A recent study by Merrill Research, commissioned by CyberSheath, reveals that defense contractors have reported their highest self-assessed cybersecurity scores under the CMMC framework in five years. However, confidence in the accuracy of these self-reported scores has declined sharply by 24 points, highlighting concerns about the reliability of self-attestation in cybersecurity compliance within the defense industrial base. This gap underscores the need for verifiable assurance and effective implementation of cybersecurity measures to ensure operational security aligns with reported compliance. These findings will be a key topic at the upcoming CMMC CON 2026 conference, offering procurement professionals and contractors critical insights into evolving cybersecurity requirements and verification practices.
Why this matters: The declining confidence in self-reported cybersecurity scores signals potential risks in relying solely on contractor attestations, emphasizing the importance of objective verification in DoD procurement processes.
Procurement officials should anticipate increased scrutiny and possible adjustments in CMMC compliance verification, impacting contract eligibility and risk assessments.
Contractors supporting defense programs should prioritize enhancing verifiable cybersecurity measures and prepare for evolving CMMC reforms that balance ease of compliance with accountability.
Engagement at forums like CMMC CON 2026 can provide valuable guidance on upcoming changes and best practices for cybersecurity compliance in defense contracting.
The most striking finding this year is the widening gap between reported progress and confidence in that progress. Contractors are reporting higher SPRS scores and greater adoption of important cybersecurity capabilities, but confidence in the accuracy of those scores has fallen substantially. That tension suggests that measuring progress requires looking beyond the reported score itself.
— Dr. David M. Schneer, CEO of Merrill Research
Most contractors are manufacturers, engineers, and specialized businesses whose mission is supporting the warfighter, not becoming cybersecurity experts. That is exactly why CMMC reform should make effective cybersecurity easier to consume while preserving objective, verifiable assurance that the protections are actually in place and working. However CMMC evolves, meaningful verification and accountability should remain central to ensuring that reported compliance reflects operational cybersecurity.
The Defense Counterintelligence and Security Agency (DCSA) awarded ASRC Research and Technology Solutions a single-award indefinite-delivery/indefinite-quantity (IDIQ) contract valued up to $494.4 million to support its Case Processing Operations Center over a five-year period. The contract includes a $20 million minimum guarantee and covers personnel security and federal background investigations. Initial work will be performed primarily in Boyers, Pennsylvania, and St. Louis, Missouri, with the first task order obligated at $21.8 million as of August 20, 2026.
Why this matters: This contract represents a significant opportunity for contractors specializing in security clearance processing and federal background investigations, highlighting DCSA's ongoing investment in personnel vetting operations.
The single-award IDIQ structure provides ASRC with a stable workload and potential for multiple task orders, signaling sustained demand in this niche government security service.
Procurement professionals should note the geographic focus on Pennsylvania and Missouri, which may influence subcontracting and staffing strategies.
Companies offering complementary services in case management, investigative support, or security technology may find partnership or subcontracting opportunities under this contract.
The U.S. Army awarded Everforth ECS a $147.8 million indefinite-delivery/indefinite-quantity contract in August 2026 to manage, maintain, transition, and retire the SUNet legacy secure unclassified network system through September 2029. This award continues the Army's investment in sustaining and modernizing its legacy network infrastructure, building on prior contracts awarded to Everforth ECS since 2019. The contract is managed by the Army Contracting Command at Aberdeen Proving Ground, Maryland, reflecting ongoing federal efforts to ensure secure and reliable network operations within Army facilities.
Why this matters: Procurement professionals should note the Army's sustained commitment to legacy network system management, indicating ongoing opportunities in network infrastructure support and transition services.
The contract's indefinite-delivery/indefinite-quantity structure allows for flexible task orders, requiring contractors to maintain readiness for varied scopes of work.
Businesses specializing in secure network management and legacy system transitions can leverage this contract as a benchmark for similar federal opportunities.
The geographic focus on Aberdeen Proving Ground and Fairfax, Virginia, highlights key operational hubs for network services within the Army's infrastructure.
