Attachment 2 - CMMC Attestation.pdf
PDF 30 KB Posted
- Attached to
- DANTES Online College and Career Planning Tool
- Solicitation number
- H9821026QA002
- Issued by
-
Defense Human Resources Activity
About this file
This is a CMMC Attestation Letter template for the DANTES Online College and Career Planning Tool RFQ H9821026QA002 issued by the Defense Human Resources Activity to Contracting Officer Charles M. Carnley. The template serves as a formal confirmation of a contractor's Cybersecurity Maturity Model Certification (CMMC) compliance posture and phased implementation plan in accordance with DFARS 252.204-7021 and DFARS 252.204-7225.
The attestation letter outlines three compliance phases: (1) Current Status—the contractor has completed CMMC Level 1 Self certification at the time of quote submission, confirming foundational safeguarding requirements for Federal Contract Information (FCI) are implemented and documented in the Supplier Performance Risk System (SPRS) with an assigned unique identifier (UID); (2) In Progress—the contractor is actively preparing for CMMC Level 2 Self compliance by evaluating systems against NIST SP 800-171 DoD Assessment Methodology and updating System Security Plans (SSPs) and Plans of Action and Milestones (POA&Ms); and (3) Commitment to CMMC Level 2 Self Compliance—if awarded, the contractor formally commits to finalizing CMMC Level 2 Self and entering the summary level score into SPRS within 90 days of contract award, recognizing this as a material requirement for handling Controlled Unclassified Information (CUI) and performing under the contract. The contractor commits to notifying the Contracting Officer upon completion of Level 2 certification and affirms commitment to protecting DoD mission data and ensuring a secure supply chain.
View the file
Other files
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
H9821026QA002 – CMMC Attestation Letter
[Company Letterhead]
Date: [Date]
To: Contracting Officer Charles M. Carnley Organization: Defense Human Resources Activity Solicitation: DANTES Online College and Career Planning Tool - RFQ H9821026QA002
SUBJECT: Attestation of Phased Compliance with CMMC Requirements (DFARS 252.204- 7021)
Dear Mr. Carnley, This letter serves as formal confirmation of [Contractor Company Name] (CAGE Code:
[Insert CAGE], UEI: [Insert UEI]) cybersecurity compliance posture and implementation plan regarding the Cybersecurity Maturity Model Certification (CMMC) requirements set forth in DFARS 252.204-7021 and DFARS 252.204-7225.
To meet the requirements of the referenced solicitation, [Contractor Company Name] attests to the following phased compliance timeline:
1. Current Status: CMMC Level 1 Self (At Time of quote) As of the date of this quote submission, [Contractor Company Name] has successfully completed a CMMC Level 1 Self. We confirm that the foundational safeguarding requirements for Federal Contract Information (FCI) are implemented across our information systems, and the corresponding annual attestation has been documented in the Supplier Performance Risk System (SPRS). The CMMC unique identifier (UID) number for this CMMC Level 1 Self is (Insert UID).
2. In Progress: CMMC Level 2 Self Preparation We recognize the requirement to safeguard Controlled Unclassified Information (CUI) and have formally initiated the process to obtain a CMMC Level 2 Self. We are currently actively evaluating our covered contractor information systems against the NIST SP 800-171 DoD Assessment Methodology, updating our System Security Plan (SSP), and identifying any necessary Plans of Action and Milestones (POA&Ms).
3. Commitment to CMMC Level 2 Self Compliance (Within 90 Days of Award) Should [Contractor Company Name] be selected for this award, we formally commit to finalizing our CMMC Level 2 Self and entering the resulting summary level score into SPRS no later than ninety (90) days following the date of contract award. We understand that maintaining this security posture is a material requirement for handling CUI and performing under this contract.
H9821026QA002 – CMMC Attestation Letter
We are fully committed to protecting DoD mission data and ensuring a secure supply chain. Once the CMMC Level 2 Self is accomplished, a notification will be sent to the Contracting Officer with the specifics of the certification.
Sincerely, [Authorized Signatory Name] [Title, e.g., Chief Information Security Officer / Contracts Manager] [Contractor Company Name] [Contact Phone Number] [Contact Email]
File details come from the government source that posted it. Updated .