2026.06.18 JGSC RFP QA Master Round 1.pdf

Question # Date Rcvd Document/Attachment Page # / Paragraph Reference Question Government Response

Date Posted to SAM.gov

1 8-Jun-26 Performance Work Statement Paragraph 9.G Is an updated Level 2 Self Assessment required before award?

Yes. According to DFARS 252.204-7021 and 252.204-7025, the contractor is required to have CMMC Level 2 (Self) status entered into the Supplier

Performance Risk System (SPRS) and a current affirmation of continuous compliance with the security requirements identified at 32 CFR part 170 prior to award. The self-assessment must be current (not older than 180 days for Conditional status).

18-Jun-26

2 8-Jun-26 Performance Work Statement Paragraph 9.G Are POAMs still acceptable or is 100% compliance required?

According to DFARS 252.204-7021 and 252.204-7025, POA&Ms (Plans of Action and Milestones) are acceptable at the time of award. Contractors may be awarded with “Conditional” CMMC Level 2 (Self) status. However, POA&Ms are limited to 180 days from the first attestation in SPRS.

Contractors will be required to complete a CMMC Level 2 self-assessment every three years and an annual affirmation of compliance.

18-Jun-26

3 8-Jun-26 Performance Work Statement Paragraph 4.C.7 Is there a rating system for performance and what is the breakdown?

If past performance is applicable, it will be included as an evaluation factor at the task order level and will be evaluated on an acceptable/unacceptable basis as stated in PWS, Paragraph 4.C.7.

18-Jun-26

4 8-Jun-26 General Instructions Addendum to FAR 52.212-1 What is expected submission supposed to look like?

In accordance with addendum to FAR 52.212-1, Sections II and III, Offerors must submit Volume I - Contract Documentation (Attachment 2), which requires a completed and signed SF1449, as well as applicable clauses completed in the solicitation document. Offerors must also submit Volume II

- Technical Proposal (Attachment 3).

18-Jun-26

5 9-Jun-26 Performance Work Statement Section 2.A.1.1, Page 2

PWS Section 2.A.1.1 states that the Contractor must own or control a Roll- On/Roll-Off (RORO), multi-purpose, or vehicle carrier vessel and maintain status as a VISA Participant. Does the Government consider a VISA-enrolled tug and barge combination capable of transporting military rolling stock and

Department of War cargo to satisfy this requirement? If not, please clarify whether tug and barge combinations are excluded from eligibility for contract award.

PWS Section 2.A.1.1, requires the Contractor to own or control one of three specific vessel types: a Roll-On/Roll-Off (RORO), multi-purpose, or vehicle carrier vessel. A tug and barge combination is not among the three vessel types listed. Accordingly, an offeror whose only proposed vessel is a tug and barge combination would not meet the minimum requirement of PWS

Section 2.A.1.1 and would not be eligible for award on that basis.

18-Jun-26

6 9-Jun-26 Performance Work Statement Sections 2.A.1.1 and 5.A.1.2, Pages 2 and 6

The solicitation requires contractors to own or control a Roll-On/Roll-Off (RORO), multi-purpose, or vehicle carrier vessel; however, the term "multi-purpose vessel" is not defined. Please clarify the Government's definition of a multi-purpose vessel and whether eligibility is determined based on vessel classification, vessel design, vessel capability, VISA enrollment category, or another standard.

A multi-purpose vessel is defined, for purposes of this solicitation, as a vessel enrolled in the VISA program as a multi-purpose vessel. Eligibility will be determined based on the vessel type as listed in the Offeror's VISA contract.

18-Jun-26

7 9-Jun-26 Performance Work Statement Section 9.G, Page 12

PWS Section 9.G states that the contractor is required to develop a System Security Plan (SSP) and complete the NIST SP 800-171 self-assessment required by Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self). Please confirm whether compliance with CMMC Level 2 (Self) and submission of the associated SPRS score is required at the time of proposal submission or at the time of contract award.

Compliance with CMMC Level 2 (self), including completion of NIST SP 800- 171 self assessment and submission of the associated SPRS score, is required prior to award, as referenced in DFARS 252.204-7025.

18-Jun-26

8 10-Jun-26 Performance Work Statement Section 9.G, Page 12 I did the CMMC level 2 self-evaluation through SPRS but it looks like in order to achieve the CMMC compliance and get a UID there needs to be 100% controls met. Is this correct?

No, you do not need to have 100% of NIST SP 800-171 controls met to receive a CMMC UID. A UID is generated when a complete CMMC Level 2

(Self) assessment, including the required affirmation, is properly submitted in SPRS. If a UID is not appearing, verify all steps are completed, ensure the correct assessment type, and contact the SPRS Help Desk if needed.

The below link is being provided for additional guidance:

https://www.sprs.csd.disa.mil/cmmc.htm#reference

18-Jun-26

Joint Global Sealift Charter (JGSC) - RFP Q&A

HTC71126RE142