🌐
Digital Infrastructure
✅
Regulatory Compliance
🏥
Healthcare
💻
Information Technology
The Department of Veterans Affairs (VA) has successfully resumed its Electronic Health Record (EHR) modernization rollout in 2026, with recent deployments described as "phenomenal" and "flawless" by VA Secretary Doug Collins. While initial deployment sites continue to face persistent challenges, the VA plans to revisit and resolve these issues as it expands EHR implementation to additional medical facilities throughout the year and beyond. This ongoing modernization effort is part of a large-scale contract initially awarded in May 2018, valued at over $16 billion and projected to reach approximately $37 billion, with Cerner (now Oracle Health) as the prime contractor.
Why this matters: The VA's renewed deployment signals continued investment and opportunity in the federal healthcare IT sector, particularly for contractors specializing in EHR systems and integration.
Procurement professionals should anticipate further solicitations and support contracts related to EHR deployment, maintenance, and issue resolution at VA medical centers nationwide.
Vendors with expertise in healthcare IT modernization, system interoperability, and user training may find increased demand as the VA addresses challenges at initial sites and scales the rollout.
Locations such as the Mann-Grandstaff VA Medical Center in Spokane, Washington, and facilities in North Chicago, Illinois, remain focal points for deployment and remediation efforts, indicating regional procurement activity.
Agencies
Department of Veterans Affairs, Senate Veterans’ Affairs Committee, House Appropriations Subcommittee on Veterans Affairs, Department of Defense
Vendors
Cerner, Oracle Health
Contracts
$10 billion initial, revised to over $16 billion, projected total around $37 billion
The Underminr vulnerability exploits shared Content Delivery Network (CDN) infrastructure to conceal malicious connections behind trusted domains, enabling attackers to bypass Protective DNS and network security policies. This threat affects millions of domains primarily across key US states including California, New York, Virginia, Texas, and Washington, as well as in the UK and Canada. Cybersecurity firms like ADAMnetworks are highlighting the need for enhanced mitigation strategies and monitoring improvements to counter this sophisticated attack vector, which poses significant risks to government contractors and agencies relying on CDN-based security.
Why this matters: Government procurement professionals should prioritize acquiring advanced cybersecurity solutions that detect and mitigate CDN-based evasion techniques like Underminr.
Organizations supporting federal and state agencies in California, New York, Virginia, Texas, and Washington may see increased demand for enhanced Protective DNS and network security services.
Contractors should evaluate their current security posture against this vulnerability and consider integrating AI-driven detection tools as suggested by industry experts.
Cybersecurity vendors specializing in web security and CDN protection, such as ADAMnetworks, are positioned to offer critical capabilities addressing this emerging threat.
BlackBerry Limited has achieved the 2026 FedRAMP Class D (High) re-certification for its AtHoc crisis communications platform, reaffirming compliance with the U.S. federal government's highest cloud security standards for sensitive unclassified data. This certification enables continued deployment of AtHoc across U.S. federal agencies and critical infrastructure operators requiring secure, mission-critical emergency notification and crisis coordination solutions. The re-certification supports growing government demand for resilient, compliant communication platforms and positions BlackBerry as a leading provider in secure government communications.
Why this matters: Federal agencies must use FedRAMP-authorized cloud services for sensitive data, making BlackBerry AtHoc a preferred solution for emergency management and secure communications contracts.
Procurement professionals should note the strengthened eligibility of AtHoc for federal contracts involving high-assurance cloud security requirements.
Contractors specializing in secure software and emergency notification systems can leverage this certification to align offerings with federal procurement priorities.
The re-certification signals ongoing government investment in secure cloud-based crisis management platforms, indicating potential growth in related contract opportunities.
Congressman Andy Biggs has introduced the PROTECT Act to modernize and strengthen oversight of the Department of War's Law Enforcement Support Office (LESO) 1033 program, which transfers surplus military equipment to state and local law enforcement agencies. The legislation aims to improve coordination between federal and state partners, standardize program procedures, and increase transparency through mandated annual training, regular program reviews, and biennial reporting to Congress. This initiative responds to concerns from Arizona stakeholders about coordination challenges and oversight gaps.
The PROTECT Act mandates enhanced oversight mechanisms for the LESO 1033 program, impacting procurement and transfer processes of surplus military equipment.
Procurement professionals should anticipate updated compliance requirements and reporting standards affecting equipment acquisition and distribution.
State and local agencies involved in the program may experience changes in training obligations and procedural standardization.
