Federal Contract Information (FCI)

CMMC - What is Federal Contract Information (FCI)?

Omer Aslim selfie
By: Omer Kaan Aslim
May 30, 2020
Learn what Federal Contract Information (FCI) is and how it relates to CMMC.

What is FCI?

Official definition: “Federal contract information means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public Web sites) or simple transactional information, such as necessary to process payments.”

The Relation between CMMC and FCI

Contractors that have FCI on their systems are expected to protect them at either CMMC level one or two. Always check your contract to confirm your own CMMC requirements. CMMC level one matches up to the security controls required by FAR 52.204-21. If your company has already implemented those controls then you are well positioned for CMMC.

Discover Our NIST SP 800-171 Solutions:


Compliance Accelerator

For contractors seeking compliance

Quantum Assessor

For IT service providers

Supply Chain Verifier

For contractors seeking to verify partner compliance