Class Deviation 2024-O0013 - Revision 1 – Safeguarding Covered Defense Information and Cyber Incident Reporting

Status: Active

Date Issued: 2024-05-22

Signed By: John M. Tenaglia, Principal Director, Defense Pricing and Contracting

Scope: All DoD contracting officers

Applies to DAF/Air Force: Yes

Summary

This revision supersedes Class Deviation 2024-O0013, issued May 2, 2024. It makes administrative updates to links for National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Revision 2 and the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline. Contractors subject to Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 must comply with NIST SP 800-171 Revision 2 specifically, not the version in effect at solicitation issuance.

Required Contracting Officer Actions

Use the deviation clause 252.204-7012 (DEVIATION 2024-O0013, Revision 1) in lieu of DFARS 252.204-7012 in all applicable solicitations and contracts.
Ensure contracts subject to 252.204-7012 require contractor compliance with NIST SP 800-171 Revision 2, not the version current at solicitation issuance or as otherwise authorized.

Affected Provisions and Clauses

252.204-7009, (Clause)

Prescribed in: 204.7304(b)
Change type: MODIFIED
Action: Modify clause 252.204-7009

252.204-7012, (Clause)

Prescribed in: 204.7304(c)
Change type: MODIFIED
Action: Modify clause 252.204-7012

252.227-7013, (Clause)

Prescribed in: 227.7102-4(b)
Change type: MODIFIED
Action: Modify clause 252.227-7013

252.239-7010, (Clause)

Prescribed in: 239.7604(b)
Change type: MODIFIED
Action: Modify clause 252.239-7010

Notes

Effective Date: The memorandum states the deviation is effective immediately. No specific calendar date is provided in the memo header or signature block.

Duration: This deviation remains in effect until rescinded. No expiration date applies.

Inquiries: Direct questions about this deviation to osd.pentagon.ousd-a-s.mbx.dpc-cp@mail.mil.

FedRAMP Link Update: The updated FedRAMP Moderate baseline link is https://www.fedramp.gov/documents-templates/. Use this in place of any prior link.

NIST SP 800-171r2 Link Update: The updated NIST SP 800-171 Revision 2 link is https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf. Use this in place of any prior link.