Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, August 5 at 2:00 PM EDT

Register Free →

Notice to Industry - Application of Cybersecurity Maturity Model Certification (CMMC) Requirements

Active
N62473CMMCNoticeFederal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

NAVFAC Southwest is issuing an important notice to current and potential contractors regarding the implementation of the Cybersecurity Maturity Model Certification (CMMC) requirements applicable to all NAVFAC Southwest Planning, Design, and Construction Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts. Effective future contract actions will include CMMC requirements as guided by the Department of War's ongoing CMMC program rollout. Contracts and solicitations will specify when contractor information systems must handle Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), and will identify the required CMMC level. Contractors must have an up-to-date CMMC status recorded in the Supplier Performance Risk System (SPRS), including relevant assessments and affirmations, as a prerequisite for award of contracts, task orders, or options where CMMC applies. Beginning November 10, 2026, contractors seeking NAVFAC SW IDIQ awards must demonstrate at least a CMMC Level 2 certification validated by an accredited C3PAO. While some task orders might require a lower CMMC level, the majority of construction and architect-engineering work under NAVFAC SW contracts will necessitate this Level 2 certification or higher. To avoid disruptions in contract eligibility, contractors and subcontractors are urged to promptly access SPRS via PIEE, ensure their CMMC status is posted and accurate, and familiarize themselves with available resources and tutorials to support the certification process. This notice is informational and does not serve as a solicitation or guarantee of contract award. Points of contact are available for assistance.

General Info

NAVFAC Southwest mandates contractors achieve CMMC Level 2 certification by November 2026.

Agency

Department Of Defense → Department Of The NavyView Agency

NAICS

541519 - Other Computer Related ServicesView NAICS

Place of Performance

San Diego, CA, USA

Set-Aside

NONE

Documents

(1)

Notice to Industry - CMMC Requirements for NAVFAC SW Contracts

PDFspecial-notice

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

Posted

special-notice

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Department Of The Navy
Contacts2 people available
OfficeN/A
Organization / Agency
Department Of Defense → Department Of The Navy
View Agency Profile
Office AddressN/A

Full Description

Show more

Notice to Industry – Application of Cybersecurity Maturity Model Certification (CMMC) Requirements


NAVFAC SOUTHWEST (SW) provides this notice to Industry to inform current and prospective contractors about the CMMC Requirements under all NAVFAC SW Planning, Design and Construction (PDC) Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts.


Future contract actions shall include the CMMC requirements in accordance with Department of War (DoW) implementation of the CMMC program.


As DoW continues implementation of the CMMC program, solicitations and contracts shall identify when contractor information systems are expected to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The applicable CMMC level will be identified in the solicitation and contract.


Offerors shall be required to have a current CMMC status recorded in the Supplier Performance Risk System (SPRS), including applicable assessment results and affirmations, as a condition of award for the contract, task order, and associated options where CMMC requirements apply.


In order to receive an IDIQ award from NAVFAC SW PDC, on or after November 10, 2026, prospective contractors must show that they have obtained a CMMC Level 2 (C3PAO) or higher. Task orders issued under NAVFAC SW IDIQs may be assigned a CMMC Level below Level 2 (C3PAO); however, for the majority of work under Construction and Architect-Engineering IDIQs, it is anticipated that a Level 2 (C3PAO) certification will be required after November 10, 2026. 


Immediate Steps Required


We urge all contractors and subcontractors to take the following immediate steps to prevent any disruption to your contract eligibility:


  1. Access SPRS: Log in to the SPRS on PIEE, at https://piee.eb.mil/

  1. SPRS Vendor (Role) & Cyber Reports Access:

                      https://www.sprs.csd.disa.mil/pdf/SPRS_Access_CyberReports.pdf


  1. SPRS CMMC Level 2 Entry tutorial: https://www.sprs.csd.disa.mil/videos/Tutorials/CMMCL2SelfAssessment/CMMCLevel2selfassessmenttutorial.html
  2. How to upload CMMC Level Training offered on SPRS as an Affirming Official (AO) https://www.sprs.csd.disa.mil/cmmc.htm

  1. Verify Your Status: Confirm that your firm has a current CMMC status type  properly posted in SPRS.
  2. Ensure Accuracy: Validate that the posted CMMC status type accurately reflects your current cybersecurity posture as it aligns with the CMMC level required by your existing or potential contracts.

