DFARS 252.204-7025.pdf
PDF 120 KB Posted
- Solicitation number
- W912QR26QA009
About this file
This document is a federal acquisition provision (252.204-7025) regarding Cybersecurity Maturity Model Certification (CMMC) Level Requirements dated November 2025. The provision outlines critical cybersecurity compliance requirements for contractors seeking to be awarded federal contracts involving Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). Key requirements include: (1) CMMC certification levels will be determined at the Task Order level, (2) contractors must have their current CMMC status entered in the Supplier Performance Risk System (SPRS), and (3) contractors must provide CMMC unique identifiers for each information system that will process, store, or transmit FCI or CUI during contract performance. Contractors with a Conditional CMMC Status must successfully close out a plan of action and milestones to achieve a Final status. Failure to meet these cybersecurity requirements will render an offeror ineligible for contract, task order, or delivery order awards.
View the file
Other files
| File | Type | Posted |
|---|---|---|
| PIEE Directions.docx | DOCX document | |
| Questions.pdf | ||
| 20251124_1st Floor Disposal SOW.pdf | ||
| Pictures.pdf | ||
| Solicitation - W912QR26QA009.pdf | ||
| REPS AND CERTS.pdf | ||
| 2015-4717.pdf | ||
| SPECIAL INSTRUCTIONS.pdf |
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
252.204-7025 NOTICE OF CYBERSECURITY MATURITY MODEL CERTIFICATION LEVEL
REQUIREMENTS (NOV 2025)
(a) Definitions. As used in this provision, controlled unclassified information (CUI), current, Cybersecurity Maturity Model Certification (CMMC) status, Cybersecurity Maturity Model Certification unique identifier (CMMC UID), Federal contract information (FCI), and Plan of action and milestones have the meaning given in the Defense Federal Acquisition Regulation Supplement 252.204-7021, Contractor Compliance With the Cybersecurity Maturity Model Certification Level Requirements, clause of this solicitation.
(b)(1) Cybersecurity Maturity Model Certification (CMMC) level. The CMMC level required by this solicitation will be determined at the Task Order level. This CMMC level, or higher (see 32 CFR part 170), is required prior to award for each contractor information system that will process, store, or transmit Federal contract information (FCI) or controlled unclassified information (CUI) during performance of the contract.
(2) The Offeror will not be eligible for award of a contract, task order, or delivery order resulting from this solicitation if the Offeror does not have, for each of the contractor information systems that will process, store, or transmit FCI or CUI and that will be used in performance of a contract resulting from this solicitation--
(i) The current CMMC status entered in the Supplier Performance Risk System (SPRS) (https://piee.eb.mil) at the CMMC level required by paragraph (b)(1) of this provision; and
(ii) A current affirmation of continuous compliance with the security requirements identified at 32 CFR part 170 in
SPRS.
(c) Plan of action and milestones. If the Offeror has a CMMC Status of Conditional, the Offeror shall successfully close out a valid plan of action and milestones (32 CFR 170.21) to achieve a CMMC Status of Final.
(d) CMMC unique identifiers. The Offeror shall provide, in the proposal, the CMMC unique identifier(s) (CMMC UIDs) issued by SPRS for each contractor information system that will process, store, or transmit FCI or CUI during performance of a contract, task order, or delivery order resulting from this solicitation. The Offeror also shall update the list when new CMMC UIDs are generated in SPRS. The CMMC UIDs are provided in SPRS after the Offeror enters the results of self-assessment(s) for each such information system.
(End of provision) https://piee.eb.mil/
File details come from the government source that posted it. Updated .