The Village of Orland Park, Illinois, held a FY27 budget workshop on November 10, 2026 (the meeting title is dated November 9). The proposed budget totals about $270 million across village funds, including $109 million in proposed capital appropriations; the presentation also cited a $64.25 million capital improvement program. The proposal keeps the village property-tax levy flat, introduces no new village taxes, projects general-fund reserves at 42.82% of expenditures, and continues an initiative to reduce planned debt exposure. Trustees discussed the proposed 15 full-time positions and emphasized that added staffing and technology investments should produce measurable service and productivity improvements. Final budget adoption was scheduled for December 21; no budget adoption or contract award occurred at this workshop.
Capital and procurement discussions included about $17 million in roadway and transportation projects, a roughly $23 million 143rd Street project supported by about $20 million in outside commitments, and proposed water and sewer capital work. The Parks and Recreation Department said it was preparing a bid for 12 lighted pickleball courts and reviewing RFPs for a Centennial Park splash pad; it also proposed $500,000 for athletic-field improvements. Emergency Management said it had shifted from renting to purchasing vehicle barriers. Other items included planned IT infrastructure and cloud transitions, evaluation of mobile-friendly recreation software, and facility assessments and planning studies. Trustees discussed pursuing state and federal funding and developing a future cost-recovery policy for recreation services. The only clear vote recorded was to adjourn.
📋
Contracting Vehicles
🌐
Digital Infrastructure
💻
Information Technology
WidePoint reported 27% year-over-year revenue growth and a $209 million backlog for Q3 2026, while its two-cent-per-share loss missed expectations. Its federal pipeline includes DHS’s CWMS 3.0 procurement, where DHS requested revised proposals after GAO sustained a protest, and ongoing CWMS 2.0/2.5 bridge work that generated $33.7 million in Q3 task orders. NASA’s SEWP VI ordering period opened November 1, 2026; WidePoint is preparing to respond to RFQs. The company also cited an anticipated Census 2030 RFP in Q4 2026 and a potential subcontract through CDW related to the LA28 Games.
CWMS 3.0 remains a live competition, while CWMS 2.0/2.5 task orders provide near-term work; the CWMS 2.5 vehicle is expected to run through approximately February 2027, and task orders may extend beyond that period.
Federal IT suppliers can pursue opportunities through SEWP VI’s open ordering period. WidePoint’s stated preparation to respond to RFQs signals active competition for orders on the vehicle.
Companies pursuing Census 2030 work can factor the anticipated Q4 2026 RFP into their pipeline planning; the signal provides no specific release or proposal deadline.
WidePoint’s reported backlog and revenue growth provide context on its business position, while the missed EPS view and pending CWMS 3.0 decision underscore execution and competition risks. A potential CDW subcontract for LA28 is a separate, non-federal opportunity.
DARPA’s Biological Technologies Office (BTO) will host a virtual Industry Day on December 9, 2026, for the upcoming Laguna Program Solicitation. The response/registration deadline is December 2, 2026—20 days from November 12—and DARPA anticipates publishing a draft solicitation on SAM.gov. Contractors interested in the opportunity can use the event to learn more about the solicitation and should complete the required response or registration by the deadline.
Companies should review SAM.gov for the anticipated draft solicitation and use it to assess the opportunity and prepare questions for the Industry Day.
Key deadline: Submit the response or registration by December 2, 2026, to participate in the December 9 virtual event.
🔒
Cybersecurity
✅
Regulatory Compliance
💻
Information Technology
Fortreum made its annual-subscription VDR/VER service, powered by the Kovr platform, generally available to help FedRAMP-certified cloud service providers evaluate, remediate, and report vulnerabilities under new FedRAMP requirements. The requirements become mandatory on December 7, 2026, in 25 days, with a grace period through March 7, 2027. The launch creates near-term demand for vulnerability assessment, compliance automation, and implementation support among CSPs and the contractors that serve them.