Vendors and contractors supporting law enforcement equipment programs should evaluate how these legislative changes could influence future procurement opportunities and program administration.
A Virginia man, Sohaib Akhter, was convicted for orchestrating a cyberattack that deleted approximately 96 sensitive federal government databases after his termination from a Washington, D.C.-based software and data hosting company serving over 45 federal agencies. This incident exposed critical vulnerabilities related to insider threats, emphasizing the urgent need for federal agencies and their contractors to strengthen access controls, monitoring, and cybersecurity protocols to protect sensitive data and maintain operational integrity.
Federal procurement professionals should prioritize cybersecurity requirements that address insider threat mitigation, including enhanced identity and access management and continuous monitoring capabilities.
Contractors providing IT and data hosting services to federal agencies must evaluate and reinforce their internal security policies to prevent unauthorized access and data destruction.
Agencies may consider incorporating stricter cybersecurity performance metrics and incident response obligations into future contracts to reduce risks associated with personnel changes.
This case highlights the importance of collaboration between federal oversight bodies, such as FDIC-OIG and DHS, and contractors to ensure compliance with cybersecurity standards and protect sensitive government information.
☁️
Cloud Services
🤖
Artificial Intelligence
💻
Information Technology
The General Services Administration (GSA) is advancing its OneGov initiative by extending and expanding discounted software agreements with leading technology vendors, including Snowflake, Microsoft, Google, and OpenAI, to support federal IT modernization and AI adoption. Since its April 2025 launch, OneGov has generated over $1.15 billion in federal savings by streamlining procurement of AI and cloud data services under the Multiple Award Schedule. The latest OneGov agreement with Snowflake, effective through September 30, 2027, offers federal agencies tiered discounts of up to 50% on compute and storage costs, facilitating cross-agency data sharing and AI infrastructure deployment. Concurrently, the Department of Commerce is investing $100 million in D-Wave Quantum to advance quantum computing technologies, reflecting broader federal efforts to accelerate emerging technology adoption. Congressional representatives are also advocating for increased funding to the Cybersecurity and Infrastructure Security Agency (CISA) to bolster cybersecurity capabilities amid rising AI-driven threats.
Why this matters: Procurement professionals should note the expanded OneGov contracts provide streamlined access to discounted AI and cloud services, reducing acquisition complexity and enabling cost-effective modernization.
Agencies can leverage these agreements to accelerate AI tool deployment and data integration while benefiting from standardized contract terms and pricing transparency.
Vendors should consider the growing federal demand for AI infrastructure and quantum computing solutions as reflected in these contracts and investments.
Organizations supporting federal IT modernization should align strategies with OneGov’s evolving vendor partnerships and the government’s emphasis on cybersecurity enhancements alongside AI adoption.
☁️
Cloud Services
🤖
Artificial Intelligence
💻
Information Technology
The German Federal Ministry for Digitalisation and Transport has awarded a €250 million multi-year contract to a consortium led by Deutsche Telekom's T-Systems, with SAP as a prime technology partner, to develop the "Deutschland-Stack" sovereign AI platform. This initiative aims to establish a secure, sovereign AI cloud infrastructure supporting federal, state, and local government digital services, reinforcing Germany's digital sovereignty objectives. Concurrently, SAP is advancing its cloud migration capabilities through partnerships with Palantir Technologies and acquisitions like Dremio, targeting Q3 2026 milestones to enhance AI and cloud integration. This contract represents a significant opportunity for vendors specializing in AI cloud infrastructure, software, and digital transformation within the German public sector.
Why this matters: Procurement professionals should note the strategic emphasis on sovereign cloud infrastructure, which prioritizes domestic data centers and AI capabilities for government use, signaling increased demand for secure, compliant cloud solutions.
SAP's role as a prime contractor alongside T-Systems highlights the importance of strong partnerships and integrated technology offerings in winning large-scale government digital transformation contracts.
The contract's scale and scope indicate potential downstream subcontracting and technology integration opportunities for AI, cloud migration, and automation service providers.
Organizations should evaluate how evolving sovereign cloud requirements and digital sovereignty policies in Germany may influence future procurement strategies and vendor selection criteria.
