Yes. These requirements can be incorporated via FAR 52.204-21 from a variety of federal sponsor agencies. There are 15 specific cybersecurity controls that must be in place in order to be in compliance with this FAR clause. You can read more about these requirements by clicking here.
Type of FAQ
Export Control