Skip to content Skip to left sidebar Skip to right sidebar Skip to footer

Cybersecurity

CMMC Coming to Solicitations

Cybersecurity Maturity Model Certification (CMMC) requirements may show up in solicitations within six months. (GOVCONWire, May 12, 2020)

A Department of Defense spokesperson expects about 10 DoD RFIs in June to include the new requirements. She said, “As we release the RFIs, we’ll have the certified and trained auditors who will be able to go out to industry and certify companies at the level of maturity required for the work that they’re bidding on.” (ibid)

Additionally, changes to the Defense Federal Acquisition Regulation Supplement 252.204-7012 should be finalized by October. “You will not see the CMMC in any Department of Defense contracts or RFPs until the rule change is completed.” (ibid)

Questions on the Cybersecurity Maturity Model Certification and whether you can bid on upcoming solicitations? Give us a call.

CMMC not for COTS

A recent modification to DoD’s website spells out a small but very specific change about the Cybersecurity Maturity Model Certification (CMMC): it’s not applicable to DoD suppliers that only provide commercial-off-the-shelf products. (FedScoop, May 5, 2020)

Originally, DoD and CMMC administrators explained that all contractors and subcontractors must be certified under  CMMC by a third-party assessor. However, a few weeks ago, the Office of the Under Secretary of Defense for Acquisition and Sustainment changed the official website. The revised FAQ section states: “Companies that solely produce Commercial-Off-The-Shelf (COTS) products do not require a CMMC certification.” (ibid)

CMMC is in place to certify contractors have the cybersecurity practices in place to work with controlled unclassified information, the actual products themselves. (ibid)

Wondering if CMMC applies to the products and or services you provide? Give us a call.

CARES Funds Available For Contractors

The Office of Management and Budget (OMB) recently published a supplement to Section 3610 of the CARES Act that allows contractors sick or paid time-off during the national emergency if contractors are not able to access their worksites or telework. (Government Executive, April 17, 2020)

At this time, maximizing telework is advised; however, many contractor jobs involve sensitive and/or classified work, making telework not feasible. Trade associations realized this pretty quickly and asked for additional clarification of the Act. For these specific contractors, agencies are allowed to “modify the terms and conditions of a contract, or other agreement to reimburse at the minimum applicable contract billing rates up to an average of 40 hours per week for any paid leave (including sick leave) a contractor provides to keep its employees or subcontractors in a ready state.”

In addition to the paid leave/sick leave clarification, the updated guidance allows agencies to reimburse contractors from the 27 March (when the CARE Act was signed) through 30 September 2020. The original bill did not include a start date. (ibid)

OMB, via the Office of Federal Procurement Policy, developed a guide to assist agencies when working with contractors to ensure the correct documentation is submitted for proper reimbursement. (ibid)

Don’t know where to start the process of getting paid during this national emergency? Give us a call.

 

 

 

Emergency Rules

Government ontractors and small businesses should be aware of increased opportunities during the current COVID-19 national emergency. The government is permitted, during a national emergency, to set aside solicitations to allow awards “only to offerors residing or doing business primarily in the area affected by …[a] major disaster or emergency.” Contractors can verify if they fall into this category by reviewing Federal Acquisition Regulation 52.226-3(d). (Law360.com, April 13, 2020)

A national emergency declaration allows the government to (restrict) certain solicitations to small businesses in certain areas. These solicitations are either a set-aside or an evaluation preference is given to small businesses. (ibid)

During national emergencies, large contractors should look to team with small businesses, or to current teaming agreements already in place. In addition, contractors who are at the ready to produce/provide goods or services may be called on to contract with agencies to battle COVID-19. (ibid)

Micro purchase thresholds are another acquisition procedure government agencies may use during a national emergency. These allow for a simplified acquisition methodology for specific items or services required under emergency situations, such as the COVID-19 national emergency. (ibid)

State and local governments may also procure under the Stafford Act, wherein state governors request financial relief via federal grants that allow procurement under their own procedures. The Stafford Act authorizes federal contracts for “debris clearance, distribution of supplies, reconstruction, and other major disaster or emergency assistance activities.” In 2006 the Local Community Recovery Act amended the Stafford Act mandating local organizations to be given preference when using full and open competition. The FAR was also amended to align with the Local Community Recovery Act. Under the act, if a contractor does not meet all of the Recovery Act stipulations there are other factors that may be considered. (Contractors may self-certify that they are local.) (ibid)

Other streamlining acquisition procedures are available under federal supply schedule contracts, multi-agency blanket purchase agreements, and multi-agency indefinite-delivery contracts. Additionally, there is an easing of the requirement that a contractor be registered in SAM.gov at the time an offer is submitted to the government. (ibid)

The emergency declaration allows state and local governments to purchase from all GSA schedules. It also encourages accelerated payments to small business contractors.  (ibid)

Additional modified procedures to facilitate swift responses are:

  • Relaxation of qualifications requirements
  • Use of sole-source contracts
  • Use of oral requests for proposals
  • Use of letter contracts
  • Interagency acquisitions
  • Awards to small disadvantaged businesses
  • Retroactive overtime approvals
  • Waivers of bid guarantees when an emergency exists
  • Use of protest overrides where necessary for a contracting process to continue

In order to track procurements related to COVID-19, GSA added a National Interest Action (NIA) code to SAM.gov. To find information on the site, simply type COVID-19 2020 in the search bar. (ibid) Contractors can register with SAM.gov under the disaster response registry, and be sure to monitor the portals most closely aligned to the goods or services you provide.

Have questions about the many opportunities available under the current national emergency? Give us a call.