Cloud Computing Procurement Updates

The Government Accountability Office (GAO) has issued a report identifying that outdated federal procurement regulations and conflicting guidance continue to hinder federal agencies' adoption of cloud computing services. The report specifically calls for Congress to update the Federal Acquisition Regulation (FAR) definitions related to cloud computing to better reflect current technology and procurement practices. It also urges key agencies including the General Services Administration (GSA), Department of Homeland Security (DHS), and the Federal CIO Council to address challenges around cloud cost management, conflicting guidance, and multi-vendor cloud environments to improve procurement efficiency and achieve cost savings.

• Why this matters: Procurement professionals should anticipate potential FAR revisions that could streamline cloud service acquisitions and reduce administrative burdens.
• Agencies involved in cloud procurement may need to adjust acquisition strategies to align with forthcoming guidance addressing multi-vendor complexities and cost management.
• Contractors offering cloud solutions should prepare for evolving federal requirements that emphasize clearer definitions and more efficient procurement processes.
• This development signals increased congressional and agency focus on modernizing cloud procurement frameworks to accelerate federal cloud adoption and optimize spending.

New Relic has committed to achieving FedRAMP High and Department of Defense Impact Level 4 (IL4) authorizations for its platform hosted on AWS GovCloud. This initiative aims to enhance security and compliance capabilities to support highly regulated government workloads, including sensitive cloud migration and AI monitoring applications. The authorization process involves collaboration with FedRAMP advisory and assessment partners, positioning New Relic to provide standardized observability solutions for mission-critical federal systems.

• Why this matters: Achieving FedRAMP High and DoD IL4 authorizations enables New Relic to meet stringent federal security requirements, expanding opportunities to serve agencies with sensitive and classified workloads.
• Government procurement professionals should consider New Relic’s enhanced compliance posture when evaluating observability and monitoring solutions for cloud-native environments.
• Contractors and vendors supporting cloud migration and AI applications in federal agencies may find increased demand for integrated, secure monitoring platforms compliant with FedRAMP and DoD standards.
• This development signals a broader trend toward securing digital infrastructure with standardized, high-assurance cloud services tailored to federal mission needs.

Federal government agencies are transitioning from a "cloud-first" to a "mission-first" approach in their cloud modernization efforts, emphasizing outcomes and portability across cloud, on-premise, and edge environments. This shift highlights challenges in leadership over evolving cloud and AI products, governance balancing innovation with control, procurement speed, and managing complex costs. Agencies are encouraged to prioritize mission outcomes, design scalable solutions, foster innovation within established guardrails, and collaborate broadly to advance cloud modernization.

• Procurement professionals should anticipate evolving requirements that emphasize interoperability and mission alignment over simple cloud adoption.
• Contracting strategies may need to accommodate faster procurement cycles and flexible, scalable cloud and AI services.
• Vendors offering solutions that support hybrid environments and cost management will be well-positioned.
• Collaboration and community engagement are critical for shaping future cloud modernization initiatives and procurement frameworks.

The National Endowment for the Arts (NEA) is advancing its IT modernization efforts by deploying a new AI-developed grants management application, targeted for launch in late 2026 or early 2027. This initiative reflects NEA's commitment to accelerating development cycles, optimizing cloud expenditures through FinOps, and enhancing cybersecurity measures as part of its cloud migration strategy.

• NEA's modernization highlights opportunities for vendors specializing in AI application development, cloud services, and cybersecurity solutions tailored to federal grant management.
• Procurement professionals should note the emphasis on rapid deployment and FinOps practices, indicating a focus on cost-effective cloud resource management.
• This project underscores the growing integration of AI in federal IT systems, signaling potential future procurements involving AI-driven applications.
• Organizations supporting cloud migration and cybersecurity enhancements may find strategic entry points aligned with NEA's modernization timeline.

SAP National Security Services (SAP NS2) has received provisional FedRAMP+ Impact Level 5 (IL5) authorization from the Defense Information Systems Agency (DISA) to deploy its SAP S/4HANA Cloud Private Edition and SAP Business Technology Platform within a secure cloud environment tailored for Department of War (DOW) agencies. This authorization enables defense organizations to operate mission-critical ERP workloads in a compliant, high-assurance cloud environment, supporting digital transformation and cloud modernization efforts within the Department of Defense (DoD).

• Why this matters: The IL5 authorization reduces compliance burdens for defense contractors and agencies by establishing a control inheritance model, streamlining ERP migration and architecture planning.
• Contractors and system integrators should prioritize early integration of IL5 compliance requirements into solution design and delivery models.
• Procurement professionals can leverage this authorization to accelerate acquisition of secure cloud ERP solutions aligned with DoD security mandates.
• Organizations supporting DoD digital modernization should evaluate SAP NS2’s FedRAMP+ IL5 environment as a validated platform for sensitive and mission-critical workloads.

The Government Accountability Office (GAO) has identified persistent workforce shortages, particularly in cloud computing expertise and procurement skills, as a key barrier hindering federal agencies' adoption of cloud technologies. This challenge is compounded by the closure of the General Services Administration's (GSA) 18F digital consulting office, which previously provided critical support for cloud workforce development and procurement processes. Agencies continue to face difficulties competing with the private sector to attract and retain qualified cloud professionals, impacting their ability to modernize IT infrastructure effectively.

