Federal Acquisition

GSA’s Federal Acquisition Service is seeking information on commercial products and services that could help agencies migrate to post-quantum cryptography. Responses are due December 7, 2026; the RFI is market research only and does not promise funded work or a follow-on solicitation.

NIST SP 800-171 Revision 3 modernizes CUI safeguards with 97 requirements across 17 families, but DoD Class Deviation 2024-O0013 retains Revision 2 for DFARS 252.204-7012 and CMMC Level 2 until acquisition regulations are updated. Contractors should follow the revision specified in each solicitation and contract rather than assume Revision 3 automatically applies.

A November 12 virtual webinar will compare NIST SP 800-171 Revision 3 with Revision 2 and discuss connections to GSA CUI guidance and the proposed FAR CUI Rule. Contractors, particularly defense firms still using Revision 2, can use the session to inform compliance planning while distinguishing current requirements from proposed changes.

At a July 14, 2026 listening session, contracting experts and AI companies said GSA’s revised draft AI acquisition rule improved on earlier versions but still needs clearer definitions and closer alignment with commercial practices. The draft is neither a solicitation nor a finalized requirement, but its eventual terms could affect how agencies buy AI and how contractors address delivery, data governance, and risk.

GSA appointed Jennifer M. Hill to lead the Federal Acquisition Service and Mark S. Weiss to lead the Public Buildings Service. Hill’s focus on consolidated, faster purchasing and fraud reduction could influence government-wide buying channels, while Weiss will oversee a federal real estate portfolio of nearly 360 million square feet; no new solicitation or award was announced.

Federal acquisition teams can use Requests for Information and structured, broad industry engagement to test market capabilities before finalizing an RFP. Contractors can offer evidence-based alternatives and flag restrictive or outdated requirements while maintaining procurement integrity.

CISA’s “CISA 2030: Defend, Harden, Prevail” prioritizes operational technology security, software supply chain integrity, and continuity of essential services, while recognizing that intrusions may still occur. Federal buyers and contractors can use these priorities to inform acquisition planning and lifecycle controls, but CISA has not announced a specific solicitation or mandatory new requirement; an implementation and outcome-measurement approach is planned within 180 days.

The Department of War paused CMMC Phase 2, but current contract-specific cybersecurity obligations remain in effect for defense contractors. A proposed FAR rule could extend CUI safeguards government-wide, including NIST SP 800-171 Revision 3, 72-hour incident reporting, subcontractor flowdowns, and cloud-security requirements—though those proposed provisions are not yet binding.

Seventeen bipartisan former national security officials asked the D.C. Circuit to rehear Anthropic’s challenge to the Pentagon’s supply-chain-risk designation. The case could influence how the Defense Department applies supplier restrictions and how agencies and contractors evaluate Anthropic’s Claude models, but the filing is not a new procurement action.

DHS issued a FASCSA order barring federal civilian executive-branch agencies from acquiring covered DeepSeek products and services and directing removal of existing deployments. The order, signed in July and publicly noticed in October, also reaches affiliates and third-party offerings built with DeepSeek implementations; contractors should map model provenance and confirm agency-specific remediation timelines.

The FAR Council has proposed significant regulatory changes to streamline federal procurement processes, focusing on commercial acquisitions and negotiated procurements. Public comments are being invited until October 19, 2026, allowing industry stakeholders to engage in shaping these impactful reforms.

The GSA Office of Inspector General's recent audit uncovers major discrepancies in the MAS program's pricing data, highlighting risks of federal overpayment. With **$11.2 billion** spent in FY 2024 through MAS contracts, these flaws could significantly affect procurement accuracy and efficiency.

Recent discussions among federal agencies on Controlled Unclassified Information (CUI) highlight difficulties in aligning commercial tech adoption with stringent cybersecurity regulations. Notably, the evolving landscape involving CMMC and FAR Part 40 emphasizes the need for balancing innovation with compliance, impacting procurement strategies and vendor engagement.

The House advances H.R. 4123, aimed at reforming federal acquisition policies. The bill proposes streamlined procurement processes and training for acquisition professionals, enhancing opportunities for small businesses in technology contracts.

The General Services Administration (GSA) faces intensified scrutiny over potential conflicts of interest involving Josh Gruenbaum. His investments in Thrive Capital-backed companies, which have recently secured federal contracts, raise questions about ethics compliance and transparency in procurement practices.

UK-based Computacenter plans to acquire GAI for up to **$92 million**, enhancing its presence in the US federal IT sector. This acquisition is expected to create new procurement opportunities, as GAI’s established federal relationships will significantly aid Computacenter’s growth efforts.

The Government Accountability Office (GAO) has introduced a framework to evaluate the U.S. AI landscape and strengthen its competitive edge globally. This initiative opens significant procurement avenues as federal agencies aim to enhance their AI capabilities aligned with four key pillars: Science and Technology, Human Capital, Governance, and Economy.

CISA's Binding Operational Directive 26-02 mandates federal agencies to manage unsupported edge devices actively. This shift to continuous lifecycle management presents new procurement opportunities for solutions focused on edge device security and compliance management.

The Office of Federal Procurement Policy (OFPP) has revised the Federal Acquisition Regulation (FAR) to enable earlier industry engagement in procurement processes. This change is expected to improve proposal quality and reduce acquisition cycle times by allowing agencies to gather insights from potential contractors before finalizing solicitations.

Josh Gruenbaum has resigned as GSA's Federal Acquisition Service commissioner, with Laura Stanton stepping in as acting commissioner. This leadership change may impact procurement policies and contractor oversight, particularly post-implementation of the successful OneGov strategy that saved the government over $1.1 billion.