Action Kit: FY27 Defense Budget Request Timeline

Event: HASC chair 'optimistic' FY27 budget request coming in March

Severity: MEDIUM

Impact Window: March 2026 budget submission → FY27 execution (Oct 2026–Sep 2027)

---

Immediate Actions (This Week)

• [ ] Review current pipeline for FY27 alignment — Identify opportunities in your pipeline tagged for FY27 execution and assess which align with missile defense, aerospace, and weapons systems priorities
• [ ] Audit NAICS code coverage — Verify your SAM.gov registration includes all relevant codes (336414, 336415, 541330, 541512, 541715, 334511) to ensure visibility when FY27 solicitations drop
• [ ] Assess CMMC readiness — Confirm your current CMMC certification level and timeline; FY27 contracts will likely require Level 2 certification at minimum for DOD prime and subcontract work
• [ ] Monitor agency pre-solicitation activity — Check SAM.gov sources sought notices and RFIs from Missile Defense Agency, Army, Navy, and Air Force for early signals of FY27 program priorities
• [ ] Update capability statements — Refresh one-pagers highlighting missile defense, defense electronics, and systems integration experience to align with anticipated budget emphasis areas

Short-Term Actions (30 Days)

• [ ] Conduct competitive intelligence sweep — Identify which primes and teammates are positioning for missile defense and aerospace work; update your teaming partner database with contact information and past performance
• [ ] Prepare bid/no-bid criteria for FY27 — Establish decision thresholds for FY27 opportunities considering: contract vehicle access (OASIS+, STARS III, SeaPort-NxG), technical capability gaps, and required certifications
• [ ] Validate ITAR and EAR compliance posture — Review export control procedures for missile defense and weapons systems work; ensure Technical Assistance Agreements (TAAs) and export licenses are current if working with foreign partners
• [ ] Engage with contract vehicle holders — If you lack direct access to OASIS+, ASTRO, or SeaPort-NxG, initiate teaming discussions with vehicle holders who can subcontract FY27 work
• [ ] Schedule NIST 800-171 gap assessment — If not already compliant, commission a gap analysis and remediation plan; FY27 solicitations will enforce DFARS 252.204-7012 requirements strictly
• [ ] Build FY27 capture calendar — Map anticipated solicitation release dates based on March budget submission (typically 60-120 days post-budget for major programs); block proposal resources accordingly

Long-Term Actions (90+ Days)

• [ ] Develop missile defense technical differentiators — Invest in R&D, prototyping, or IRAD projects that demonstrate innovation in missile defense technologies; document results for inclusion in technical proposals
• [ ] Pursue strategic certifications — Obtain or upgrade CMMC certification, pursue AS9100 (aerospace quality management), and consider ISO 27001 for cybersecurity credibility on defense electronics programs
• [ ] Establish agency relationships — Attend Missile Defense Agency industry days, Army/Navy/Air Force small business conferences, and program office outreach events to build relationships before FY27 solicitations release
• [ ] Archive past performance narratives — Document all FY24-FY26 contract performance in missile defense, aerospace, and weapons systems; prepare CPARS-aligned narratives and collect customer references for FY27 proposals
• [ ] Expand contract vehicle access — Submit proposals for upcoming OASIS+ or GSA MAS on-ramps; pursue SeaPort-NxG or ASTRO if your NAICS codes align with Navy or Air Force work
• [ ] Build proposal content library — Develop reusable technical approach sections, management plans, and quality control procedures tailored to missile defense and defense R&D requirements; maintain in a searchable repository

Compliance Checklist

Given the defense and missile defense focus, FY27 solicitations will enforce these requirements:

• [ ] CMMC Level 2 Certification — Required for handling Controlled Unclassified Information (CUI); ensure C3PAO assessment is scheduled and System Security Plan (SSP) is current
• [ ] NIST 800-171 Rev 2 (110 controls) — Full implementation required; document compliance in SSP and maintain Plan of Action & Milestones (POA&M) for any gaps
• [ ] DFARS 252.204-7012 — Safeguarding Covered Defense Information clause; verify incident response procedures and cyber incident reporting to DOD Cyber Crime Center (DC3)
• [ ] ITAR Registration — If handling defense articles or technical data related to missile defense or weapons systems, maintain active ITAR registration with DDTC and ensure employees have required security clearances
• [ ] EAR Compliance — For dual-use technologies, verify Export Control Classification Numbers (ECCNs) and maintain export compliance program documentation
• [ ] NIST 800-53 (for classified work) — If pursuing classified missile defense programs, implement moderate or high baseline controls and prepare for Defense Counterintelligence and Security Agency (DCSA) assessments
• [ ] DFARS 252.204-7019 — Notice of NIST SP 800-171 DoD Assessment Requirements; prepare for DoD assessments (DIBCAC or DCMA) if pursuing contracts over $7.5M
• [ ] Cost Accounting Standards (CAS) — If pursuing contracts over CAS thresholds, ensure accounting system is compliant and disclosed; maintain CAS-compliant timekeeping and indirect rate structures
• [ ] Cybersecurity Maturity Model Certification (CMMC) Scoping — Document which systems process CUI vs. Federal Contract Information (FCI); scope CMMC assessment boundary to minimize certification costs