FedRAMP-certified CSPs must address the new vulnerability evaluation, remediation, and reporting requirements; the stated grace period runs through March 7, 2027.
Fortreum’s annual-subscription offering combines the Kovr platform with onboarding and professional services; pricing was not stated.
Contractors serving FedRAMP CSPs can assess whether they can provide vulnerability evaluation, remediation, reporting, or implementation support to meet customer needs before the deadline.
📜
Policy
🔒
Cybersecurity
✅
Regulatory Compliance
🛡️
Defense & Military
💻
Information Technology
On November 11, 2026, the House passed seven small-business bills, including measures to expand SBA cybersecurity and CMMC information for small businesses, establish a resource portal connecting businesses with U.S. manufacturers and suppliers, and strengthen SBA support and reporting for veteran-owned businesses. The bills still require Senate action; none announces a contract award, procurement funding, or a new CMMC obligation. The signals report H.R. 10238 passed, although the supplied introduced-version text shows committee referral and does not independently confirm that status.
For small businesses pursuing federal prime contracts or subcontracts, H.R. 10238 would direct SBA to coordinate cybersecurity resources and CMMC information with CISA and other agencies. It would expand outreach, not create new compliance requirements.
If enacted, the Reshoring American Manufacturing Act (H.R. 9718) would codify an SBA resource portal for four years, potentially increasing visibility for U.S. manufacturers, producers, and suppliers; it does not create a solicitation or guarantee business.
The veterans-business measure would require SBA’s Office of Veterans Business Development to establish compliance procedures within 60 days of enactment and improve reporting to Congress. Companies should distinguish these proposed changes from currently effective requirements while the bills await Senate action.
🔒
Cybersecurity
✅
Regulatory Compliance
💻
Information Technology
CISA’s Binding Operational Directive 26-04, issued June 10, 2026, requires covered civilian federal agencies to prioritize software vulnerability remediation according to risk, with remediation due within three days for the highest-risk tier. Federal contractors and critical-infrastructure suppliers are not directly subject to the directive, but agencies may set similar expectations through contracts and security programs. Procurement teams and contractors should assess whether their tools and processes can track exposure continuously and produce auditable evidence that remediation deadlines are met.
Agencies must align vulnerability remediation with CISA’s risk tiers; the highest-risk vulnerabilities carry a three-day remediation deadline.
Contractors should review applicable contract and security-program terms to determine whether comparable remediation timelines or evidence requirements apply to their work.
Organizations supporting federal agencies can evaluate whether their vulnerability-management processes provide continuous exposure tracking and auditable remediation records.
🔒
Cybersecurity
📋
Contracting Vehicles
🛡️
Defense & Military
💻
Information Technology
Parsons reported strong third-quarter 2026 performance and said it is shifting its Federal Solutions business toward higher-margin hardware and software while reducing lower-margin services. The company cited 26 Other Transaction Agreements (OTAs), a $1.6 billion OTA award baseline, and a largely funded backlog spanning cyber, counter-UAS, electronic warfare, and space and missile defense. For procurement professionals and contractors, these figures point to potential federal work as technology efforts move from development and prototyping toward production and deployment.
Parsons’ OTA portfolio covers multiple defense technology areas; contractors with relevant capabilities can assess where their offerings may complement these efforts.
The largely funded backlog may indicate work with a nearer-term path to revenue, though the signal does not identify specific agencies, solicitations, or production-transition dates.
Companies pursuing federal work should account for Parsons’ stated shift toward hardware and software and track the production transitions and OTA opportunities identified in the signal.
🔒
Cybersecurity
✅
Regulatory Compliance
🛡️
Defense & Military
💻
Information Technology
On November 12, 2026, inDirectIT appointed Alexy Johnson, a former CMMC Level 2 lead assessor and retired U.S. Air Force veteran, as Director of Compliance Services. The appointment reflects continued demand for CMMC readiness and NIST-aligned security support among defense contractors. Although the Pentagon suspended the planned second phase of CMMC in July, the signal states that applicable self-assessment requirements and existing protections for controlled unclassified information remain in effect.
