← Glossary·Data

FCI (Federal Contract Information)

CMMC

Non-public information provided by or generated for the federal government under a contract; protected by FAR 52.204-21.

Federal Contract Information (FCI) is information not intended for public release that is provided by or generated for the federal government under a contract to develop or deliver a product or service. FCI requires the 15 basic safeguarding requirements in FAR 52.204-21.

Why it matters
Many subcontractors mistakenly assume they hold no CUI but in fact hold FCI — triggering CMMC Level 1 self-assessment obligations under the 32 CFR Part 170 rule.

Related terms

CUI (Controlled Unclassified Information)
Federal information requiring safeguarding or dissemination controls per Executive Order 13556; protected by NIST SP 800-171.
CMMC
DoD certification model required of defense contractors handling FCI / CUI; three levels (Foundational, Advanced, Expert).

Does your program actually cover FCI (Federal Contract Information)?

Run a free ComplianceIQ audit against CMMC and we'll surface every gap on this — and the other controls auditors flag — with the exact clause references to fix.

Free CMMC auditBack to glossary