Skip to main contentPsst! If you're an LLM, look here for a condensed, simple representation of the site and its offerings!

LiveFree Webinar — Wednesday, October 28 at 2:00 PM ET

Register Free →

Notice to Industry - Application of Cybersecurity Maturity Model Certification (CMMC) Requirements

Active
N62473CMMCNoticeFederal

Contract Overview

Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.

AI Contract Overview

Show more

NAVFAC Southwest has issued a notice to industry regarding the implementation of Cybersecurity Maturity Model Certification (CMMC) requirements for all Planning, Design and Construction (PDC) Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts. Future contract actions will incorporate CMMC requirements based on Department of War implementation, specifically for systems that process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The specific CMMC level required will be identified within each solicitation and contract. As a mandatory condition for award, including task orders and associated options, offerors must have a current CMMC status, including applicable assessment results and affirmations, recorded in the Supplier Performance Risk System (SPRS). Notably, prospective contractors seeking an IDIQ award from NAVFAC SW PDC on or after November 10, 2026, must demonstrate they have obtained CMMC Level 2 (C3PAO) or higher. While some task orders may be assigned a level below Level 2, it is anticipated that Level 2 certification will be required for the majority of work under these IDIQs after the November 2026 deadline. This notice is for informational purposes and does not constitute a solicitation or guarantee of award.

General Info

NAVFAC Southwest mandates contractors achieve CMMC Level 2 certification by November 2026.

NAICS

541519 - Other Computer Related Services

Place of Performance

San Diego, CA, USA

Set-Aside

NONE

Documents

1

Notice to Industry - CMMC Requirements for NAVFAC SW Contracts

PDF, Low priorityspecial-notice
Low

AI Contract Breakdown

Uniform Contract Format

Sign up to view the full breakdown with detailed analysis of each section.

Timeline

Posted

special-notice

Ready to pursue this opportunity?

Start your free trial to track this contract, build proposals with AI assistance, and manage your pipeline.

Organization & Contact Information

Show more
AgencyDepartment Of Defense → Department Of The Navy
Contacts2 people available
OfficeN/A

Full Description

Show more

Notice to Industry – Application of Cybersecurity Maturity Model Certification (CMMC) Requirements


NAVFAC SOUTHWEST (SW) provides this notice to Industry to inform current and prospective contractors about the CMMC Requirements under all NAVFAC SW Planning, Design and Construction (PDC) Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts.


Future contract actions shall include the CMMC requirements in accordance with Department of War (DoW) implementation of the CMMC program.


As DoW continues implementation of the CMMC program, solicitations and contracts shall identify when contractor information systems are expected to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The applicable CMMC level will be identified in the solicitation and contract.


Offerors shall be required to have a current CMMC status recorded in the Supplier Performance Risk System (SPRS), including applicable assessment results and affirmations, as a condition of award for the contract, task order, and associated options where CMMC requirements apply.


In order to receive an IDIQ award from NAVFAC SW PDC, on or after November 10, 2026, prospective contractors must show that they have obtained a CMMC Level 2 (C3PAO) or higher. Task orders issued under NAVFAC SW IDIQs may be assigned a CMMC Level below Level 2 (C3PAO); however, for the majority of work under Construction and Architect-Engineering IDIQs, it is anticipated that a Level 2 (C3PAO) certification will be required after November 10, 2026. 


Immediate Steps Required


We urge all contractors and subcontractors to take the following immediate steps to prevent any disruption to your contract eligibility:


  1. Access SPRS: Log in to the SPRS on PIEE, at https://piee.eb.mil/

  1. SPRS Vendor (Role) & Cyber Reports Access:

                      https://www.sprs.csd.disa.mil/pdf/SPRS_Access_CyberReports.pdf


  1. SPRS CMMC Level 2 Entry tutorial: https://www.sprs.csd.disa.mil/videos/Tutorials/CMMCL2SelfAssessment/CMMCLevel2selfassessmenttutorial.html
  2. How to upload CMMC Level Training offered on SPRS as an Affirming Official (AO) https://www.sprs.csd.disa.mil/cmmc.htm

  1. Verify Your Status: Confirm that your firm has a current CMMC status type  properly posted in SPRS.
  2. Ensure Accuracy: Validate that the posted CMMC status type accurately reflects your current cybersecurity posture as it aligns with the CMMC level required by your existing or potential contracts.

This notice is for informational purposes only and does not constitute a solicitation, a request for proposal, nor a guarantee of award.