🔒
Cybersecurity
🤖
Artificial Intelligence
🛡️
Defense & Military
💻
Information Technology
The Department of Defense (DoD) and federal agencies are intensifying enforcement and support for Cybersecurity Maturity Model Certification (CMMC) compliance across the Defense Industrial Base (DIB) in 2026. This includes the launch of collaborative initiatives like Coalfire's CMMC Partner Assurance Network (CPAN) to streamline supplier compliance, increased reliance on AI-driven compliance tools such as Parapet, and expanded federal events highlighting evolving cybersecurity mandates and risk management strategies. Contractors face growing regulatory complexity with FAR updates, FedRAMP tightening, and diversity requirements, driving adoption of AI to maintain continuous audit readiness and manage subcontractor compliance. Industry leaders emphasize early, expert-led preparation for CMMC audits to avoid disqualification from DoD contracts and to navigate the rigorous evidence-based assessment process effectively.
Why this matters: CMMC compliance is now a critical prerequisite for DoD contracting, affecting approximately 300,000 defense suppliers and shaping procurement eligibility.
Federal contractors should prioritize engagement with certified assessors and leverage AI-enabled compliance solutions to manage increasing regulatory burdens and audit demands.
The CPAN ecosystem offers a vetted network to accelerate compliance timelines and reduce supply chain cybersecurity risks, presenting partnership opportunities for service providers.
Procurement professionals must integrate evolving federal cybersecurity requirements into acquisition planning and contract management to ensure operational resilience and eligibility.
Organizations can gain competitive advantage by transforming compliance from a cost center into a strategic asset through disciplined project management and AI adoption.
The U.S. Marine Corps has awarded Polaris Government and Defense multiple contracts totaling over $196 million to produce and enhance Ultra-Light Tactical Vehicles (ULTVs), including the new MRZR Alpha 6x6 and a High Power variant capable of delivering five kilowatts of exportable power. These vehicles support expeditionary mobility and rapid deployment aligned with the Marine Corps' Force Design 2030 initiative, with ongoing prototype testing and integration of advanced mortar systems. Polaris is also preparing to announce additional international contracts at SOF Week 2026, reflecting growing demand from allied nations such as Norway and Australia.
The ULTV IDIQ contract awarded in Q3 FY2026 enables sustained production and fielding of lightweight, air-transportable tactical vehicles optimized for littoral and dispersed operations.
Procurement professionals should note the emphasis on autonomy-ready platforms and high-power export capabilities, signaling evolving technical requirements for tactical vehicle suppliers.
Contractors specializing in tactical mobility, power systems, and weapons integration have opportunities to engage through subcontracting or future competitive procurements.
The involvement of multiple U.S. and allied military commands highlights expanding international collaboration and export potential in tactical vehicle programs.
🌐
Digital Infrastructure
☁️
Cloud Services
✅
Regulatory Compliance
🏥
Healthcare
💻
Information Technology
The Department of Veterans Affairs (VA) is actively advancing its Electronic Health Record Modernization (EHRM) program with a $4.2 billion budget request for fiscal year 2027, representing a nearly 25% increase from the previous year. This funding aims to accelerate deployment of the Oracle-Cerner EHR system across all VA sites by 2031, enhancing interoperability with community care providers and federal agencies. Despite bipartisan congressional support, the funding bill remains pending Senate action. Employee groups continue to report operational challenges at rollout sites, underscoring the need for sustained funding and technical support to mitigate risks during full deployment.
The multibillion-dollar Oracle-Cerner contract remains central to VA's modernization efforts, with total program costs estimated between $16.1 billion and nearly $50 billion.
Procurement professionals should note the increased budget request signals ongoing contract opportunities for EHR system support, integration, and operational services.
Agencies and contractors involved in healthcare IT modernization should prepare for extended deployment timelines through 2031, with emphasis on interoperability and system stabilization.
Congressional committee engagement indicates potential for continued appropriations scrutiny, requiring proactive communication and compliance with evolving program requirements.
CrowdStrike Holdings Inc. continues to solidify its position as a leading cybersecurity provider for the federal government, leveraging its Falcon platform and AI-enhanced threat detection capabilities. The company maintains critical FedRAMP authorizations and security clearances, enabling ongoing contract renewals and strong revenue growth amid increasing AI-driven cyber threats targeting government networks.
CrowdStrike's FedRAMP-authorized solutions and AI integration make it a preferred vendor for federal cybersecurity procurements
Procurement professionals should consider CrowdStrike's offerings when addressing evolving AI-related cyber risks
The sustained government demand indicates opportunities for contractors specializing in advanced cybersecurity technologies
Agencies may prioritize vendors with proven AI threat detection and federal compliance credentials in upcoming solicitations
