A community resource for the acquisition workforce not a .gov website
part52.dev Federal Acquisition Clause Monitor
This PGI section supplements: DFARS 204.7502 · FAR 4.7502
The corresponding FAR Part 4 and DFARS Part 204 have been overhauled under the RFO. PGI replacement text is provided in the RFO deviation attachment. View FAR Part 4

Current Content

(a) When a requiring activity identifies a requirement for a contract, task order, or delivery order to include a specific CMMC level, the contracting officer shall not—

(1) Award to an offeror that does not have a CMMC certificate at the level required by the solicitation; or

(2) Exercise an option or extend any period of performance on a contract, task order, or delivery order unless the contractor has a CMMC certificate at the level required by the contract.

(b) Contracting officers shall use Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to verify an offeror or contractor’s CMMC level.

Change History

Detected Type Summary
2025-11-10 [PGI] PGI_MODIFIED PGI 204.7502 updated: 4 lines added, 10 lines removed
View diff
--- previous
+++ current
@@ -1,10 +1,4 @@
-(a) Award eligibility.
-
-(1) The contracting officer shall include in the solicitation the required CMMC level, if provided by the program office or the requiring activity.
-(2) Contracting officers shall not award a contract, task order, or delivery order to an offeror that does not have a current CMMC status at the CMMC level required by the solicitation.
-(3) Contractors are required to achieve, at time of award, a CMMC status at the CMMC level specified in the solicitation, or higher, for all information systems used in the performance of the contract, task order, or delivery order that will process, store, or transmit FCI or CUI. Contractors are required to maintain a current CMMC status at the specified CMMC level or higher, if required by the contract, task order, or delivery order, throughout the life of the contract, task order, or delivery order.
-(b) CMMC status.
-(1) Contracting officers may award a contract, task order, delivery order, or modification to exercise an option or extend a period of performance, if the offeror's or contractor's CMMC status is--
-(i) Listed in the definition of "CMMC status"; and
-(ii) Equal to or higher than the CMMC level required by the solicitation or contract, task order, or delivery order.
-(2) CMMC levels 2 and 3 can be in a conditional level for a period not to exceed 180 days from the CMMC status date (32 CFR 170.21), and award can occur with a conditional CMMC level. CMMC level 1 requires a final CMMC level for award.+(a) When a requiring activity identifies a requirement for a contract, task order, or delivery order to include a specific CMMC level, the contracting officer shall not--
+(1) Award to an offeror that does not have a CMMC certificate at the level required by the solicitation; or
+(2) Exercise an option or extend any period of performance on a contract, task order, or delivery order unless the contractor has a CMMC certificate at the level required by the contract.
+(b) Contracting officers shall use Supplier Performance Risk System (SPRS) (https://www.sprs.csd.disa.mil/) to verify an offeror or contractor's CMMC level.
Sources: Search on acquisition.gov · View on acq.osd.mil