This notice is for informational purposes only and does not constitute a solicitation, a request for proposal, nor a guarantee of award.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
Federal
Software Licensing Management & RenewalsThe contract requires management of annual licensing renewals, user access provisioning, compliance tracking, and vendor coordination for the D3-MMP software suite across multiple clinical sites operated by the Albuquerque Area Indian Health Service. The scope centers on ensuring continuous, authorized use of the software while maintaining adherence to regulatory and operational standards, with responsibility extending to timely renewals, secure access controls, and active liaison with the software vendor to resolve technical or contractual issues. All activities must support clinical operations within the Indian Health Service system, with strict attention to compliance and service continuity. This subcontract is set aside exclusively for entities qualifying under the Buy Indian Set-Aside program under the Department of Health and Human Services, targeting businesses owned and controlled by Native Americans. The North American Industry Classification System code 541519 indicates it falls under other computer-related services, and performance is expected to occur at locations tied to the Albuquerque Area Indian Health Service, though specific physical sites are not detailed. The solicitation was posted on July 24, 2026, with responses due by July 31, 2026, and interested parties must meet eligibility requirements tied to the Buy Indian criteria to qualify for award.
Albuquerque Area Indian Health Svc

POSTED

3 days ago

DEADLINE

in 5 days
View Details
NAICS: 541519
New
Federal
Technical Support & Help Desk for Application UsersThe contract seeks a subcontractor to provide Tier 1–2 technical support for healthcare providers utilizing the STI Guidelines mobile applications, addressing common issues such as login failures, application crashes, and syncing errors. Support must be responsive, user-focused, and tailored to the needs of medical professionals relying on these tools for clinical guidance, with an emphasis on minimizing downtime and ensuring seamless access to critical resources. The work is expected to be performed remotely, with the primary place of performance located in Atlanta, Georgia, under the oversight of the CDC Office of Acquisition Services within the Department of Health and Human Services. The solicitation was posted on July 24, 2026, with a response deadline of August 7, 2026, at 6:00 p.m. Eastern Time. It is categorized under NAICS code 541519, which pertains to other computer-related services, and is structured as a subcontract opportunity without specific set-aside designations. The contracting entity is seeking qualified vendors capable of delivering timely, high-quality technical assistance to end users in the healthcare sector, ensuring the reliability and functionality of the mobile applications essential for STI management and prevention efforts. There is no point of contact listed, and details regarding the office address are incomplete, but all submissions must align with federal procurement guidelines applicable to HHS contracts.
CDC Office Of Acquisition Services

POSTED

3 days ago

DEADLINE

in 12 days
View Details

More opportunities from Department Of Defense → Department Of The Navy

Same awarding agency

NAICS: 541330
New
Federal
NAWCAD Long Range Acquisition Forecast (LRAF) – FY26The Naval Air Warfare Center Aircraft Division (NAWCAD) Patuxent River announces the FY26 Long Range Acquisition Forecast (LRAF) to provide visibility into upcoming procurement needs across its program offices, including PMA-209, PMA-276, PMA-242, and others, covering systems engineering, software development, test and evaluation, secure communications, instrumentation, and logistics support for air, ship, and shore-based platforms. This forecast is not a solicitation and carries no obligation for the government to award contracts; it serves solely as an informational tool with updates issued quarterly, with the FY26Q2 version already posted. The forecast spans estimated contract values from $10 million to $1 billion, representing multiple Indefinite-Delivery/Indefinite-Quantity (IDIQ) vehicles including SeaPort and SA IDIQ contracts with projected award windows between FY26 Q3 and FY28 Q1 and performance periods extending five years. Key performance locations are centered in St. James, Maryland, with additional sites in Orange Park, Florida, and operational test sites such as San Clemente Island, California, where inspection and acceptance for systems like sonobuoys follow the NAVAIR Sonobuoy Quality Assurance Program. A majority of the anticipated procurements are designated as Small Business Set Asides, indicating targeted opportunities for small businesses under FAR Part 19, though some contracts are unrestricted. Funding is allocated through specific Treasury Account Symbols and Accounting Classification Reference Numbers such as R408, R799, AC13, and DA01, supporting diverse programs including Battlespace Modeling and Simulation, Maritime Patrol & Reconnaissance, and Precision Strike Weapons. Contracting officers from multiple NAWCAD divisions are identified, but no Contracting Officer’s Representatives or technical representatives are listed, and no detailed invoicing methods, packaging requirements, or inspection criteria beyond the SQAP are specified. While security clearances for TS/SCI are required for certain roles and organic Lead Systems Integrator teams are mandated under WOLF programs, specific clause language, evaluation factors, proposal submission instructions, and contract type details like FFP are absent, suggesting these elements will be defined in future solicitations via SAM.gov. The forecast includes numerous contract identifiers, projected RFP release dates, and socioeconomic designations, but lacks formal contract clauses, deliverable specifications, or payment terms, leaving full acquisition requirements to be detailed in subsequent competitive processes.
Engineering Services

