Federal Contract Information (FCI)

CMMC - What is Federal Contract Information (FCI)?

Learn what Federal Contract Information (FCI) is and how it relates to CMMC.

Join our newsletter:

What is FCI?

Official definition: “Federal contract information means information, not intended for public release, that is provided by or generated for the Government under a contract to develop or deliver a product or service to the Government, but not including information provided by the Government to the public (such as on public Web sites) or simple transactional information, such as necessary to process payments.”

The Relation between CMMC and FCI

Contractors that have FCI on their systems are expected to protect them at either CMMC level one or two. Always check your contract to confirm your own CMMC requirements. CMMC level one matches up to the security controls required by FAR 52.204-21. If your company has already implemented those controls then you are well positioned for CMMC.

Discover Our NIST SP 800-171 & CMMC 2.0 Solutions:


Compliance Accelerator

Power through compliance. Meet and maintain your NIST SP 800-171 & CMMC 2.0 compliance requirements.

Quantum Assessor

Transform your business. Create new revenue streams and provide scalability for your NIST SP 800-171 and CMMC 2.0 services.

Supply Chain Verifier

Trust is everything. Verify, monitor, and support subcontactor compliance.