HUBZone Prime · O-TTPS Held Directly · Est. 2005
Whatever the requirement — products, cyber, cloud, AI, training, staffing — you get five prime and JV vehicle paths (plus Army ITES-3S subcontract access), a verified supply chain, and one team accountable for the outcome.
prime awards documented across defense, health, homeland security, and civilian agencies
training courses live in the catalog right now, across 154 technology domains
quote turnaround target across all active contract paths
What changed, why it matters to federal buyers, and how to act on it.
DoDM 8140.03 set a hard February 15, 2026 qualification deadline for DoD cyber workforce roles. New hires into covered positions still face a 9- and 12-month clock.
A new joint guide addresses the constraints that make OT environments different from IT when applying Zero Trust principles - relevant to any program scoping Zero Trust or RMF work that touches industrial or facility systems.
Memorandum M-26-04 puts hard deadlines on LLM contract language, high-impact AI system compliance, and OMB reporting - turning AI governance from guidance into an acquisition calendar item.
CISA's Hardware Bill of Materials framework gives purchasers a standard way to demand component-level visibility from vendors - shifting supply chain assurance from a vendor claim to an evaluation criterion.
FedRAMP 20x is now broadly available under the June 2026 Consolidated Rules: new certification classes, new terminology, and a hard June 2027 cutoff for new Rev5 applications - every agency cloud portfolio now has a transition question attached.
The final rule effective January 16, 2025 moved HUBZone firms to triennial recertification and offer-date eligibility - removing the certification churn that made some buyers hesitant to use HUBZone set-asides and the 10% price preference.