Photo of Peter J. EyrePhoto of M.Yuan Zhou

This week’s episode covers developments regarding the Secure Software Development Attestation, GSA’s newly release CUI guidance, GSA’s RFI regarding resellers, and the Pentagon’s “patent holiday” pilot, and is hosted by Peter Eyre and Yuan Zhou. Crowell & Moring’s “Fastest 5 Minutes” is a biweekly podcast that provides a brief summary of significant government contracts legal and regulatory developments that no government contracts lawyer or executive should be without.

Click below to listen or access from one of these links:

PodBean | SoundCloud | Apple Podcasts

Photo of Christian CurranPhoto of Zachary SchroederPhoto of Bryan Dewan

Crowell & Moring’s “All Things Protest” podcast keeps you up to date on major trends in bid protest litigation, key developments in high-profile cases, and best practices in state and federal procurement. In this episode, Crowell’s Christian Curran, Zachary Schroeder, and Bryan Dewan cover two recent protests that both emphasize the continued importance of filing timely at GAO while highlighting significant rules and nuances that may trip up protestors.

Click below to listen or access from one of these links:

PodBean | SoundCloud | Apple Podcasts

Photo of Anuj VohraPhoto of J. Chris HailePhoto of Rebecca SpringerPhoto of Per MidboePhoto of Alexandra Barbee-GarrettPhoto of Kris D. MeadePhoto of Trina Fairley Barlow

Congress has not passed funding bills to keep key parts of the government funded for the remainder of Fiscal Year 2026—including the Departments of Defense, State, Treasury, Labor, Health and Human Services, Transportation, Housing and Urban Development, and Homeland Security, as well as independent agencies, the judiciary, and national security and foreign operations functions. As Congress continues to negotiate a deal in advance of the expiration of funds on January 30, parts of the government may still face a short shutdown, given the time needed for both the Senate and the House to consider and approve legislation. In anticipation of that possibility, agencies whose funding is uncertain are preparing for a shutdown; contractors, grant recipients, and companies that work with those agencies should do the same. Our team is ready and available to advise through the shutdown process.

Continue Reading Reminders for a Potential Government Shutdown this Weekend
Photo of Olivia LynchPhoto of Amy Laderberg O'SullivanPhoto of Zachary Schroeder

As we previously reported, on January 16, 2026, the Department of War (DoW) announced an audit of 8(a) sole source awards over $20 million, joining the previously-announced audits by the Small Business Administration (SBA) and U.S. Treasury Department (discussed here and here).  A DoW memorandum also dated January 16, 2026 but only recently made public reveals that this audit is much broader in than originally announced.  Any active 8(a) sole source contract, 8(a) set-aside contract, or small business set-aside contract over $20 million is under scrutiny. 

Continue Reading DoW’s Previously Announced 8(a) Audit Expanded to Include All Small Business Set-Aside Awards over $20 Million
Photo of Olivia LynchPhoto of Amy Laderberg O'SullivanPhoto of Zachary Schroeder

The Small Business Administration (SBA) has rolled out changes to its 8(a) Program even as it suspends 8(a) participants for failure to respond to the SBA’s December 5, 2025 8(a) audit letters.

Continue Reading 8(a) Participants – and the 8(a) Program – Under the Microscope or on the Chopping Block
Photo of Peter J. EyrePhoto of M.Yuan Zhou

This week’s episode covers national fraud enforcement, an executive order focused on defense contracting, government investment strategies, GSA and transactional data reporting, and the Pentagon review of 8(a) awards, and is hosted by Peter Eyre and Yuan Zhou. Crowell & Moring’s “Fastest 5 Minutes” is a biweekly podcast that provides a brief summary of significant government contracts legal and regulatory developments that no government contracts lawyer or executive should be without.

Click below to listen or access from one of these links:

PodBean | SoundCloud | iTunes

Photo of Kate GrowleyPhoto of Michael G. Gruden, CIPP/GPhoto of Jacob Harrison

What is FedRAMP?

The Federal Risk and Authorization Management Program (FedRAMP) is a government-wide initiative established to standardize the security assessment, authorization, and continuous monitoring of cloud products and services used by federal agencies. FedRAMP’s primary objective is to ensure that cloud service providers (CSPs) implement robust security controls to protect federal information in cloud environments. By leveraging a consistent framework for security assessment and authorization, FedRAMP is intended to reduce duplication of effort, cost, and time for both agencies and vendors.

