All of our previous posts
Guide
Jul 2, 2026
•
5 min read
Five DFARS clauses govern cybersecurity in DoD contracts: 7012, 7019, 7020, 7021, and 7025. Here's what each one requires and how they fit together.
Weekly Brief
Jun 30, 2026
A June 22 executive order gives federal contractors until December 31, 2030 to go quantum-safe. Plus this week's full pipeline: a DoD water-plant OT contract, a VA patient-safety system, State Dept vetting work, and 12 more — curated for small business.
News
Jun 29, 2026
3 min read
FedRAMP released its Consolidated Rules for 2026 on June 25, effective July 1. Authorizations become certifications, impact levels become classes, and the labels you rely on to evaluate SaaS for a CMMC Level 2 assessment are changing.
7 min read
The FAR Overhaul's first proposed rules are out, with comments due July 23. Here's what's confirmed, what's coming, and what it means for contractors.
Jun 27, 2026
For CMMC Level 2, your contract assigns one of two paths: a self-assessment you attest to, or a third-party C3PAO certification. Here's how each works.
Jun 25, 2026
The first four proposed rules consolidate federal security requirements into a new FAR Part 40 and touch IT acquisition directly. Small-business rules are still coming. The comment window is the minimum 30 days.
Jun 24, 2026
6 min read
CMMC Level 2 is built on the 110 NIST SP 800-171 Rev 2 controls, grouped into 14 families. Here's what each one covers and how your SPRS score works.
Jun 23, 2026
2 min read
Trump's June 22 executive order directs the FAR Council to require civilian-agency contractors to meet NIST's post-quantum standards by the end of 2030, plus a second rule folding cryptographic flaws into vulnerability disclosure. DoD work stays on its own track.
Senate's FY2027 NDAA proposes up to $100K per firm for CMMC compliance. Plus this week's full pipeline: Air Force COMSEC support, USMC SCADA, DoD cyber range, and 12 more vetted opportunities — curated for small business.
