Current Content
(a) When a requiring activity identifies a requirement for a contract, task order, or delivery order to include a specific CMMC level, the contracting officer shall not—
(1) Award to an offeror that does not have a CMMC certificate at the level required by the solicitation; or
(2) Exercise an option or extend any period of performance on a contract, task order, or delivery order unless the contractor has a CMMC certificate at the level required by the contract.
(b) Contracting officers shall use Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to verify an offeror or contractor’s CMMC level.
Change History
| Detected | Type | Summary |
|---|---|---|
| 2025-11-10 | PGI_MODIFIED | PGI 204.7502 updated: 4 lines added, 10 lines removed |
View diff--- previous +++ current @@ -1,10 +1,4 @@ -(a) Award eligibility. - -(1) The contracting officer shall include in the solicitation the required CMMC level, if provided by the program office or the requiring activity. -(2) Contracting officers shall not award a contract, task order, or delivery order to an offeror that does not have a current CMMC status at the CMMC level required by the solicitation. -(3) Contractors are required to achieve, at time of award, a CMMC status at the CMMC level specified in the solicitation, or higher, for all information systems used in the performance of the contract, task order, or delivery order that will process, store, or transmit FCI or CUI. Contractors are required to maintain a current CMMC status at the specified CMMC level or higher, if required by the contract, task order, or delivery order, throughout the life of the contract, task order, or delivery order. -(b) CMMC status. -(1) Contracting officers may award a contract, task order, delivery order, or modification to exercise an option or extend a period of performance, if the offeror's or contractor's CMMC status is-- -(i) Listed in the definition of "CMMC status"; and -(ii) Equal to or higher than the CMMC level required by the solicitation or contract, task order, or delivery order. -(2) CMMC levels 2 and 3 can be in a conditional level for a period not to exceed 180 days from the CMMC status date (32 CFR 170.21), and award can occur with a conditional CMMC level. CMMC level 1 requires a final CMMC level for award.+(a) When a requiring activity identifies a requirement for a contract, task order, or delivery order to include a specific CMMC level, the contracting officer shall not-- +(1) Award to an offeror that does not have a CMMC certificate at the level required by the solicitation; or +(2) Exercise an option or extend any period of performance on a contract, task order, or delivery order unless the contractor has a CMMC certificate at the level required by the contract. +(b) Contracting officers shall use Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to verify an offeror or contractor's CMMC level. |
||