<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE dita
  PUBLIC "-//OASIS//DTD DITA Composite//EN" "ditabase.dtd">
<dita xmlns:ditaarch="http://dita.oasis-open.org/architecture/2005/"
      ditaarch:DITAArchVersion="1.2"
      domains="(topic task)                            (topic concept)                            (topic concept glossentry)                            (topic concept glossgroup)                            (topic reference)                            (topic troubleshooting++task) (topic task)                            (topic abbrev-d)                            a(props deliveryTarget)                            (topic equation-d)                            (topic hazard-d)                            (topic hi-d)                            (topic indexing-d)                            (topic markup-d)                            (topic mathml-d)                            (topic pr-d)                            (topic relmgmt-d)                            (topic sw-d)                            (topic svg-d)                            (topic ui-d)                            (topic ut-d)                            (topic markup-d xml-d)                            (topic task strictTaskbody-c)   ">
   <concept id="DFARS_204.7501"
            ditaarch:DITAArchVersion="1.2"
            class="- topic/topic concept/concept ">
      <title class="- topic/title ">
         <ph props="autonumber" class="- topic/ph ">204.7501</ph> Policy.</title>
      <conbody class="- topic/body  concept/conbody ">
         <p outputclass="List1" class="- topic/p ">(a) The contracting officer shall
include in the solicitation the required CMMC level, if provided
by the requiring activity. Contracting officers shall not award
a contract, task order, or delivery order to an offeror that does
not have a current (i.e., not more than 3 years old) CMMC certificate
at the level required by the solicitation.</p>
         <p outputclass="List1" class="- topic/p ">(b) Contractors are required to achieve,
at time of award, a CMMC certificate at the level specified in the
solicitation. Contractors are required to maintain a current (i.e.,
not more than 3 years old) CMMC certificate at the specified level,
if required by the statement of work or requirement document, throughout
the life of the contract, task order, or delivery order. Contracting
officers shall not exercise an option period or extend the period
of performance on a contract, task order, or delivery order, unless
the contract has a current (i.e., not more than 3 years old) CMMC
certificate at the level required by the contract, task order, or
delivery order.</p>
         <p outputclass="List1" class="- topic/p ">(c) The CMMC assessments shall not duplicate
efforts from any other comparable DoD assessment, except for rare
circumstances when a re-assessment may be necessary such as, but
not limited to when there are indications of issues with cybersecurity
and/or compliance with CMMC requirements.</p>
      </conbody>
   </concept>
</dita>
