Hitachi Vantara Secures VSP One Certification

The U.S. Department of Justice reached a settlement with Honeywell Aerospace valued at over $2 million over allegations that cybersecurity requirements were not met on a network handling DoD information during April 2020 to December 2023. The reported case shows that defense contractors can face cybersecurity liability for inaccurate compliance certifications even when no breach is reported. The article also says CMMC self-assessment requirements were delayed for at least 60 days in July 2026; it does not provide a revised effective date.

• Contractors should validate NIST- and DFARS-related representations, SPRS scores, remediation disclosures, and approval controls across all relevant networks, as identified in the signal.
• Procurement and compliance teams can use the settlement as a reason to ensure cybersecurity assertions are reviewed and supported by records before they are submitted to the government.
• The reported CMMC delay occurred in July 2026. Because the signal gives no revised effective date, it should not be treated as a current or future deadline.

Sources

• Cybersecurity liability doesn’t necessarily start with a breach - Federal News Network · Federal News Network · Oct 23

The Department of the Air Force plans to hold an Automated Classification Management Environment (ACME) Industry Day on November 9, 2026, in the National Capital Region. Attendance is limited to three representatives per vendor. Vendors that responded to the related RFI and expressed interest in Function 1: Integrator are expected to receive separate invitations for one-on-one meetings on November 9–10. As of October 23, the venue and registration instructions have not been provided.

• Key deadline: The Industry Day is scheduled for November 9, 2026, 17 days from October 23; one-on-one meetings are scheduled for November 9–10.
• Vendors that responded to the RFI and identified interest in Function 1: Integrator are the stated audience for separate meeting invitations; those vendors should plan attendance within the three-person limit.
• The event offers eligible integrators an opportunity to engage with the Air Force about ACME, but the signal does not announce an award or provide contract value, venue, or registration details.

Sources

• Air Force ACME Industry Day with separate one-on-one meetings for Function 1 integrators · SAM · Oct 23

On October 20, 2026, a bipartisan group of 17 former national security officials filed a brief urging the full D.C. Circuit to rehear Anthropic’s challenge to the Department of Defense’s supply-chain-risk designation. The case could shape how the Pentagon designates suppliers and affect agency and contractor decisions about using Anthropic’s Claude models. The signals identify no new solicitation, award, or contract value.

• Agencies and contractors considering Claude should evaluate their reliance on the models in light of the unresolved designation and related litigation.
• Contractors that use or propose Anthropic technology may want to assess how supplier restrictions could affect their defense work and technology sourcing plans.
• The filing is a request for rehearing, not a new procurement action; stakeholders can track the rehearing request and litigation for potential effects on supplier eligibility and federal AI procurement.

Sources

• Former National Security Officials Warn Anthropic Ruling Threatens Federal AI Procurement – MeriTalk · MeriTalk · Oct 23
• Former U.S. officials urge D.C. Circuit to reconsider decision in Anthropic-Pentagon fight | DefenseScoop · DefenseScoop · Oct 21

Representatives Pat Harrigan and George Whitesides introduced bipartisan H.R. 10873, the AI Cyber Defense Act, on October 22, 2026; the bill was referred to the House Committee on Science, Space, and Technology. If enacted, it would direct NIST to work with AI companies and critical-infrastructure operators on voluntary guidance for detecting and preventing AI model distillation attacks and using AI for cyber defense, and to establish a stakeholder roundtable. The proposal creates no current solicitation, contract funding, or mandatory compliance requirement, but could provide AI and cybersecurity firms an avenue to contribute expertise as federal guidance is developed.

• Companies working on AI security or critical-infrastructure cyber defense can track the bill’s consideration by the House committee and prepare relevant technical input for stakeholder engagement if the bill advances.
• The proposed work would focus on voluntary guidance, not a procurement award or mandatory contractor requirement; firms should not treat it as an active bid opportunity.
• If enacted, NIST would have 180 days to begin the work, creating a potential channel for engagement with government and industry on AI model protection.

Sources

• Exclusive: bipartisan bill would develop federal guidance for distillation attacks, convene industry on defensive cyber | CyberScoop · CyberScoop · Oct 22
• Representative Pat Harrigan introduces H.R. 10873: AI Cyber Defense Act | Quiver Quantitative · Quiver Quantitative · Oct 23
• NIST to develop standards to prevent AI model theft under Harrigan bill - Ripon Advance · Ripon Advance · Oct 23
• Bipartisan Bill Would Task NIST With AI Cyber Defense Standards – MeriTalk · MeriTalk · Oct 23
• Congressman Pat Harrigan Introduces Legislation to Protect American Innovation and Strengthen Cyber Defenses | Congressman Pat Harrigan · Harrigan House · Oct 22

The U.S. Army Corps of Engineers Jacksonville District scheduled an industry day for November 18, 2026, at Port of Tampa Cruise Terminal 6, with virtual attendance available, to discuss Contract 1 of the Tampa Harbor Deepening Project. The planned work includes an estimated 4.4 million cubic yards of dredging and channel widening; the event will include open Q&A and one-on-one meetings for industry feedback ahead of a planned FY 2028 solicitation. The notice is for planning only and will not result in an award.

• The project has a stated construction magnitude of $100 million–$500 million. The planned scope includes deepening navigation channels and basins to 41–49 feet MLLW and widening Port Sutton Channel, Port Sutton Turning Basin, and East Bay Channel.
• The industry day is November 18, 2026 (26 days away). Dredging and heavy civil construction firms can use the Q&A and one-on-one sessions to provide feedback on the planned scope; the notice does not identify a proposal deadline or award action.
• The extracted NAICS code is 237990 (Other Heavy and Civil Engineering Construction). Interested firms can contact Project Manager Manny Vianzon using the listed email or phone number for event-related inquiries.

