Opportunity Overview
Notice to Industry – Application of Cybersecurity Maturity Model Certification (CMMC) Requirements
NAVFAC SOUTHWEST (SW) provides this notice to Industry to inform current and prospective contractors about the CMMC Requirements under all NAVFAC SW Planning, Design and Construction (PDC) Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts.
Future contract actions shall include the CMMC requirements in accordance with Department of War (DoW) implementation of the CMMC program.
As DoW continues implementation of the CMMC program, solicitations and contracts shall identify when contractor information systems are expected to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The applicable CMMC level will be identified in the solicitation and contract.
Offerors shall be required to have a current CMMC status recorded in the Supplier Performance Risk System (SPRS), including applicable assessment results and affirmations, as a condition of award for the contract, task order, and associated options where CMMC requirements apply.
In order to receive an IDIQ award from NAVFAC SW PDC, on or after November 10, 2026, prospective contractors must show that they have obtained a CMMC Level 2 (C3PAO) or higher. Task orders issued under NAVFAC SW IDIQs may be assigned a CMMC Level below Level 2 (C3PAO); however, for the majority of work under Construction and Architect-Engineering IDIQs, it is anticipated that a Level 2 (C3PAO) certification will be required after November 10, 2026.
Immediate Steps Required
We urge all contractors and subcontractors to take the following immediate steps to prevent any disruption to your contract eligibility:
Access SPRS: Log in to the SPRS on PIEE, at https://piee.eb.mil/
SPRS Vendor (Role) & Cyber Reports Access:
https://www.sprs.csd.disa.mil/pdf/SPRS_Access_CyberReports.pdf
SPRS CMMC Level 2 Entry tutorial:...
NAVFAC SOUTHWEST (SW) provides this notice to Industry to inform current and prospective contractors about the CMMC Requirements under all NAVFAC SW Planning, Design and Construction (PDC) Multiple Award Construction Contracts (MACCs) and Architect-Engineer IDIQ Contracts.
Future contract actions shall include the CMMC requirements in accordance with Department of War (DoW) implementation of the CMMC program.
As DoW continues implementation of the CMMC program, solicitations and contracts shall identify when contractor information systems are expected to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). The applicable CMMC level will be identified in the solicitation and contract.
Offerors shall be required to have a current CMMC status recorded in the Supplier Performance Risk System (SPRS), including applicable assessment results and affirmations, as a condition of award for the contract, task order, and associated options where CMMC requirements apply.
In order to receive an IDIQ award from NAVFAC SW PDC, on or after November 10, 2026, prospective contractors must show that they have obtained a CMMC Level 2 (C3PAO) or higher. Task orders issued under NAVFAC SW IDIQs may be assigned a CMMC Level below Level 2 (C3PAO); however, for the majority of work under Construction and Architect-Engineering IDIQs, it is anticipated that a Level 2 (C3PAO) certification will be required after November 10, 2026.
Immediate Steps Required
We urge all contractors and subcontractors to take the following immediate steps to prevent any disruption to your contract eligibility:
Access SPRS: Log in to the SPRS on PIEE, at https://piee.eb.mil/
SPRS Vendor (Role) & Cyber Reports Access:
https://www.sprs.csd.disa.mil/pdf/SPRS_Access_CyberReports.pdf
SPRS CMMC Level 2 Entry tutorial:...
This is one of 6 active United States Cybersecurity opportunities most of your competitors will never see.
Your competitors are watching the same crowded contracts everyone else is. Track this opportunity and every one like it worldwide, set deadline alerts, and win where they aren’t. Free for 14 days, no card.
Start FreeSolicitation Details
| Issuing agency | Department of the NAVY |
|---|---|
| Country | United States |
| Category | Cybersecurity |
| Published | March 27, 2026 |
| Procurement stage | Request for Proposal (RFP) |
| Response due | November 30, 2028 |
| Status | Open — accepting responses |
| Official source | View original notice |
| Last verified | August 10, 2026 |
Source: U.S. Government (SAM.gov) — public domain. GlobalGov is not affiliated with or endorsed by the United States Government.
Related Opportunities in United States
See every United States Cybersecurity opportunity your competition is missing. Free for 14 days.
Get real-time alerts, competitive intelligence, and deadline tracking for this and every market worldwide.
Start Free Trial — No Card RequiredFree 14-day trial · no card required
See who is already competing here →Get a free United States Cybersecurity intelligence report in your inbox
A personalized report on United States Cybersecurity opportunities, emailed in 5-10 minutes. One per month, no account needed.