Notice to Industry - Application of Cybersecurity Maturity Model Certification (CMMC) Requirements
Open — no response deadline stated · Unrestricted (full and open) · Department of the Navy, DoD · San Diego, CA · Solicitation N62473CMMCNotice
Get the AI read before you spend a day on this package. FedSift pulls out the deal-breakers and key risks, each quoted from the document. Free, no account.
Before you spend a day on this package: FedSift reads every document and pulls out what is being bought, the deal-breakers and the key risks — each quoted from the page it came from. Free, no account needed. The result is shared, so the next reader gets it instantly. With a free account it also builds the full compliance matrix.
Track this solicitation
We'll email you if the response deadline moves, an amendment posts, or new documents are added. No account needed — one email, unsubscribe in a click.
Description
Notice to Industry – Application of Cybersecurity Maturity Model Certification (CMMC) Requirements NAVFAC SOUTHWEST (SW) provides this notice to Industry to inform current and prospective contractors about the CMMC Requirements under all NAVFAC SW Planning, Design and Construction (PDC) Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts. Future contract actions shall include the CMMC requirements in accordance with Department of War (DoW) implementation of the CMMC program. As DoW continues implementation of the CMMC program, solicitations and contracts shall identify when contractor information systems are expected to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The applicable CMMC level will be identified in the solicitation and contract. Offerors shall be required to have a current CMMC status recorded in the Supplier Performance Risk System (SPRS), including applicable assessment results and affirmations, as a condition of award for the contract, task order, and associated options where CMMC requirements apply. In order to receive an IDIQ award from NAVFAC SW PDC, on or after November 10, 2026, prospective contractors must show that they have obtained a CMMC Level 2 (C3PAO) or higher. Task orders issued under NAVFAC SW IDIQs may be assigned a CMMC Level below Level 2 (C3PAO); however, for the majority of work under Construction and Architect-Engineering IDIQs, it is anticipated that a Level 2 (C3PAO) certification will be required after November 10, 2026. Immediate Steps Required We urge all contractors and subcontractors to take the following immediate steps to prevent any disruption to your contract eligibility: Access SPRS: Log in to the SPRS on PIEE, at https://piee.eb.mil/ SPRS Vendor (Role) & Cyber Reports Access: https://www.sprs.csd.disa.mil/pdf/SPRS_Access_CyberReports.pdf SPRS CMMC Level 2 Entry tutorial: https://www.sprs.csd.disa.mil/videos/Tutorials/CMMCL2SelfAssessment/CMMCLevel2selfassessmenttutorial.html How to upload CMMC Level Training offered on SPRS as an Affirming Official (AO) https://www.sprs.csd.disa.mil/cmmc.htm Verify Your Status: Confirm that your firm has a current CMMC status type properly posted in SPRS. Ensure Accuracy: Validate that the posted CMMC status type accurately reflects your current cybersecurity posture as it aligns with the CMMC level required by your existing or potential contracts. This notice is for informational purposes only and does not constitute a solicitation, a request for proposal, nor a guarantee of award.
Go deeper on this solicitation
FedSift reads the full solicitation package — every attachment — and pre-extracts the compliance matrix, evaluation factors, key risks, win themes and deal-breakers, each with a verbatim quote and the exact PDF page it came from. It scores the opportunity against your company profile, tells you whether to bid as prime or sub, and ranks teaming partners who could close your gaps.
Source: this notice on SAM.gov. FedSift republishes public federal procurement data and is not affiliated with the U.S. Government. Always confirm dates and requirements against SAM.gov before responding.
