NAVFAC SW Non-Disclosure Agreement

By signing, you affirm the NAVFAC SW CUI Non-Disclosure Agreement (MACC GROUP 0120), under 32 CFR Part 2002. You agree not to disclose any Controlled Unclassified Information to which you are granted access to anyone without an appropriate lawful Government purpose; to protect and safeguard that information; to report any unauthorized disclosure; and that these obligations continue while the information remains controlled. Your signature below is applied to the Government's exact agreement, which is retained by Resource Environmental Services.

Before you bid — cybersecurity requirements that flow down to you. This solicitation currently requires compliance with the Cybersecurity Maturity Model Certification (CMMC) program under DFARS 252.204-7021, and that requirement flows down to subcontractors. The level you must hold depends on the CUI and Federal Contract Information you actually handle on your own systems (32 CFR 170.23), and it may fall under any applicable classification, including CMMC Level 1 or Level 2. The requirement is set by the Government and is subject to change as the program is phased in. Where required you must post a self-assessment in SPRS and provide your status, CMMC UID, and CAGE code on request. Achieving and maintaining this status is at your own cost — no additional compensation, price adjustment, or time extension will be provided — so account for it in your bid. You must also limit CUI to need-to-know, never disseminate it further without written authorization, never use insecure or public sharing links, access CUI only through REI’s secure environment, and flow these same terms down to any lower-tier subcontractor. The full Flow-Down Addendum is attached to the agreement you receive.