Summary
This revision supersedes Class Deviation 2024-O0013, issued May 2, 2024. It makes administrative updates to links for National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Revision 2 and the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline. Contractors subject to Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 must comply with NIST SP 800-171 Revision 2 specifically, not the version in effect at solicitation issuance.
Contracting Officer Actions
1
Use the deviation clause 252.204-7012 (DEVIATION 2024-O0013, Revision 1) in lieu of DFARS 252.204-7012 in all applicable solicitations and contracts.
2
Ensure contracts subject to 252.204-7012 require contractor compliance with NIST SP 800-171 Revision 2, not the version current at solicitation issuance or as otherwise authorized.
Effective Date
The memorandum states the deviation is effective immediately. No specific calendar date is provided in the memo header or signature block.
Duration
This deviation remains in effect until rescinded. No expiration date applies.
FedRAMP Link Update
The updated FedRAMP Moderate baseline link is https://www.fedramp.gov/documents-templates/. Use this in place of any prior link.
NIST SP 800-171r2 Link Update
The updated NIST SP 800-171 Revision 2 link is https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf. Use this in place of any prior link.
Inquiries
Direct questions about this deviation to osd.pentagon.ousd-a-s.mbx.dpc-cp@mail.mil.