A covered contractor information system is an unclassified information system owned or operated by or for a contractor and processes, stores, or transmits covered defense information.

Source: CFR 252.204–7012 Safeguarding covered defense information and cyber incident reporting.