Continue Reading FedRAMP Proposes Updates to Authorization Process—Six New RFCs Released for Public Comment
Photo of Olivia LynchPhoto of Amy Laderberg O'SullivanPhoto of Zachary Schroeder

On January 16, 2026, U.S. Secretary of War Pete Hegseth posted a video on social media outlining the U.S. Department of War’s (DoW) plan to combat fraud, waste, and abuse in the Small Business Administration’s (SBA) 8(a) Business Development Program. 

Secretary Hegseth laid out a three-part approach:

  1. First, the DoW will prioritize “a line-by-line review of every small-business, sole-source 8(a) contract that is over $20 million.” The secretary suggests that the DoW will “look at everything smaller than [$20 million] too.” This proclamation raises numerous questions that we anticipate will be answered in the near future.  These include: will such review be of only active contracts? How is the $20 million applied — is it the potential contract value or merely the obligated value? What materials will be requested by the DoW, and will they be different than those SBA recently requested from active 8(a) participants? What is the timeline for commencement of audits, and what are the deadlines for responses to the DoW? Will audit requests be limited to prime contractors in the first instance? 
  2. Second, the DoW will seemingly also review 8(a) contracts to ensure such contracts make the DoW “more lethal” or “help us win wars” — appearing to commit to canceling contracts if they do not.
  3. Third, the DoW will review 8(a) contracts for indicia of “pass-through fraud,” to determine whether the prime contractor is “the one actually doing the work, and not just some shell company funneling [taxpayer] money to a giant consulting firm.” Secretary Hegseth claimed that, in these “pass-through schemes,” 8(a) primes “take a 10%, 20%, sometimes 50% fee off the top, and then pass the contract off to a giant consulting firm, commonly known as Beltway Bandits.” 

Secretary Hegseth’s suggestions that 8(a) primes are fraudulently passing through work to “giant consulting” firms was a theme throughout the video. The DoW’s Department of Government Efficiency (DOGE) account, which reposted Secretary Hegseth’s video, reiterated the messaging, stating that “[t]oo often” “disadvantaged small businesses” are “actually shells—keeping 50% and farming the work out to big consulting firms.”

SBA Administrator Kelly Loeffler also reposted Secretary Hegseth’s video, reiterating that, as the DoW and U.S. Department of the Treasury “pursue their audits,” SBA will continue to review its audit of all active 8(a) participants, “requiring them to PROVE that they are not operating one of the pass-through schemes or shell companies that have become all too common in DC.”

In December 2025, Crowell & Moring posted an analysis of the implications for both small and large contractors of the SBA’s and Treasury’s intent to audit small businesses and/or various types of small business set-aside awards. The takeaway continues to be that all government contractors should assess and review their risk profiles in relation to the U.S. government’s recent focus on compliance with the limitations on subcontracting. The announced backward-looking audits (e.g., SBA’s and DoW’s review of aspects of the SBA’s 8(a) Program or Treasury’s review of all preference-based contracts) and forward-looking compliance requirements (e.g., Treasury’s imposition of labor reporting requirements) likely do not reflect the universe of audit and enforcement actions that government contractors should expect. Secretary Hegseth’s video does stop short of echoing Senator Jodi Ernst who, in her role as chair of the U.S. Senate Committee on Small Business and Entrepreneurship, sent letters on December 8, 2025, to federal agencies calling on them to pause issuance of sole-source awards to 8(a) participants.

Photo of Cherie Owen

GAO’s recent decision in Think Tank, Inc., serves as a critical warning for contractors and their counsel regarding the unforgiving nature of GAO filing deadlines. The decision highlights the potentially fatal consequence of missing even a minute on GAO’s filing calendar.

Continue Reading Protester Files Comments Minutes Late, Resulting in Complete Dismissal of its Protest
Photo of Matthew FerraroPhoto of Kate GrowleyPhoto of Michael G. Gruden, CIPP/GPhoto of Jacob CanterPhoto of Jacob HarrisonPhoto of Vanessa A. Perumal

In an important first, the yearly defense policy law, the National Defense Authorization Act (NDAA) for Fiscal Year 2026, directs the Department of Defense (DoD)  to develop and implement a framework addressing the cybersecurity and physical security of artificial intelligence and machine learning technologies (AI/ML) acquired by the Pentagon.

Continue Reading CMMC for AI? Defense Policy Law Imposes AI Security Framework and Requirements on Contractors