John Day Dam Powerhouse HVAC Upgrades

The U.S. Army Corps of Engineers (USACE) Portland District (NWP) has a requirement for HVAC upgrades at the John Day Dam (JDA) Powerhouse. 

JDA is approximately 109 miles east of Portland, Oregon, and 275 miles from Seattle, Washington. JDA spans two states, with Units 1–14 located in Sherman County, Oregon, and Units 15–16 in Klickitat County, Washington.

Cybersecurity Maturity Model Certification (CMMC). This solicitation requires the contractor and/or subcontractor(s) information system to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), and requires the contractor and/or subcontractor(s) to comply with CMMC requirements.  The CMMC level required by this solicitation is: CMMC Level 2 (Self). This CMMC level, or higher, is a condition of award. Prior to award, the apparent successful offeror must have a current CMMC status at Level 2 (Self), or higher, posted in SPRS for each relevant CMMC UID in order to remain eligible for award; failure to meet this requirement will render the offeror ineligible for contract award.

CMMC requirements apply to prime contractors and subcontractors throughout the supply chain at all tiers that will process, store, or transmit any FCI or CUI on contractor information systems in the performance of this DoD contract or subcontract. Prime contractors shall comply and shall require subcontractors to comply with and to flow down CMMC requirements, such that compliance will be required throughout the supply chain at all tiers with the applicable CMMC level and assessment type for each subcontract as follows:

If a subcontractor will only process, store, or transmit FCI (and not CUI) in performance of the subcontract, then a CMMC status of Level 1 (Self) is required for that subcontractor.

If a subcontractor will process, store, or transmit CUI in performance of the subcontract, then a CMMC status of Level 2 (Self), or higher, is required for that subcontractor, and must be...