# Class Deviation 2024-O0013 - Revision 1 – Safeguarding Covered Defense Information and Cyber Incident Reporting

Status: Active
Date Issued: 2024-05-22
Signed By: John M. Tenaglia, Principal Director, Defense Pricing and Contracting
Scope: All DoD contracting officers
Applies to DAF/Air Force: Yes

## Summary

This revision supersedes Class Deviation 2024-O0013, issued May 2, 2024. It makes administrative updates to links for National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 Revision 2 and the Federal Risk and Authorization Management Program (FedRAMP) Moderate baseline. Contractors subject to Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012 must comply with NIST SP 800-171 Revision 2 specifically, not the version in effect at solicitation issuance.

## Required Contracting Officer Actions

1. Use the deviation clause 252.204-7012 (DEVIATION 2024-O0013, Revision 1) in lieu of DFARS 252.204-7012 in all applicable solicitations and contracts.
2. Ensure contracts subject to 252.204-7012 require contractor compliance with NIST SP 800-171 Revision 2, not the version current at solicitation issuance or as otherwise authorized.

## Affected Provisions and Clauses

### 252.204-7009,  (Clause)
- Prescribed in: 204.7304(b)
- Change type: MODIFIED
- Action: Modify clause 252.204-7009

### 252.204-7012,  (Clause)
- Prescribed in: 204.7304(c)
- Change type: MODIFIED
- Action: Modify clause 252.204-7012

### 252.227-7013,  (Clause)
- Prescribed in: 227.7102-4(b)
- Change type: MODIFIED
- Action: Modify clause 252.227-7013

### 252.239-7010,  (Clause)
- Prescribed in: 239.7604(b)
- Change type: MODIFIED
- Action: Modify clause 252.239-7010

## Notes

Effective Date: The memorandum states the deviation is effective immediately. No specific calendar date is provided in the memo header or signature block.

Duration: This deviation remains in effect until rescinded. No expiration date applies.

Inquiries: Direct questions about this deviation to osd.pentagon.ousd-a-s.mbx.dpc-cp@mail.mil.

FedRAMP Link Update: The updated FedRAMP Moderate baseline link is https://www.fedramp.gov/documents-templates/. Use this in place of any prior link.

NIST SP 800-171r2 Link Update: The updated NIST SP 800-171 Revision 2 link is https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r2.pdf. Use this in place of any prior link.

## Suggested Questions

You can ask your AI assistant:
- What actions do I need to take for this deviation?
- Does this deviation affect commercial acquisitions under Part 12?
- Which clauses need to be removed from my existing contracts?
- How does this deviation change 252.204-7009 specifically?
- Are there any SAM registration implications?

---
Source: https://part52.dev
Generated: 2026-08-05 03:19 UTC
Memorandum: https://www.acq.osd.mil/dpap/policy/policyvault/USA001074-24-DPC.pdf