Sources

• USACE Tampa Harbor Deepening Project Contract 1 industry day for dredging and channel widening · SAM · Oct 23

NIST is developing five volumes of Control Overlays for Super Intelligence Systems (COSIS) guidance that adapt existing SP 800-53 controls for predictive, generative, and agentic AI systems. NIST plans to release the methodology and predictive-systems volumes in fall 2026. For procurement teams and contractors supporting federal AI adoption, the overlays offer forthcoming guidance for aligning security, privacy, and implementation practices with AI-specific controls, subject to agency-specific tailoring.

• Contractors can assess how their existing security and privacy practices map to the planned controls for predictive, generative, and agentic systems.
• Procurement teams may use the overlays as a reference when shaping AI security requirements and evaluating contractor approaches; the signal describes guidance in development, not a new mandatory requirement.
• Because agencies may tailor the controls, contractors should account for agency-specific implementation when planning federal AI work.

Sources

• NIST Developing Tailored Cybersecurity Controls for AI Systems | GovCIO Media & Research · GovCIO Media & Research · Oct 23

The Department of Defense issued acquisition guidance on October 20, 2026, requiring AI procurements to address federal principles for factuality, neutrality, and transparency. DoD solicitations and contract terms may specify documentation demonstrating how an AI offering addresses those principles; the evidence expected may differ according to a contractor’s role in the software supply chain and its access to the underlying model developer. AI suppliers and prospective defense contractors should account for these documentation expectations when preparing bids and describing their products’ capabilities and supply-chain relationships.

• DoD AI bidders should be prepared for solicitations and contract terms to request evidence supporting factuality, neutrality, and transparency.
• Documentation expectations may vary by supply-chain position and access to model-development information, making it important for prime contractors to understand what evidence subcontractors and model providers can supply.
• Companies developing or integrating AI for defense customers can review how their existing product documentation addresses the principles identified in the guidance.

Sources

• Pentagon issues guidance on AI procurements to support Trump’s ‘truth-seeking’ and ‘ideological neutrality’ directives | DefenseScoop · DefenseScoop · Oct 23

Carahsoft is making Hyperproof’s governance, risk and compliance automation and continuous-compliance platform—and Nothreat’s threat-detection tools—available to public-sector buyers through its reseller network and existing purchasing channels. Hyperproof is available through NASA SEWP V and NASPO ValuePoint, among other vehicles, and its capabilities support workflows aligned with CMMC, FedRAMP, and NIST control frameworks. The announcements establish additional routes to market for these tools but do not identify a new contract award, solicitation, or contract value.

• Buyers and contractors can explore existing purchasing vehicles, including NASA SEWP V, NASPO ValuePoint, TIPS, OMNIA Partners, E&I Cooperative Services, and The Quilt, rather than treating the announcements as new standalone awards.
• Defense industrial base suppliers and other contractors may evaluate Hyperproof’s compliance automation for managing evidence, controls, and audit readiness across the cited frameworks; the signal describes support for these frameworks, not a new compliance mandate.
• Carahsoft is the purchasing-information contact for Hyperproof: Hyperproof@carahsoft.com or (844) 445-5688.

Sources

• Carahsoft to Offer Nothreat & Hyperproof Tools to Government · ExecutiveBiz · Oct 23
• Hyperproof and Carahsoft Partner to Introduce ModernGRC Solutions Across the Federal and Public Sector - Security Boulevard · Security Boulevard · Oct 21
• Hyperproof and Carahsoft Partner to Introduce Modern GRC Solutions Across the Federal and Public Sector | The Manila Times · The Manila Times · Oct 21

Bronx Community Board 12’s full board meeting was held October 22, 2026 (the recording metadata is dated October 23). Procurement- and budget-related updates included the Bronx Borough President’s reported allocations of $350,000 for mobile media cards and technology for Bronx High School of Hip Hop, $2 million toward a new Lincoln Hospital lab, $1 million for construction of the Green Jobs Center in Fordham, and $121 million across 627 Bronx education projects. The board discussed its budget priorities, including a request to fund the Shoelace Park master plan, estimated at about $150 million, and the city council’s participatory budgeting process, which invites ideas for spending $1 million in the neighborhood; at least one proposed project must be at least $50,000 and located on public property. No new contract award or competitive procurement was identified.

The board approved renewal of the on-premises liquor license for Horse and Jockey at 4277 Katonah Avenue. It also approved a motion to send elected officials a letter inquiring about funding and updates to neighborhood community health profiles, with an additional request to seek support from other community boards. Other discussion included the White Plains Road neighborhood plan and calls for more detailed zoning proposals, along with community outreach and public-service announcements. The meeting also included advocacy and policy updates, but no additional procurement decisions were reported.

Sources

• LIVE | Community Board 12 Meeting, 11/22/26 · BronxNet · Oct 23

On October 23, 2026, the SEC announced its Division of Examinations’ FY 2027 priorities for examinations of more than 34,000 registrants. The priorities include cybersecurity and operational resilience, advanced technologies, private funds and credit, broker-dealer controls, and evolving market infrastructure. The announcement is a regulatory oversight signal, not a solicitation or contract award, but it identifies areas where regulated firms may seek support and where contractors serving them can assess the relevance of their offerings.

• Companies providing cybersecurity, resilience, technology, compliance, or risk-management services to SEC registrants can assess how their capabilities align with the announced examination focus areas.
• Contractors should distinguish these examination priorities from new procurement requirements: the announcement does not identify a contract opportunity or establish a new mandate.
• The SEC’s Division of Examinations is the lead office named in the announcement; the priorities apply to oversight of registrants across several financial-market segments.

Sources

• SEC Announces Fiscal Year 2027 Examination Priorities · StreetInsider · Oct 23