Most Recent

Aug 21, 2026

•

3 min read

SBA Wants to Redraw Who Counts as Small — Comments Close September 2

Aug 10, 2026

•

3 min read

The CMMC Reform RFI Closes Friday Here's How a Small Firm Files

Aug 9, 2026

•

5 min read

DFARS 7019 and 7020: The Assessment That Decides Whether You Can Bid

Aug 3, 2026

•

6 min read

FCI vs CUI: Which One Does Your Contract Involve?

Jul 25, 2026

•

7 min read

DFARS 252.204-7012 Explained: What "Running 7012" Actually Means

Jul 17, 2026

•

6 min read

The FAR CUI Rule: NIST 800-171 Rev 3 Comes to Civilian Contracts

Jul 14, 2026

•

3 min read

DoW Suspends CMMC Phase 2 — Your Audit Is Off, Your Liability Isn't

Jul 13, 2026

•

3 min read

CMMC's Rev 3 Deadline Rule Is Due This Month

Jul 9, 2026

•

3 min read

Fixed-Price Is Now the FAR Default — and T&M Contracts Are in Scope

Jul 9, 2026

•

5 min read

SPRS Scores: How to Calculate and Report Yours

Latest News

News

Aug 21, 2026

•

3 min read

SBA Wants to Redraw Who Counts as Small — Comments Close September 2

A proposed rule would cut size standards from nearly 1,000 to 338, move whole sectors from revenue to headcount, and make roughly 114,000 more firms eligible. Your NAICS code may not survive in its current form.

News

Aug 10, 2026

•

3 min read

The CMMC Reform RFI Closes Friday Here's How a Small Firm Files

DoW is writing the recommendations that reshape CMMC from whatever the defense industrial base submits by August 14. Small firms are the target audience and the least likely to respond.

Weekly Intelligence Briefs

Aug 25, 2026

•

14 min read

Six Cybersecurity Contracts Are Up for Re-Bid — Every Incumbent Named

The security work with money already attached is not in this week's postings. It is in six contracts that expire between February and August next year, each with the current holder, the ceiling and the amount actually obligated. Plus 15 vetted opportunities, and the SBA rule that would put thousands of larger firms inside your set-aside pool.

Aug 18, 2026

•

11 min read

You Do Not Need FedRAMP Certification to Bid — VA Just Said So in Writing

Small software firms talk themselves out of the federal market over a requirement that was never in the FAR. VA has instructed its contracting officers to stop implying it. Plus 15 vetted opportunities, six contracts coming up for re-competition with the incumbent named, and a FAR cyber rulemaking that was quietly closed on August 14.

Aug 11, 2026

•

11 min read

Two Contracts We Flagged Just Got Awarded — Plus the CMMC RFI Deadline Is Friday

Island Automation PC and GigXR just won two contracts we listed in earlier issues, for $147,717 and $60,000. Six more contracts in our seven NAICS codes are coming up for re-competition over the next year, each with the current holder named. Plus: the CMMC Reform RFI closes Friday at noon.

Cleared to Bid

Verified federal IT and cyber contracting opportunities, every Tuesday. Primary sources only. Quiet weeks stay quiet.

Guides

DFARS 7019 and 7020: The Assessment That Decides Whether You Can Bid

DFARS 252.204-7019 and 7020 turn your NIST 800-171 work into a scored SPRS assessment that gates your DoD award. Here is how the Basic, Medium, and High tiers work.

Aug 9, 2026

•

5 min read

FCI vs CUI: Which One Does Your Contract Involve?

FCI triggers 15 controls and CMMC Level 1. CUI triggers 110 and Level 2. Here is how to tell which one is on your systems, and who decides.

Aug 3, 2026

•

6 min read

DFARS 252.204-7012 Explained: What "Running 7012" Actually Means

A prime tells you to "run 7012." Here is what the clause actually requires: NIST 800-171, 72-hour incident reporting, a 90-day media hold, and flow-down to your subs.

Jul 25, 2026

•

7 min read

The FAR CUI Rule: NIST 800-171 Rev 3 Comes to Civilian Contracts

The FAR would extend CUI safeguarding to civilian contractors at NIST 800-171 Rev 3, not the Rev 2 DoD requires. What the proposed rule changes, and when.

Jul 17, 2026

•

6 min read

SPRS Scores: How to Calculate and Report Yours

Your SPRS score runs from -203 to +110 and can gate a DoD award. Here's how the scoring works, how to calculate yours, and how to report it correctly.

Jul 9, 2026

•

5 min read

The DFARS Cyber Clauses, Decoded: 7012, 7019, 7020, 7021, and 7025

Five DFARS clauses govern cybersecurity in DoD contracts: 7012, 7019, 7020, 7021, and 7025. Here's what each one requires and how they fit together.

Jul 2, 2026

•

5 min read