• Why this matters: Procurement professionals should anticipate ongoing challenges in sourcing vendors and skilled personnel capable of supporting cloud migration and management within federal agencies.
• Agencies may need to adjust acquisition strategies to include workforce development components or partner with vendors offering comprehensive training and support services.
• The absence of GSA's 18F office signals a gap in centralized cloud procurement expertise, increasing the importance of internal capacity building and external consulting partnerships.
• Contractors specializing in cloud services and workforce training may find increased opportunities to assist agencies struggling with cloud adoption due to talent shortages.

The U.S. Coast Guard has initiated a comprehensive Digital Transformation Strategy aimed at automating repetitive tasks, improving data accessibility, and equipping its workforce with advanced digital tools to enhance operational efficiency. Central to this strategy are projects like the Coastal Sentinel maritime surveillance system and the creation of a software development "yard" designed to accelerate delivery of new capabilities. These efforts align with the broader Force Design 2028 modernization plan and signal significant procurement opportunities for contractors specializing in cloud computing, artificial intelligence, data analytics, and low-code software development platforms.

• Why this matters: Procurement professionals should anticipate increased demand for cloud-based solutions, AI integration, and agile software development services within the Coast Guard.
• The establishment of a software development "yard" indicates a shift toward more iterative, rapid acquisition and deployment models.
• Contractors with expertise in maritime surveillance technologies and digital modernization are well-positioned to engage with upcoming solicitations.
• This strategy reflects a broader federal trend toward digital transformation in operational environments, emphasizing automation and data-driven decision-making.

The Department of Defense has issued a class deviation requiring updated contract clauses for solicitations conducted outside the United States, effective immediately, impacting contractors engaged in international government work. Concurrently, the Small Business Administration and General Services Administration are implementing reforms to prioritize American-made products and to eliminate racial discrimination within the 8(a) Business Development Program, signaling significant policy shifts for small business contractors. Additionally, the General Services Administration is actively seeking stakeholder feedback on safeguarding data in artificial intelligence systems, accompanied by multiple webinars and training sessions designed to support government contractors in compliance and acquisition strategies.

• Why this matters: Contractors working internationally must incorporate the new DoD contract clauses immediately to remain compliant with federal requirements.
• Small businesses participating in the 8(a) program should prepare for changes emphasizing domestic sourcing and nondiscrimination policies, which may affect eligibility and procurement approaches.
• The GSA's solicitation of input on AI data protection indicates forthcoming regulatory or contractual requirements, presenting opportunities for contractors specializing in AI security.
• Procurement professionals should leverage upcoming training and webinars to stay current on evolving acquisition policies and compliance obligations.

The White House has issued executive orders directing federal agencies to accelerate the adoption of post-quantum cryptography (PQC) standards to protect government data and infrastructure against emerging quantum computing threats. The Office of Management and Budget (OMB) mandates agencies to inventory cryptographic systems, prioritize legacy and high-value assets, and submit detailed PQC migration plans within 120 days. Full migration targets are set for 2030 for key establishment and 2031 for digital signatures, with procurement rule changes requiring contractors to comply with NIST PQC standards by the end of 2030. This initiative involves an estimated $7.1 billion investment over 10 years and emphasizes automation, crypto-agility, and third-party coordination. The Federal Acquisition Regulatory Council is tasked with proposing supplier compliance rules within 180 days, extending PQC requirements to federal contractors and creating significant procurement opportunities for vendors specializing in quantum-resistant cryptographic solutions and cybersecurity modernization.

• Why this matters: Federal agencies and contractors must prepare for mandatory PQC compliance, impacting procurement strategies, contract requirements, and cybersecurity investments.
• Agencies should prioritize legacy system modernization and leverage automation tools to manage cryptographic assets effectively.
• Vendors offering PQC-compliant software and services will find expanding opportunities as agencies implement migration plans.
• Smaller contractors should assess resource needs to meet compliance deadlines and participate in upcoming procurement solicitations aligned with NIST PQC standards.

Vannevar and Swimlane, in partnership with Knox Systems, have achieved FedRAMP High Authorization, enabling federal agencies to deploy their advanced AI-driven security and homeland mission systems within highly secure cloud environments. This authorization facilitates compliance with stringent federal cybersecurity standards, accelerating adoption of explainable and auditable AI automation solutions for homeland security, law enforcement, and federal cybersecurity operations. Knox Systems provides the managed federal cloud infrastructure that supports these capabilities and streamlines FedRAMP compliance.

• Why this matters: FedRAMP High Authorization is critical for vendors targeting sensitive federal missions, particularly within the Department of Homeland Security and related agencies requiring elevated security controls.
• Procurement professionals should note the growing emphasis on AI-powered security automation and mission systems that meet FedRAMP High standards, signaling increased demand for compliant cloud service partnerships.
• Contractors can leverage this development to position AI-driven cybersecurity and homeland security solutions for federal procurements requiring high-impact, secure cloud deployments.
• Organizations interested in federal AI and cybersecurity opportunities should consider partnerships with FedRAMP-authorized cloud providers like Knox Systems to meet compliance and operational requirements.