Cyber security requirements are included in solicitations for proposals and award agreements. For example, there are minimum federal requirements for safeguarding information systems (Federal Acquisition Regulation; Basic Safeguarding FAR 52.204-21).

Systems containing more sensitive information such as personally identifiable information, require more than the basic level of protection. Contact Tufts Technology Services (TTS) for more information.