INTERCOMMUNICATION

The contract solicitation SPE4A5-26-T-128P seeks a third-party assessment organization certified at Cybersecurity Maturity Model Certification (CMMC) Level 2 to support cybersecurity compliance for the Department of Defense, specifically related to safeguarding controlled unclassified information (CUI) in accordance with NIST SP 800-171 and DFARS 252.204-7012. The work involves conducting assessments, maintaining system security plans, and submitting documented evidence of compliance, including a scored assessment result and corrective action plans. The offering entity must be registered in SAM.gov, possess a valid CAGE code, and disclose all associated CAGE codes linked to systems handling covered defense information. Export-controlled technical data subject to ITAR or EAR is involved, requiring compliance with DFARS 252.225-7048; access is restricted to contractors with approved US/Canada Joint Certification Program status, completed DLA export training, and formal authorization. The contract incorporates mandatory cybersecurity, packaging, and hazardous materials requirements, including compliance with MIL-STD-129 for marking and labeling, MIL-STD-2073-1E for packaging, and adherence to hazard communication standards. Mercury and mercury compounds are strictly prohibited in packaging, and any mercury-containing items must be contained with shock-proof secondary barriers per NAVSEA 5100-003D. Delivery is required within 20 days after award to FPO AP 96691-1500, with FOB Destination terms applying. The contract type remains open to proposal via deviation 2026-00038, allowing offerors to suggest alternative contract structures. Invoicing must occur electronically through Wide Area WorkFlow (WAWF), following DFARS requirements tied to contract type and delivery method. The Government will inspect and accept deliverables at the destination, enforcing zero non-conformances for critical attributes per MIL-STD-1916 and MIL-STD-105. The contractor must comply with employment laws including equal opportunity, trafficking in persons prohibitions, and employment eligibility verification, as amended by deviation 2026-00038. All systems and personnel must adhere to whistleblower protections, information disclosure limitations, and prohibitions on covered defense telecommunications equipment. The solicitation closed for proposals on May 19, 2026, through the DLA Internet Bid Board System