This requirement anticipates a Cyber Maturity Model Certification (CMMC) Level 2 from a Certified Third-Party Assessor Organization (C3PAO). Offerors who disagree with this anticipated level must provide a rationale and a recommended alternative CMMC level. Capability statements must include either documentation of this certification or an explanation of the ability to obtain it prior to the estimated award date. No specific budget, performance location, or non-bid/proposal timelines are detailed in this excerpt.