Except where a deviation is specifically authorized in accordance with subpart 2501.4 or otherwise authorized by law, the FAR and the NSFAR govern all NSF acquisitions.