A community resource for the acquisition workforce — not a .gov website
part52.dev Federal Acquisition Clause Monitor

Class Deviation 2026-O0024

AI Assistant Context › Deviations › Class Deviation 2026-O0024

This page provides structured context for use with AI assistants like Gemini or ChatGPT. Copy the URL and provide it to your assistant, or use the "Copy for AI assistant" button below to copy the text content directly. A plain-text Markdown version is also available.
Download .md

Class Deviation 2026-O0024 - DFARS RFO Implementation (Part 39)

Status: Active

Signed By: John M. Tenaglia, Principal Director, Defense Pricing, Contracting, and Acquisition Policy

Scope: All DoD contracting officers

Applies to DAF/Air Force: Yes

Authority: Executive Order (E.O.) 14275, Restoring Common Sense to Federal Procurement (Section 2); E.O. 14265, Modernizing Defense Acquisitions and Spurring Innovation in the Defense Industrial Base (Section 4(a)); Office of Management and Budget Memorandum M-25-26, Overhauling the Federal Acquisition Regulation (May 2, 2025)

Summary

This deviation replaces Federal Acquisition Regulation (FAR) Part 39, Defense FAR Supplement (DFARS) Part 239 and DFARS Procedures, Guidance, and Information (PGI) 239 with revised versions effective 2026-02-01. It implements the Revolutionary FAR Overhaul directed by E.O. 14275 and E.O. 14265. The deviation remains in effect until rescinded or incorporated into the FAR, DFARS and DFARS PGI.

Required Contracting Officer Actions

  1. Effective 2026-02-01, use the revised FAR Part 39 from the Revolutionary FAR Overhaul web page. It replaces the codified text at 48 CFR chapter 1.
  2. Effective 2026-02-01, use the attached DFARS Part 239. It replaces the codified text at 48 CFR chapter 2.
  3. Effective 2026-02-01, use the attached DFARS PGI 239. It replaces the PGI text published on the Defense Pricing, Contracting, and Acquisition Policy web page.
  4. For information technology services solicitations, insert provision 252.239-7009, Representation of Use of Cloud Computing, including solicitations using FAR part 12 commercial procedures.
  5. For information technology services solicitations and contracts, insert clause 252.239-7010, Cloud Computing Services. Include solicitations and contracts using FAR part 12 commercial procedures.
  6. For telecommunications services solicitations, contracts and basic agreements, insert clauses 252.239-7002, 252.239-7004 and 252.239-7007.
  7. When a telecommunications acquisition includes or may include special construction, also insert clauses 252.239-7011 and 252.239-7012.
  8. In basic agreements for telecommunications services, insert the basic or Alternate I of clause 252.239-7013, Term of Agreement and Continuation of Services, as prescribed at 239.7411(c).
  9. When contract performance requires secure telecommunications, insert clause 252.239-7016, Telecommunications Security Equipment, Devices, Techniques, and Services.
  10. For cloud computing contracts, award only to cloud service providers with a provisional authorization from the Defense Information Systems Agency (DISA), unless the DoD Chief Information Officer grants a waiver or the requirement is for a private on-premises service from U.S. Government facilities.
  11. Before authorizing storage of Government data outside the United States and outlying areas, obtain written authorization from the authorizing official per PGI 239.7602-2.
  12. For acquisitions exceeding the simplified acquisition threshold for information technology products or services that are not commercial, obtain a written determination from the head of the contracting activity that no commercial items are suitable.
  13. Direct inquiries about this deviation to osd.pentagon.ousd-a-s.mbx.dfars@mail.mil.

Affected Provisions and Clauses

252.239-7000, 252.239-7000 Protection against compromising emanations. (Clause)

  • Prescribed in: 239.7103(a)
  • Change type: MODIFIED
  • Action: Modified by RFO class deviation

252.239-7001, 252.239-7001 Information Assurance Contractor Training and Certification. (Clause)

  • Prescribed in: 239.7103(b)
  • Change type: MODIFIED
  • Action: Modified by RFO class deviation

252.239-7002, (Clause)

  • Prescribed in: 239.7411(a)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7002

252.239-7003, 252.239-7003 [Reserved] (Clause)

  • Change type: MODIFIED
  • Action: Modified by RFO class deviation

252.239-7004, (Clause)

  • Prescribed in: 239.7411(a)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7004

252.239-7007, (Clause)

  • Prescribed in: 239.7411(a)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7007

252.239-7008, (Clause)

  • Change type: MODIFIED
  • Action: Substitute clause 252.239-7008

252.239-7009, (Clause)

  • Prescribed in: 239.7604(a)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7009

252.239-7010, (Clause)

  • Prescribed in: 239.7604(b)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7010

252.239-7011, (Clause)

  • Prescribed in: 239.7411(b)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7011

252.239-7012, (Clause)

  • Prescribed in: 239.7411(b)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7012

252.239-7013, (Clause)

  • Prescribed in: 239.7411(c)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7013

252.239-7015, 252.239-7015 [Reserved] (Clause)

  • Change type: MODIFIED
  • Action: Modified by RFO class deviation

252.239-7016, (Clause)

  • Prescribed in: 239.7411(d)
  • Change type: MODIFIED
  • Action: Add clause 252.239-7016

252.239-7017, 252.239-7017 Notice of Supply Chain Risk. (Clause)

  • Prescribed in: 239.7306(a)
  • Change type: MODIFIED
  • Action: Modified by RFO class deviation

252.239-7018, 252.239-7018 Supply Chain Risk. (Clause)

  • Prescribed in: 239.7306(b)
  • Change type: MODIFIED
  • Action: Modified by RFO class deviation

Notes

Expiration: The deviation has no fixed expiration date. It remains in effect until rescinded or incorporated into the FAR, DFARS and DFARS PGI.

FAR Part 39 source: The revised FAR Part 39 is published on the Revolutionary FAR Overhaul web page, not in the Code of Federal Regulations. Contracting officers must use that version, not the codified text at 48 CFR chapter 1.

Cloud computing provisional authorization: The Cloud Computing Security Requirements Guide (SRG) is found at https://public.cyber.mil/dccs/. Contracting officers must verify a cloud service provider's provisional authorization before award using the DoD Cloud Service Catalog.

Telecommunications security: The National Security Agency's Information Systems Security Products and Services Catalogue lists approved telecommunications security equipment. Purchase requests must identify the nature of information requiring security and interoperability requirements.

Long-haul telecommunications: DISA acquires all long-haul telecommunications services for DoD. See DoD Directive 5105.19 for further information.

Cyber incident reporting: Contractors must report cloud computing cyber incidents via http://dibnet.dod.mil/. The DoD Cyber Crime Center (DC3) will send the contracting officer an unclassified encrypted email with the cyber incident report.

Suggested Questions

You can ask your AI assistant:

  • What actions do I need to take for this deviation?
  • Does this deviation affect commercial acquisitions under Part 12?
  • Which clauses need to be removed from my existing contracts?
  • How does this deviation change 252.239-7000 specifically?
  • Are there any SAM registration implications?

Source: https://part52.dev

Generated: 2026-06-10 03:19 UTC

Memorandum: https://www.acq.osd.mil/dpap/dars/classdev/DFARS_RFO/Part-239/2026-O0024_TAB_A_Deviation_Memo_DFARS_239.pdf