MEMORANDUM FOR COMMANDER, UNITED STA TES SPECIAL OPERATIONS COMMAND (ATTN: ACQUISITION EXECUTIVE) COMMANDER, UNITED STATES TRANSPORTATION COMMAND (ATTN: ACQUISITION EXECUTIVE) DEPUTY ASSISTANT SECRETARY OF THE ARMY (PROCUREMENT) DEPUTY ASSIST ANT SECRET ARY OF THE NAVY (ACQUISITION AND PROCUREMENT) DEPUTY ASSISTANT SECRETARY OF THE AIR FORCE (CONTRACTING) DIRECTORS OF THE DEFENSE AGENCIES DIRECTORS OF THE DOD FIELD ACTIVITIES
Subject: Class Deviation-Contracting for Cloud Services.
Effective immediately, contracting officers shall follow the attached requirements (DFARS subpart 239.99, Cloud Computing (DEVIATION 2015-00011)) and use the attached clause (DFARS 252.239-7999, Cloud Computing Szervices (DEVIATION 2015-00011) (FEB 2015)) in contracts, task orders, and delivery orders in acquisitions for, or that may involve, cloud computing services.
The substance of this class deviation is addressed in DFARS Case 2013-D018, Network Penetration Reporting and Contracting for Cloud Services. Until the OF ARS revisions contained in that case become effective, the information collection requirements ( e.g., section 6.4 of the Cloud Computing Security Requirements Guide (SRO) referenced at 239.9902-l(c)(l)) of the attached deviation are not enforceable by the Government.
The deviation requires that the contracting officer, in conjunction with the requiring activity, ensure that any selected cloud computing solution is configured, deployed, and managed to meet the security, privacy, and other requirements of the organization, including applicable elements of the Federal Information Security Management Act of 2002 (FIS MA) and the associated NIST standards and special publications (e.g., FlPS 199, FIPS 200, SP 800-53).
This class deviation remains in effect until incorporated in the OF ARS or otherwise rescinded. My point of contact is Mr. Dustin Pitsch, who may be reached at 571-372-6090, or at Dustin.N.Pitsch.civ@mail.mil.
Richard Ginman
Director, Defense Procurement and Acquisition Policy
For reference, see the Original PDF.