POSTED

5 days ago

DEADLINE

N/A
View Details
NAICS: 325220
SBIR / STTR
Domestic Production of Plant-based Carbon Fiber Precursors in Support of Hypersonic ApplicationsThe United States Navy is seeking solutions to establish a domestic source of plant-based carbon fiber precursors for use in thermal protection systems critical to hypersonic applications. Currently, rayon-based carbon fibers—essential for their superior thermal performance over alternatives like PAN and pitch-based fibers—are not produced in the U.S. and are sourced from overseas, primarily European suppliers, creating supply chain vulnerabilities. The domestic production of rayon fibers halted in 1997 due to environmental concerns tied to the traditional viscose process, and while global trends are moving toward non-toxic cellulose-based production methods, no alternative fibers have yet been validated for use in high-performance carbon phenolic composites. This effort requires the development and characterization of a new plant-based precursor material that can be reliably carbonized into a fiber meeting the structural and thermal requirements of hypersonic systems. The successful contractor must be a U.S.-owned small business with fewer than 500 employees and must be capable of obtaining and maintaining a Secret-level security clearance and facility, as work in Phase II may involve classified information. Compliance with the National Industrial Security Program Operating Manual is mandatory, and the contractor must be able to safeguard classified material throughout the project lifecycle. This initiative is part of a broader national imperative to secure critical materials for defense and space applications and reduce dependence on foreign supply chains.
Artificial and Synthetic Fibers and Filaments Manufacturing

POSTED

26 days ago

DEADLINE

in 23 days
View Details
NAICS: 334290
SBIR / STTR
High Precision Specialized Waveguides for Extreme TemperaturesThe Navy is seeking the development of high-precision specialized waveguides capable of operating under extreme hypersonic environmental conditions where surface temperatures exceed 1,000 degrees Celsius. Traditional RF cables fail to maintain signal integrity and power delivery under such thermal stress, making waveguides the preferred solution due to their superior high-power transmission capabilities. The waveguides must perform reliably across a broad spectrum of RF frequencies, specifically targeting the X, Ku, K, and Ka bands, while accommodating the challenge of minimizing size at higher frequencies. The design must allow for complex and unique geometries without degrading signal performance, and any dielectric medium used—such as air—must exhibit permittivity near that of a vacuum to ensure minimal signal loss even at sustained high thermal loads. Materials must remain stable and efficient under prolonged exposure to extreme heat without compromising transmission quality. This solicitation is a total small business set-aside under the SBIR/STTR mandate, restricted to U.S.-owned and operated entities with fewer than 500 employees, classified under NAICS code 334290. Successful bidders must be capable of obtaining and maintaining a secret-level security clearance and a classified facility, as work in Phase II may involve classified information tied to national defense. Contractor personnel must comply with the National Industrial Security Program Operating Manual, and all classified materials must be safeguarded in accordance with Title 32, Part 2004.20 of the Code of Federal Regulations. Only companies that meet stringent U.S. ownership standards and can demonstrate compliance with DCSA security protocols will be eligible, with no foreign influence permitted unless explicitly mitigated and approved. The solicitation closes on July 22, 2026, with performance expected to advance critical capabilities for hypersonic platforms operating in the most demanding thermal environments.
Other Communications Equipment Manufacturing

POSTED

26 days ago

DEADLINE

in 23 days
View Details