§217.207. Exercise of options.
48 C.F.R. § 217.207
In addition to the requirements at FAR 17.207(c), exercise an option only after—
Determining that the contractor's record in the System for Award Management database is active and the contractor's unique entity identifier number, Commercial and Government Entity (CAGE) code, name, and physical address are accurately reflected in the contract document. See PGI 217.207 for the requirement to perform cost or price analysis of spare parts prior to exercising any option for firm-fixed-price contracts containing spare parts; and
Working with the program office or requiring activity to verify in the Supplier Performance Risk System (https://piee.eb.mil) that—
The summary level score of a current NIST SP 800-171 DoD Assessment (i.e., not more than 3 years old, unless a lesser time is specified in the solicitation) for each covered contractor information system that is relevant to an offer, contract, task order, or delivery order are posted (see 204.7303); and
If there is a requirement for the contractor to have a Cybersecurity Maturity Model Certification (CMMC) status at a specific CMMC level, the contractor has a current CMMC status at the CMMC level required by the contract, or higher, for each of the CMMC unique identifiers applicable to each of the contractor information systems that process, store, or transmit Federal contract information or controlled unclassified information (see 204.7503(c)).
Notes, amendments, and revision history
Amendments
[90 FR 43575, Sept. 10, 2025]
Authority
Authority: 41 U.S.C. 1303 and 48 CFR chapter 1.
Source
Source: 56 FR 36345, July 31, 1991, unless otherwise noted.
Amendments
[90 FR 43575, Sept. 10, 2025]