🔒
Cybersecurity
✅
Regulatory Compliance
🛡️
Defense & Military
💻
Information Technology
The Department of Defense (DoD) has suspended the implementation of Cybersecurity Maturity Model Certification (CMMC) Phase II requirements to conduct a comprehensive review of the program, responding to industry feedback and concerns about compliance complexity and inconsistent Controlled Unclassified Information (CUI) marking. This pause provides an opportunity for defense contractors, especially small and mid-sized businesses, to influence reforms aimed at simplifying cybersecurity requirements while maintaining robust protections. The CMMC Reform Task Force is actively evaluating recommendations, including clarifying CUI processes, focusing on high-value controls, and balancing assurance with manageable compliance burdens. Meanwhile, CMMC Level 1 requirements remain mandatory for all federal contractors handling Federal Contract Information (FCI), with enforcement continuing under existing procurement rules.
Why this matters: Procurement professionals should anticipate potential changes to cybersecurity compliance frameworks that could affect contract eligibility and bidding strategies.
Contractors must maintain Level 1 self-assessments and ensure subcontractor compliance to meet current mandatory standards.
The suspension of third-party assessments under Phase II introduces uncertainty in verification processes, prompting contractors to adjust compliance documentation and risk management approaches.
Small and non-traditional defense contractors may benefit from forthcoming graduated compliance paths and clearer guidance on CUI marking, reducing economic and administrative burdens.
The Nigerian Aviation Ministry disbursed over ₦358 million as a mobilization payment to Adroit Landstyle Ltd for the procurement and installation of passenger security screening systems at Lagos and Abuja international airports. This payment was made despite the supporting conditional Advance Payment Guarantee having expired more than a year prior, raising concerns about adherence to the Public Procurement Act and financial risk management in critical airport security contracts.
Procurement professionals should note the importance of verifying the validity of financial guarantees before releasing mobilization payments to mitigate risks of fund loss or contract non-performance.
This case underscores the need for stringent compliance with procurement regulations and enhanced oversight mechanisms in high-value security equipment contracts.
Contractors and insurers involved in government procurements must ensure timely renewal and validity of guarantees to maintain contract integrity and payment security.
Agencies managing airport security procurements may need to review their contract administration processes to prevent similar compliance gaps and safeguard public funds.
The Caddo Parish Commission held a joint meeting of the Appropriations and Economic Development Committees on August 20, 2026. A significant portion of the meeting was dedicated to a presentation by Alicia Mingo, founder of Bury Board, who requested a $65,000 appropriation to support maternal health initiatives, including doula hospital integration and community health worker training. The request was noted as a late application, missing the July 20th deadline, but committee members acknowledged the urgency and importance of maternal health and indicated they would consider the request despite procedural concerns. Additionally, the committees reviewed the 2027 appropriation packets, totaling 83 applications, and discussed the review process and timeline, with a submission deadline set for September 3rd. The meeting emphasized the importance of funding NGOs to enhance community quality of life, with a budget consideration of approximately $500,000 from oil and gas and gaming revenues for economic development projects.
🏛️
Physical Infrastructure
🏗️
Construction & Infrastructure
The City of Lawrence, Indiana Economic Redevelopment Commission held a meeting on August 20, 2026, where they approved updated minutes and claims for the previous month. A key procurement-related discussion involved a proposed change order for the Pendleton Pike project due to extreme summer heat causing schedule delays. The commission voted to approve the change order adjusting the mobilization and completion dates. There was also discussion about a potential $5,000 cost increase to replace landscaping with cobblestone in certain areas, but the commission decided not to pursue that change to avoid additional expenses. The executive director provided updates on potential housing infill projects and possible site-specific tax increment financing (TIF) requests related to new apartment developments, indicating ongoing planning and future procurement considerations. No other contract awards or vendor selections were made during the meeting.
