January 2026 Bootcamp
FY2026 NDAA: What Government Contractors Need to Know
New Requirements Affecting Agency Pain Points & Small Business Opportunities
LIVE BOOTCAMP: January 31, 2026
Learn How to Capitalize on These NDAA Changes
Join the January 2026 GovCon Giants Bootcamp - Live training on leveraging FY2026 NDAA provisions to win contracts
Join Federal Help Center Pro
$8M
New Sole Source (Non-Mfg)
$10M
New Sole Source (Mfg)
Executive Summary
The Fiscal Year 2026 National Defense Authorization Act (NDAA) includes several provisions that directly address agency pain points related to small business contracting. These new requirements create both challenges for agencies (new mandates) and opportunities for small businesses (easier processes, higher thresholds, better support).
Key 2026 NDAA Provisions
1 Unified Application Process for Small Businesses
Requirement:
- DoD must establish a single, unified application process for small businesses seeking Pentagon contracts
- Mandates reduction of paperwork and bureaucracy
- Streamlined registration across DoD components
Agency Pain Point This Addresses:
"We struggle to find small businesses because they're not registered in our systems"
"The registration process is too complex and discourages small business participation"
Impact on Small Businesses:
- Easier registration process (once implemented)
- Single application instead of multiple component registrations
- Reduced administrative burden
Your Opportunity:
Prepare for streamlined registration. Monitor DoD announcements about unified process. Be ready to register when new system launches.
2 Increased Sole Source Contract Thresholds
PREVIOUS THRESHOLDS
$4.5M / $7M
Non-Mfg / Manufacturing
NEW 2026 THRESHOLDS
$8M / $10M
78% / 43% Increase!
Applies To:
- Women-Owned Small Businesses (WOSB)
- 8(a) small businesses
- Service-Disabled Veteran-Owned Small Businesses (SDVOSB)
- HUBZone-designated small businesses
Agency Pain Point This Addresses:
"We need to award larger contracts but sole source thresholds are too low"
Impact on Small Businesses:
- Larger sole source opportunities available
- Less competition on higher-value contracts
- More opportunities for certified small businesses
- Better alignment with actual contract sizes
Effective: Immediate (signed December 18, 2025)
Your Opportunity:
Certified small businesses can pursue larger sole source contracts. Update capability statements to reflect larger capacity. Emphasize ability to handle $8M-$10M contracts.
3 Enhanced Subcontracting Transparency
Requirement:
- Prime contractors must provide subcontractors with subcontracting utilization plans
- Subcontractors can confidentially report to contracting officers if not utilized according to plan
- Promotes accountability in subcontracting practices
Agency Pain Point This Addresses:
"We can't verify if primes are actually using small business subcontractors as promised"
Impact on Small Businesses:
- Better visibility into subcontracting opportunities
- Ability to report if not being utilized as planned
- More accountability from prime contractors
- Better enforcement of subcontracting commitments
Effective: Immediate (signed December 18, 2025)
4 Cybersecurity Requirements Harmonization
Requirement:
- DoD must harmonize cybersecurity requirements for defense industrial base
- Goal: Reduce number of unique cybersecurity requirements
- Simplify compliance for small businesses
Deadline: June 1, 2026
Impact on Small Businesses:
- Simplified cybersecurity compliance (after harmonization)
- Fewer unique requirements to navigate
- Reduced compliance costs
- Easier entry for small businesses
5 CMMC Compliance Support Strategy
Requirement:
- DoD must develop comprehensive strategy to support contractors (especially small businesses) in implementing CMMC
- Strategy may include approaches to reduce compliance costs, shared assessment resources, and small business support programs
Deadline: January 31, 2026 - COMING UP!
Impact on Small Businesses:
- Support strategy for CMMC compliance
- Potential cost reduction approaches
- Shared resources for assessments
- Better guidance and assistance
Your Opportunity:
Monitor DoD CMMC support strategy release (January 2026). Take advantage of cost reduction programs. Utilize shared assessment resources.
6 Supply Chain Transparency Enhancements
Requirement:
- National Security Waivers: Contractors can receive waivers after promptly disclosing noncompliant items and implementing corrective actions
- Online Compliance Database: Publicly available database for offerors to register compliance with sourcing requirements
Deadline: January 1, 2027
Impact on Small Businesses:
- Easier path to waivers (if noncompliance disclosed promptly)
- Clearer compliance registration process
- Public database makes compliance visible
- Better understanding of supply chain requirements
7 Exemptions for Nontraditional Defense Contractors
Exemptions:
- FAR Part 31 Cost Principles - Exempt from federal cost accounting requirements
- Truth in Negotiations Act (TINA) - Exempt from certified cost or pricing data requirements
Applies To:
- Nontraditional defense contractors (many small businesses qualify)
- Innovative small businesses
- New entrants to defense contracting
Effective: Immediate (signed December 18, 2025)
Impact on Small Businesses:
- Reduced compliance burden
- Lower barriers to entry
- Encourages innovation
- Easier for new defense contractors
Action Items for January 2026
- Review new sole source thresholds ($8M/$10M) and update capability statements
- Monitor DoD CMMC support strategy release (January 31 deadline)
- Determine if you qualify as "nontraditional contractor" for exemptions
- Request utilization plans from prime contractors you work with
- Prepare for cybersecurity harmonization (June 2026 deadline)
- Update capability statements to reflect ability to handle larger contracts
- Contact SBLOs at major primes - they need to meet small business goals
Bottom Line
2026 NDAA Creates New Opportunities:
- Larger Contracts - $8M/$10M sole source thresholds
- Easier Compliance - Harmonized requirements, exemptions
- Better Transparency - Subcontracting plans, compliance database
- Simplified Processes - Unified application, streamlined registration
Key Deadlines to Watch:
- January 31, 2026 - CMMC support strategy due
- June 1, 2026 - Cybersecurity harmonization
- January 1, 2027 - Supply chain database