisions to the NISPOM, process equitable adjustments for Government-directed security changes, resolve performance issues under Alternate I, direct termination when required, and approve or direct employee identification requirements under Alternate II.
Contractor
Comply with the DD Form 441, the NISPOM, and furnished revisions; protect classified information; seek equitable adjustment when security changes affect cost or performance; flow down required security terms to classified subcontracts; make reasonable efforts to continue performance under Alternate I; notify the contracting officer if continuation is not practicable; provide and enforce employee identification under Alternate II; and submit fingerprints when directed.
Subcontractors
Comply with flowed-down security requirements when subcontract work involves access to classified information, including industrial security obligations and any identification or safeguarding requirements applicable to the subcontract.
Government Security Authorities
Administer industrial security requirements, issue or update security guidance and revisions, and support the contracting officer and contractor in implementing classification or access changes consistent with national security rules.
Practical Implications
This clause can materially affect cost and schedule because security compliance may require cleared personnel, secure facilities, controlled storage, access procedures, and training.
Contractors should watch for changes in classification level or area controls during performance, because those changes can trigger an equitable adjustment or, in limited cases, a convenience termination path under Alternate I.
Flowdown is not optional for classified subcontracts; prime contractors should ensure subcontract language is substantially conforming and that subcontractors can actually meet the security requirements before award.
A common pitfall is assuming the clause only covers document handling; it also covers broader industrial security obligations under the DD Form 441 and NISPOM, including revisions furnished later.
For Alternate II contracts, contractors should plan early for badge issuance, employee display rules, return of IDs, and possible fingerprint collection, since these requirements can affect mobilization and site access.
Official Regulatory Text
As prescribed in 4.404 (a) , insert the following clause: Security Requirements (Mar 2021) (a) This clause applies to the extent that this contract involves access to information classified "Confidential," "Secret," or "Top Secret." (b) The Contractor shall comply with- (1) The Security Agreement DD Form441 ), including the National Industrial Security Program Operating Manual (32 CFR part 117); and (2) Any revisions to that manual, notice of which has been furnished to the Contractor. (c) If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract. (d) The Contractor agrees to insert terms that conform substantially to the language of this clause, including this paragraph (d) but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information. (End of clause) Alternate I (Apr 1984) . If a cost contract for research and development with an educational institution is contemplated, add the following paragraphs (e), (f), and (g) to the basic clause: (e) If a change in security requirements, as provided in paragraphs (b) and (c), results (1)in a change in the security classification of this contract or any of its elements from an unclassified status or a lower classification to a higher classification, or (2)in more restrictive area controls than previously required, the Contractor shall exert every reasonable effort compatible with the Contractor’s established policies to continue the performance of work under the contract in compliance with the change in security classification or requirements. If, despite reasonable efforts, the Contractor determines that the continuation of work under this contract is not practicable because of the change in security classification or requirements, the Contractor shall notify the Contracting Officer in writing. Until resolution of the problem is made by the Contracting Officer, the Contractor shall continue safeguarding all classified material as required by this contract. (f) After receiving the written notification, the Contracting Officer shall explore the circumstances surrounding the proposed change in security classification or requirements, and shall endeavor to work out a mutually satisfactory method whereby the Contractor can continue performance of the work under this contract. (g) If, 15 days after receipt by the Contracting Officer of the notification of the Contractor’s stated inability to proceed, (1) the application to this contract of the change in security classification or requirements has not been withdrawn, or (2)a mutually satisfactory method for continuing performance of work under this contract has not been agreed upon, the Contractor may request the Contracting Officer to terminate the contract in whole or in part. The Contracting Officer shall terminate the contract in whole or in part, as may be appropriate, and the termination shall be deemed a termination under the terms of the Termination for the Convenience of the Government clause. Alternate II (Apr 1984) . If employee identification is required for security or other reasons in a construction contract or architect-engineer contract, add the following paragraph (e) to the basic clause: (e) The Contractor shall be responsible for furnishing to each employee and for requiring each employee engaged on the work to display such identification as may be approved and directed by the Contracting Officer. All prescribed identification shall immediately be delivered to the Contracting Officer, for cancellation upon the release of any employee. When required by the Contracting Officer, the Contractor shall obtain and submit fingerprints of all persons employed or to be employed on the project.