Solicitation Notice: ERCIP Rock Island Arsenal Microgrid

*Please read below for instructions to access the technical package (Plans/Specificiations)*

Cybersecurity Maturity Model Certification (CMMC) and Access to Controlled Information

For information on CMMC, please reference: https://dodcio.defense.gov/CMMC/Documentation/

1. Purpose of this Notice

This notice is to inform industry of an active solicitation and to outline the mandatory prerequisites required to obtain the restricted solicitation package, including drawings and specifications. The information to be released is considered Controlled Unclassified Information (CUI) and/or Federal Contract Information (FCI).

2. Procedure to Obtain Restricted Solicitation Documents

This solicitation or its attachments contain Federal Contract Information (FCI) or Controlled Unclassified Information (CUI). Contractors requesting access to the FCI/CUI portions of the solicitation must have an active System for Award Management (SAM) Registration and a current BASIC confidence level in the Supplier Performance Risk System (SPRS) in order to receive access to the documents.

• Step 1: Ensure your firm has an active SAM Registration.
• Step 2: Ensure your firm has a current BASIC confidence level assessment posted in SPRS in accordance with DFARS clause 252.240-7997 and NIST SP 800-171.
• Step 3: Request access to the restricted attachments by email to the following point of contacts with your company's information:
  • To: Jacob Pridemore and Bjorn Hale
  • Email: [email protected] and [email protected]
  • Subject: SPRS Verification for [Insert Solicitation Number or Project Name]
  • Body of Email: Include your company's CAGE Code and Unique Entity Identifier (UEI). Confirm that your firm has BASIC Confidence level in SPRS and this is accurately posted in SPRS.
• Step 4: Upon Government confirmation of your SAM registration and SPRS Basic confidence level, access will be granted within PIEE.

3. Mandatory CMMC Requirement for Award

This solicitation requires the contractor and/or subcontractor(s) information system to process, store, or transmit Federal Contract Information (FCI) or Controlled Unclassified Information (CUI), and requires the contractor and/or subcontractor(s) to comply with CMMC requirements.

The CMMC level required by this solicitation is CMMC Level 2 (Self).

This CMMC level, or higher (see 32 CFR part 170), is required prior to award for each contractor information system that will process, store, or transmit FCI or CUI during performance of the contract. In accordance with 252.204-7021 Compliance with the Cybersecurity Maturity Model Certification Level Requirements, contractors shall submit the CMMC UID(s) issued by SPRS for contractor information systems that will process, store, or transmit FCI or CUI during performance of the contract. 

*Important*: An offeror will not be eligible for award if they do not possess the required current CMMC status posted in SPRS prior to award as required by DFARS 252.204-7025 Notice of Cybersecurity Maturity Model Certification Level Requirements.