The Department of War (DoW, referred to by some as the Department of Defense) is always trying to find new ways to get more federal contractors involved in defense contracts. One of the elements of the DoW which focuses on such is the “Innovation Unit.” Within that unit is now a “Bridge Program” which is hoping to raise the probability of the DoW embracing novel approaches to defense needs while also cutting down on the proverbial red tape which prevented contractors from performing for the DoW in the past, especially regarding security clearance. Let’s dive into some of the ideas and goals of this new Bridge Program.
Continue readingTag Archives: DoD
BREAKING: Department of War Suspends Introduction of Phase Two of CMMC
Last year, we noted in a couple posts that the federal government had finally began implementation of its Cybersecurity Maturity Model Certification (CMMC) Program. Apparently, however, the government has concluded that a pause is needed on further implementation due to what it describes as structural issues with the program. On July 13, 2026, the Department of War (DoW)[1] announced that it is suspending the introduction of Phase Two of the Cybersecurity Maturity Model Certification (CMMC) Program. We explore that decision in this post.
Continue readingGAO Evaluation of CMMC Program and Important Information for Defense Contractors
Back in October and November 2025, with the Department of Defense putting some finishing touches on the Cybersecurity Maturity Model Certification (“CMMC”) Program, we explored the contours of that program and what it means for contractors like you. During this same timeframe, we were not the only ones reviewing the CMMC Program. The GAO also has been in the process of conducting a review of the CMMC Program and recently released its findings. In a report titled, “Defense Contractor Cybersecurity: DOD Should Address External Factors That Could Impede Program Implementation,” GAO’s position on the CMMC Program is pretty clear: Good but needs tweaking. Today, we’ll take a look at those findings and how they might affect the CMMC Program going forward.
Continue reading2026 NDAA: DoD CPARS Changes Coming
Both the Senate and House, as part of the draft 2026 National Defense Authorization Acts (NDAA), have proposed nearly identical ideas on overhauling the Department of Defense’s Contractor Performance Assessment Report System (CPARS) processes. While both NDAAs have passed, and therefore require reconciliation in a committee, their ideas are extremely similar and signal a coming change in CPARS processes for defense contractors. One big change is to focus on specific negative performance events using “a standardized scoring mechanism” and to remove reporting on “positive or neutral performance assessments.”
Continue readingOverview of Recent Updates to Cybersecurity Requirements Under the CMMC Program (Part 1)
On September 10, 2025, the Department of Defense (As all the documents we address use the Department of Defense naming, we will go by that to prevent confusion.) (DoD) implemented the acquisition rules for the Cybersecurity Maturity Model Certification program at DFARS subpart 204.75. This follows the federal government’s institution of the CMMC program last year (We explored this a bit with a review of the proposed rules some time before that and noted that initial rules have been in place since 2020.) These rules are present at 32 C.F.R. Part 170. Despite these rules having now been in place for a little while, the scope and complexity of the CMMC program can nonetheless be daunting for contractors to deal with. In this first in a series of posts, we will explore the basics of the CMMC program and what it means for you.
Continue readingSmallGovCon Week in Review: August 5-9, 2024
Happy Friday, All. Please enjoy our latest week in review in order to stay on top of federal contracting news. Some interesting stories include Senate efforts to enhance oversight of Other Transaction Authority (OTA) agreements and address delays in Major Acquisition Programs (MTA). Meanwhile, the GSA is pushing forward with updated standards to accelerate federal buildings toward zero emissions, reflecting a broader shift towards sustainability. In cybersecurity, CISA’s CDM program is set to tackle emerging threats in the cloud, while the Department of State is piloting AI adoption to improve operations. You can read more about these topics in the articles below. Have a great weekend!
Continue readingSmallGovCon Week in Review: March 25-29, 2024
We hope you had a great week and are enjoying some nice spring weather. Here are some happenings from the federal government contracting world this week, including more updates on the funding package, upcoming information on complying with labor regulations, and new policies on AI. Enjoy your weekend!
Continue reading