Defense contractors should distinguish the suspended second phase from requirements that remain applicable to their organizations, including relevant self-assessments and protections for sensitive information.
Johnson’s assessor experience may be relevant to contractors seeking support to evaluate whether security controls operate effectively, as well as whether they are documented.
inDirectIT’s appointment indicates ongoing commercial demand for CMMC readiness and compliance services; its media contact is media@indirectit.com.
🔒
Cybersecurity
🛡️
Defense & Military
💻
Information Technology
Yahoo Finance profile pages describe CACI International Inc. as a U.S.-based government contractor serving national security, defense, intelligence, and federal civilian customers, with capabilities in secure IT, cyber, electronic warfare, space, and mission engineering. The duplicate profiles provide corporate and market context only: they identify no solicitation, contract award, value, procurement date, agency requirement, or contracting contact.
Procurement teams can use the profiles as high-level context on CACI’s stated service areas, but they do not establish an active opportunity or a specific agency demand.
For contractors assessing the market, the described capabilities point to CACI’s presence across defense and federal IT mission areas; the signals provide no basis for determining a contract vehicle, teaming arrangement, or competitive procurement.
🔒
Cybersecurity
✅
Regulatory Compliance
🛡️
Defense & Military
💻
Information Technology
On November 3, 2026, ILC Dover LP and ILC Astrospace LLC agreed to a $13 million settlement resolving allegations that they failed to meet required cybersecurity controls while performing federal contracts supporting the Army, Missile Defense Agency, and NASA. The settlement includes $6.5 million designated as restitution; neither company admitted liability. The case underscores that inaccurate cybersecurity assessments and inadequate oversight of third-party cloud providers can create False Claims Act and financial exposure even when no successful cyberattack or data theft occurs.
Federal contractors should verify that cybersecurity controls required by their contracts are implemented and that assessments accurately reflect their systems and practices.
Companies using third-party cloud providers should assess and oversee those providers’ security in relation to government contract obligations.
The settlement demonstrates that alleged cybersecurity deficiencies can have significant financial consequences independently of a successful breach, making cybersecurity representations and evidence relevant to contract and compliance management.
🏛️
Physical Infrastructure
🏗️
Construction & Infrastructure
Cochise County Board of Supervisors Public Works/Solid Waste work session, November 12, 2026: Staff provided quarterly updates on highway maintenance and solid-waste operations. Road work included grading, right-of-way mowing, striping, cattle-guard cleaning and replacement, and storm repairs. Staff estimated a new cattle guard costs about $20,000 and described culverts as costly. Planned projects include hot-mix work and a 3.8-mile chip-seal project on Taylor Road, concrete work on Dono Trail, and repairs to a retaining wall in Bisbee, for which a quote is pending. The Davis Road Milepost 5 project involving ADOT was expected to complete its bid process in November or December, with the contractor selection to follow. Staff also discussed seeking grant or federal support for a possible bridge near the border, but no funding was confirmed.
The department reported receiving a Super 16 dump truck and discussed a road widener, while a motor-grader purchase is on hold as staff compare repairing its transmission, trading it in, or selling it at auction. Staff is considering a county vehicle auction in early 2027; vehicle replacement guidelines were described as 160,000 miles for sheriff’s pursuit vehicles and generally 180,000 miles for other county vehicles, subject to case-by-case review. Solid Waste reported approximately $91,415 in recycling revenue for the quarter and strong landfill compaction performance, which staff said helps preserve capacity and limit tipping-fee increases. Staff is also awaiting production and material testing from a proposed Douglas asphalt plant as a potential local source of hot mix. No motions, votes, or procurement approvals were identified; this was a discussion-only work session.