The U.S. Air Force Research Laboratory (AFRL) awarded Trusted Space LLC a $14.83 million cost-plus-fixed-fee contract on August 21, 2026, to develop and demonstrate autonomy software prototypes for multi-agent autonomous space systems. This contract encompasses research, development, software maturation, testing, and on-orbit demonstration activities, with work conducted in Leesburg, Virginia, and at Kirtland Air Force Base, New Mexico, through August 2031. This award reflects AFRL's strategic focus on advancing trusted, safe, and resilient autonomous satellite technologies, signaling ongoing investment in space autonomy capabilities.
Why this matters: Procurement professionals should note the long-term nature of this contract and AFRL's emphasis on autonomous space systems, indicating sustained opportunities in space software development and testing.
Contractors specializing in autonomy software, multi-agent systems, and space technology development can leverage this contract as a benchmark for future proposals.
The geographic locations of work highlight potential regional hubs for space technology development and collaboration.
This contract underscores the Department of Defense's commitment to enhancing space system resilience and autonomy, which may influence related procurement priorities and funding allocations.
💰
Grants & Funding
💼
Professional Services
🚨
Public Safety
The City of Hobart held a Hobart Workshop Committee meeting on August 17, 2026, primarily focusing on policy review and event funding. A key agenda item was the review and clarification of the election caretaker period policy, including restrictions on committee meetings and motions during the caretaker period. The committee unanimously passed the updated policy with minor amendments. Additionally, the meeting included a detailed discussion on the City Heritage Strategy, which aims to guide heritage storytelling, asset management, and development in Hobart. While no direct procurement decisions were made regarding this strategy, it was noted that implementation and funding decisions would be considered by the incoming council after community consultation. The meeting also covered multi-year funding agreements for major city events such as Business Events Tasmania, the Australian Wooden Boat Festival, Hobart International, the Sydney to Hobart Yacht Race, and the Cananani Mountain Run. These agreements, spanning three years (or six years for biennial events), were supported to provide certainty and reduce administrative burdens, with discussions on return on investment and event promotion. No new contracts or vendor selections were announced, but the funding allocations and multi-year agreements represent significant procurement-related commitments by the council.
The City of Prescott Board of Adjustment held a public hearing on August 20, 2026, addressing two main agenda items related to property and land use variances. The first item was a variance request (V26-008) for a reduction in front and corner side setbacks to allow construction of a new covered front porch at 444 Lincoln Avenue. After reviewing the site plan, neighborhood consistency, and public support, the board unanimously approved the variance. The second item involved a conditional use permit for Exceptional Healthcare Hospital to include ambulance and helipad services. The board discussed incomplete building permits and engineering approvals related to the helipad construction. Due to delays caused by the retirement of the project's engineer, the board voted unanimously to defer the permit revocation decision to the September 17, 2026 meeting, allowing time for the applicant to meet all conditions. Public comments raised concerns about helicopter flight paths, landscaping maintenance, and property damage during construction, but these issues were noted as outside the board's jurisdiction. The board emphasized compliance with city codes and the need for the applicant to finalize engineering and permitting requirements before proceeding.
The Pasco Metropolitan Planning Organization (MPO) held a meeting on August 20, 2026, focusing on transportation planning, infrastructure resiliency, and project funding. Key procurement-related discussions included approval of a $3,037,370 transportation disadvantage planning grant agreement with the Florida Commission for the Transportation Disadvantaged, and presentation of the final transportation resiliency improvement plan developed in collaboration with Vulkar, Inc., which outlined over 100 projects with an estimated cost of $38 million. The plan prioritized projects based on vulnerability and asset criticality indices and included recommendations for stormwater management, flood mitigation, and green infrastructure. The MPO also reviewed the 2026 Transportation Regional Incentive Program (TRIP) project list, which requires a minimum 50% local match, and discussed the fiscal year 2027-2031 Transportation Improvement Program (TIP) roll forward amendment involving seven projects, including intersection improvements and transit capital purchases. Additionally, the meeting covered the proposed Tampa Bay Regional MPO merger workshop scheduled for September 1, 2026, and updates on wayfinding signage design standards for regional trails. No final votes were taken on procurement items during this session, but several action items were deferred to a special meeting. The meeting also welcomed a new principal planner to the MPO staff.
