Most Recent

Jul 25, 2026

•

7 min read

DFARS 252.204-7012 Explained: What "Running 7012" Actually Means

Jul 17, 2026

•

6 min read

The FAR CUI Rule: NIST 800-171 Rev 3 Comes to Civilian Contracts

Jul 14, 2026

•

3 min read

DoW Suspends CMMC Phase 2 — Your Audit Is Off, Your Liability Isn't

Jul 13, 2026

•

3 min read

CMMC's Rev 3 Deadline Rule Is Due This Month

Jul 9, 2026

•

3 min read

Fixed-Price Is Now the FAR Default — and T&M Contracts Are in Scope

Jul 9, 2026

•

5 min read

SPRS Scores: How to Calculate and Report Yours

Jul 2, 2026

•

5 min read

The DFARS Cyber Clauses, Decoded: 7012, 7019, 7020, 7021, and 7025

Jun 29, 2026

•

3 min read

FedRAMP's CR26 Overhaul Is Here — and It Changes How You Vet Cloud Tools for CMMC

Jun 29, 2026

•

7 min read

The Revolutionary FAR Overhaul: What It Means for Small Federal Contractors

Jun 27, 2026

•

5 min read

CMMC Self-Assessment vs C3PAO: How the Assessment Actually Works

Latest News

News

Jul 14, 2026

•

3 min read

DoW Suspends CMMC Phase 2 — Your Audit Is Off, Your Liability Isn't

Third-party assessments are frozen and a 60-day review may rewrite the program entirely. DFARS 252.204-7012 and your SPRS affirmation still bind

News

Jul 13, 2026

•

3 min read

CMMC's Rev 3 Deadline Rule Is Due This Month

The Unified Agenda shows DoD adopting an interim final rule in July that sets the transition from NIST SP 800-171 Rev 2 to Rev 3. Interim final rules take effect on publication.

Weekly Intelligence Briefs

Jul 21, 2026

•

6 min read

CMMC Phase 2 Is Suspended — What Actually Changed, and What Didn't. Plus 15 Vetted Contracts

On July 13 the Department of War froze CMMC third-party assessments and launched a 60-day review — but self-assessment, DFARS 7012, and your SPRS affirmation still bind you. What to do now, plus 15 vetted opportunities in a week the government kept buying cyber: Army ICAM, a SIEM set-aside, PKI, and more.

Jul 14, 2026

•

6 min read

Rev 3 Is Coming to CMMC — and the Interim Rule Is Due This Month. Plus 15 Vetted Contracts

The Unified Agenda shows DoD adopting an interim final rule this month to move CMMC from NIST 800-171 Rev 2 to Rev 3 — and it takes effect on publication. Here's what changes and how to prepare. Plus 15 vetted opportunities, including two rare small-business set-asides on classified Air Force infrastructure.

Jul 7, 2026

•

6 min read

The FAR Just Rewrote Civilian CUI Rules. You Have Until July 23 — Plus 15 Vetted Contracts

The FAR Council folded civilian CUI rules into Part 40: NIST 800-171 Rev 3, 72-hour incident reporting, one standard form. Comments close July 23. Plus 15 vetted opportunities — including DOJ's managed-attribution buy and an Interior Cisco IDIQ set aside for small business.

Cleared to Bid

Verified federal IT and cyber contracting opportunities, every Tuesday. Primary sources only. Quiet weeks stay quiet.

Guides

DFARS 252.204-7012 Explained: What "Running 7012" Actually Means

A prime tells you to "run 7012." Here is what the clause actually requires: NIST 800-171, 72-hour incident reporting, a 90-day media hold, and flow-down to your subs.

Jul 25, 2026

•

7 min read

The FAR CUI Rule: NIST 800-171 Rev 3 Comes to Civilian Contracts

The FAR would extend CUI safeguarding to civilian contractors at NIST 800-171 Rev 3, not the Rev 2 DoD requires. What the proposed rule changes, and when.

Jul 17, 2026

•

6 min read

SPRS Scores: How to Calculate and Report Yours

Your SPRS score runs from -203 to +110 and can gate a DoD award. Here's how the scoring works, how to calculate yours, and how to report it correctly.

Jul 9, 2026

•

5 min read

The DFARS Cyber Clauses, Decoded: 7012, 7019, 7020, 7021, and 7025

Five DFARS clauses govern cybersecurity in DoD contracts: 7012, 7019, 7020, 7021, and 7025. Here's what each one requires and how they fit together.

Jul 2, 2026

•

5 min read

The Revolutionary FAR Overhaul: What It Means for Small Federal Contractors

The FAR Overhaul's first proposed rules are out, with comments due July 23. Here's what's confirmed, what's coming, and what it means for contractors.

Jun 29, 2026

•

7 min read

CMMC Self-Assessment vs C3PAO: How the Assessment Actually Works

For CMMC Level 2, your contract assigns one of two paths: a self-assessment you attest to, or a third-party C3PAO certification. Here's how each works.

Jun 27, 2026

•

5 min read