Portland District USACE – Notice to Industry: Anticipated Requirement for CMMC Level 2 (Self-Assessment) on Future Contract Actions

The U.S. Army Corps of Engineers (USACE) Portland District has issued a notice to inform current and prospective contractors about the anticipated requirement for Cybersecurity Maturity Model Certification (CMMC) 2.0 Level 2 (Self-Assessment) on future contract actions. This notice is informational only and does not constitute a solicitation, request for proposal, or request for quote. The notice aims to encourage contractors to review official CMMC resources and implementation guidance published by the Department of Defense and to begin or continue their compliance efforts as soon as practicable. • The CMMC 2.0 Level 2 (Self-Assessment) will be required for most future contract actions issued by the Portland District. • Contractors are expected to have completed a CMMC Level 2 self-assessment in accordance with NIST SP 800-171 requirements. • The notice does not change any existing contracts and does not impose new requirements by itself. • Specific CMMC requirements will be identified in individual solicitations and contracts.