GSA Ready to add CMMC Contractual Requirements
Language from the DoD’s Cybersecurity Maturity Model Certification has been included in GSA’s latest governmentwide acquisition contracts (GWACs), starting with the request for proposals in the Streamlined Technology Application Resource for Services (STARS) III and Polaris. However, GSA notes that any level-specific requirements will be incorporated at the order level.
The agency’s goal is to synchronize CMMC and the GWACs so GSA can phase in new DoD programs and projects over time, according to Keith Nakasone, deputy assistant commissioner for acquisition in GSA’s Office of IT Category. “Not every single system is equal, so we have to have the flexibility in the contracts to deliver the acquisition solutions,” he said.
Sources:
