cmmctrade-pressNewsThe Broadside1 min read

Contractors face CMMC, fixed-price squeeze across federal market

The risk shift is not theoretical when small businesses must certify cybersecurity and document hours before invoices move.


TL;DR

Federal News Network’s interview with Barbara Kinosky frames the last 18 months of acquisition changes as a combined squeeze on contractors: mandatory Cybersecurity Maturity Model Certification, changes to small-business set-asides and fixed-price contracting as the default. Kinosky said small businesses are absorbing new compliance cost, while some fixed-price work now requires time cards and invoice-level proof of hours before payment.

Federal News Network’s interview is not a rulemaking notice, so do not treat it like one. But the operational point is useful: contractors are not dealing with CMMC, small-business set-aside changes and fixed-price contracting as separate policy tabs. They are absorbing them in the same accounting department, capture plan and invoice workflow.

Kinosky’s sharpest example is fixed-price work that still demands proof of hours. On the usual theory, a fixed-price contract shifts cost risk to the contractor and reduces government monitoring of incurred costs. Her account describes something narrower and more painful: fixed-price pricing, plus hour targets, time cards and documentation matched to invoices. If that becomes common, the contractor carries the pricing risk while still feeding the government labor-detail proof normally associated with more supervised payment models.

The CMMC piece lands hardest on smaller defense suppliers because it is cash, evidence and timing, not just policy literacy. The company that once treated cybersecurity as a proposal representation now has to pay for readiness, produce evidence and survive contracting-officer enforcement. Pair that with fixed-price defaults and tighter payment documentation, and the practical question is not whether federal contracting has become more accountable. It is who finances the accountability while the government decides how much proof it wants before paying the bill.


Published ·Deep Fathom