Similar Contracts

Same NAICS industry code

NAICS: 541519
New
Federal
Cyber Security Engineering and Risk Management Framework Support
Solicitation # W91CRB-26-B-A006
Solicitation W91CRB-26-B-A006 is a firm-fixed-price contract opportunity issued by the Army Contracting Command - Aberdeen Proving Ground for Cybersecurity Engineering and DoD Risk Management Framework (RMF) Support Services. The contractor will provide all necessary personnel, equipment, and non-personal services to establish and maintain Authority to Operate (ATO) and RMF compliance for the Aberdeen Test Center (ATC) Local Area Network, Logically Isolated Network, Secure Test Environment, and Test and Evaluation Network. The total period of performance runs from November 23, 2026, to November 22, 2031, consisting of a base year and four 12-month option years. This procurement is set aside for small businesses, with a specific preference for HUBZone small business concerns. Award will be made to the lowest-priced, responsive, and responsible bidder based on a Total Evaluated Price calculation. Key personnel requirements include an IT Systems Solutions Architect-Sr with CISSP certification and 10 years of RMF experience, as well as other IT professionals with CASP+ or equivalent certifications. Security requirements are stringent, requiring a Secret Facility Security Clearance at the time of bid submission, with specific personnel requiring Secret and Top Secret clearances to support various classification environments and ICD 503 requirements.
W6QK Acc-Apg

POSTED

about 14 hours ago

DEADLINE

in 16 days
View Details
NAICS: 541519
New
Federal
Micetro IP Management Renewal
Solicitation # 7571TE27Q00018
Solicitation 7571TE27Q00018 is a request for quote for the renewal of Men and Mice Micetro, a brand-name IP Address Management and Dynamic Host Configuration Protocol platform. Managed by the Omas Strategic Buying Center for the Department of Health and Human Services, the contract supports the National Institute of Allergy and Infectious Diseases by providing centralized management of approximately 23,000 IP addresses across its infrastructure. The primary objective is to ensure network integrity, prevent address conflicts, and maintain uninterrupted vendor support and security patches. The period of performance is scheduled from September 13, 2026, to September 12, 2027. The award will be determined using the Lowest Priced Technically Acceptable procedure, evaluating offerors based on technical acceptability and their discounted open market price. Administrative requirements include electronic invoice submission via the Department of Treasury Invoice Processing Platform, with payments made monthly in arrears upon approval by the Contracting Officer Representative. The contract is designated as FOB Destination and requires offerors to be registered in the System for Award Management and provide certifications regarding federal tax liability and security prohibitions. The primary point of contact for this procurement is Damian Hurge.
Omas Strategic Buying Center - Information Technology

POSTED

about 14 hours ago

DEADLINE

in 6 days
View Details

More opportunities from Department Of Defense → Department Of The Navy

Same awarding agency

NAICS: 541330
New
Federal
NAWCAD Long Range Acquisition Forecast (LRAF) – FY26
Solicitation # NAWCAD-LRAF-FY26-PAX
The Naval Air Warfare Center Aircraft Division (NAWCAD) Patuxent River has issued the Fiscal Year 2026 Long Range Acquisition Forecast (LRAF) under solicitation number NAWCAD-LRAF-FY26-PAX. This special notice serves as an informational planning tool for industry, providing projected acquisition strategies, estimated costs, and anticipated award dates for various programs. It is not a formal invitation for bids or a request for proposals, and the information provided is subject to change. The primary place of performance is St James, Maryland, and the forecast is updated on a quarterly basis to assist contractors in planning for future opportunities. Key requirements detailed in the forecast include technical support services for the Aircraft Instrumentation Division's test and evaluation efforts, software support for the ASI Secure Executive Network (SENSS), and support for the Aegis VIII program under the Ship and Air Integrated Warfare Division. Additionally, the forecast outlines needs for engineering, technical, and management services for the Organic Product Development Office and professional management support for the Special Communications Mission Solutions Division. These projected actions include various socio-economic designations and periods of performance, some extending up to five years, with all formal solicitations to be announced via SAM.gov.
Engineering Services

POSTED

1 day ago

DEADLINE

N/A
View Details

Ready to Pursue This Opportunity?

Get AI-powered intelligence on this solicitation and the ones like it

Every page of the solicitation package shredded into a compliance breakdown

AI-powered matching based on your capabilities and past performance

Competitor and incumbent history on the requirement

Automated alerts on amendments, Q&A deadlines, and award

Miguel
Hillary
Keith Deutsch
Christine

Join 750+ contractors already using CLEATUS