Cybersecurity requirements in government contracts aren’t just paperwork, and a new $13 million settlement is another reminder that failing to meet them can get expensive. According to the Department of Justice, Delaware-based defense and aerospace contractors ILC Dover LP and ILC Astrospace LLC have agreed to pay $13 million to resolve allegations that they violated the False Claims Act by failing to meet cybersecurity requirements under contracts with the Army, Missile Defense Agency, and NASA. Federal investigators alleged that between 2018 and 2024, the companies submitted claims for payment despite knowing they had not fully complied with contractual cybersecurity obligations. The alleged shortcomings included inadequate security controls, outdated or missing system security plans, and the use of third-party cloud storage for controlled unclassified information without ensuring the required protections were in place.
The case also highlights the growing financial consequences of cybersecurity compliance failures across the defense industrial base. The settlement originated from a whistleblower lawsuit filed by Philip Root, ILC’s former director of cybersecurity, who will receive $2.35 million from the recovery. ILC’s parent company, Ingersoll Rand, said it identified and addressed the issues following its June 2024 acquisition and was compliant with applicable requirements by October 2024. The companies resolved the matter without an admission or determination of liability. For government contractors navigating NIST requirements and the rollout of CMMC, the takeaway is straightforward: cybersecurity compliance isn’t simply about passing an assessment. Contractors need to maintain the required protections and documentation throughout contract performance.
Contract Opportunities: REI Systems
Sterling, VA-based REI Systems has officially activated its NASA Solutions for Enterprise-Wide Procurement (SEWP) VI contract, giving the company a new avenue to compete for federal technology modernization work. Originally awarded in June 2026, the Category B contract became active November 1 and covers enterprise IT services including artificial intelligence, cloud modernization, cybersecurity, data analytics, and systems integration. The governmentwide acquisition contract carries a $20 billion ceiling per contract holder over a 10-year ordering period, although that figure represents potential contracting capacity rather than guaranteed revenue.
For REI Systems, the award also brings things full circle. The 100% employee-owned company got its start in 1989 with a single NASA contract and has since expanded its work across the federal government. Now, with SEWP VI underway, REI can compete for additional opportunities as agencies look to modernize aging systems, integrate AI capabilities, and strengthen cybersecurity. And while NASA manages the contract vehicle, the opportunities extend well beyond the space agency. For federal IT contractors, SEWP VI represents another major pathway to compete for government technology spending over the next decade.
Key Employer in the Cleared Industry: ManTech
SPONSORED CONTENT: This content is written on or behalf of our Sponsor.
Cleared Opportunities
Herndon, VA-based Finch AI has achieved Cybersecurity Maturity Model Certification (CMMC) Level 2 following an independent assessment by Ace of Cloud, an authorized third-party assessment organization. The company develops AI-powered solutions that help defense, intelligence, and other organizations identify risks and analyze complex data. The certification demonstrates that Finch AI has met the applicable cybersecurity requirements for protecting Controlled Unclassified Information (CUI), including 110 security requirements outlined in NIST SP 800-171. Finch AI also credited KTL Solutions for helping guide the company through the certification process.
The achievement comes at an interesting time for the defense industrial base. While the Pentagon paused the next phase of mandatory CMMC third-party assessments in July 2026 as it reviews the program, existing cybersecurity requirements remain in place. For contractors, that means protecting sensitive government information is still a priority, even as the certification timeline evolves. Finch AI’s decision to complete its independent assessment puts the company ahead of potential future requirements and provides an additional credential as it competes for national security work. It’s also a reminder that cybersecurity compliance is increasingly part of doing business in the defense sector, not simply another administrative requirement.
