Notice to Industry – Potential Application of Cybersecurity Maturity Model Certification (CMMC) Requirements
Contract Overview
Solicitation details, issuing organization, response deadlines, documents, and interested companies for this government contract opportunity.
AI Contract Overview
NAVSEA has issued a special notice to current and prospective contractors under the SCB MAC IDIQ regarding the future implementation of Cybersecurity Maturity Model Certification requirements. This informational notice specifies that future solicitations and delivery orders will include CMMC requirements whenever contractor information systems are expected to process, store, or transmit Federal Contract Information or Controlled Unclassified Information. To be eligible for award, offerors must have a current CMMC status, including assessment results and affirmations, recorded in the Supplier Performance Risk System. The notice outlines that future contracts will incorporate specific FAR and DFARS cybersecurity provisions, including those related to NIST SP 800-171 and basic safeguarding of covered information systems. While this notice does not change existing contracts or impose immediate new requirements, it serves as a directive for vendors to monitor SAM.gov and ensure their cybersecurity assessments are accurately documented in the SPRS. The specific CMMC levels and assessment types will be detailed in individual future solicitations and task orders.
General Info
Place of Performance
DC, USASet-Aside
Documents
0AI Contract Breakdown
Uniform Contract FormatNo documents to break down
The breakdown needs solicitation documents. None were found from this contract's source.
Timeline
Organization & Contact Information
Full Description
NAVSEA provides this notice to Industry to inform current and prospective contractors for the SCB MAC IDIQ that future contract actions issued shall include the Cybersecurity Maturity Model Certification (CMMC) requirements in accordance with Department of War (DoW) implementation of the CMMC program.
This notice is informational only and does not constitute a solicitation, request for proposals.
As DoW continues implementation of the CMMC program, Contracting Officers shall include applicable CMMC requirements in solicitations and contracts when contractor information systems are expected to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The applicable CMMC level, will be identified in the solicitation, or delivery order.
Offerors shall be required to have a current CMMC status recorded in the Supplier Performance Risk System (SPRS), including applicable assessment results and affirmations, as a condition of award for the contract, task order, or delivery order where CMMC requirements apply.
The solicitation and any subsequent task/delivery orders shall include applicable Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS) cybersecurity provisions and clauses, including but not limited to:
- FAR 52.204-21, Basic Safeguarding of Covered Contractor Information Systems
- DFARS 252.204-7008, Compliance with Safeguarding Covered Defense Information Controls
- DFARS 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting
- DFARS 252.204-7019, Notice of NIST SP 800-171 DoD Assessment Requirements
- DFARS 252.204-7020, NIST SP 800-171 DoD Assessment Requirements
- DFARS 252.204-7021, Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirements
- DFARS 252.204-7025, Notice of Cybersecurity Maturity Model Certification Level Requirements
Contractors are encouraged to review official CMMC guidance and resources published by the Department of War and to ensure that any required cybersecurity assessments and related information are accurately recorded in the Supplier Performance Risk System (SPRS), as applicable.
This notice does not change any existing contracts and does not by itself impose new requirements. Specific cybersecurity and CMMC requirements, including the applicable level and assessment type, will be identified in the solicitations, task/delivery order solicitations.
Interested vendors should continue to monitor SAM.gov and other official Department of War communication channels for future opportunities that will identify applicable cybersecurity and CMMC requirements.
Similar Contracts
Same NAICS industry code
More opportunities from Department Of Defense → Navsea Hq
Same awarding agency
Ready to Pursue This Opportunity?
Get AI-powered intelligence on this solicitation and the ones like it
Every page of the solicitation package shredded into a compliance breakdown
AI-powered matching based on your capabilities and past performance
Competitor and incumbent history on the requirement
Automated alerts on amendments, Q&A deadlines, and award
Join 750+ contractors already using CLEATUS
