48 CFR § 3004.470 - Security requirements for access to unclassified facilities, information resources, and controlled unclassified information.