Resources

• DFARS 252.204-7012 Full Text (https://www.acquisition.gov/dfars/252.204-7012-safeguarding-covered-defense-information-and-cyber-incident-reporting) — Safeguarding requirements for covered defense information
• NIST SP 800-171 Rev 2 (https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) — Protecting Controlled Unclassified Information in nonfederal systems
• CMMC 2.0 Model (https://dodcio.defense.gov/CMMC/Model/) — Official CMMC framework and assessment guides
• ITAR Regulations (22 CFR 120-130) (https://www.pmddtc.state.gov/ddtc_public/ddtc_public?id=ddtc_public_portal_itar_landing) — International Traffic in Arms Regulations
• Missile Defense Agency Small Business Office (https://www.mda.mil/smallbusiness/) — Industry engagement and teaming opportunities
• SAM.gov Contract Opportunities (https://sam.gov/content/opportunities) — Federal procurement notices and solicitations
• OASIS+ Information (https://www.gsa.gov/buy-through-us/products-and-services/professional-services/buy-services/oasis-plus) — Unrestricted and small business contract vehicle details

---

How Cabrillo Club Automates This

Cabrillo Signals War Room has already detected this budget timeline announcement and delivered this briefing within minutes of the HASC chair's statement. The War Room continuously monitors Congressional Armed Services Committee hearings, OMB budget guidance, and DOD comptroller announcements so you're alerted to budget developments before competitors react. For this event, War Room automatically tagged the affected agencies (DOD, Missile Defense Agency, service branches), relevant NAICS codes (336414, 541330, 334511, etc.), and contract vehicles (OASIS+, SeaPort-NxG, ASTRO) so you immediately understand which parts of your business are impacted.

Cabrillo Signals Match Engine is now automatically rescoring your opportunity pipeline based on this FY27 budget signal. Opportunities tagged with missile defense, aerospace, or weapons systems keywords receive elevated match scores, while FY26-focused opportunities are deprioritized. The Match Engine cross-references your capability profile against the NAICS codes and market segments identified in this event, surfacing opportunities where you have competitive advantage. As new FY27 solicitations appear on SAM.gov over the next 90-180 days, Match Engine will flag those aligned with missile defense priorities and your past performance profile.

Cabrillo Signals Intelligence Hub allows you to configure saved searches that trigger alerts when follow-on developments occur. For this event, set up alerts for: (1) FY27 budget submission on OMB.gov, (2) new solicitations from Missile Defense Agency with NAICS 336414/541330, (3) OASIS+ task orders mentioning "missile defense" or "aerospace," and (4) pre-solicitation notices (sources sought, RFIs) from Army, Navy, and Air Force related to weapons systems. Intelligence Hub aggregates these signals into a single dashboard so you're not manually checking multiple government websites daily.

Proposal Studio (Proposal OS) will accelerate your response when FY27 missile defense solicitations drop. The AI-powered compliance matrix generator automatically maps solicitation requirements (CMMC, ITAR, NIST 800-171) to your existing compliance documentation, flagging gaps that need narrative responses. Proposal OS maintains your win theme library and past performance database, so when you're responding to a Missile Defense Agency RFP, it auto-populates relevant contract examples and technical approaches from your aerospace and defense electronics work. The bid/no-bid decision engine factors in this budget event automatically—opportunities aligned with FY27 missile defense priorities receive higher go-scores based on anticipated funding availability.

Proposal Studio Workflow Tracker manages the 9-gate capture process from opportunity identification through post-submission. When you mark an opportunity as "FY27 missile defense," Workflow Tracker automatically routes compliance reviews to your contracts team (for DFARS clauses), security officer (for ITAR/CMMC requirements), and legal counsel (for export control). It tracks supplier certifications (ensuring subcontractors have CMMC Level 2), generates audit-ready documentation packages for DCMA reviews, and maintains a compliance checklist tied to the specific requirements in this Action Kit.

Ready to automate your FY27 capture strategy? Explore these features in your Cabrillo Club dashboard. Navigate to Signals > War Room to see all budget-related events, configure Intelligence Hub > Saved Searches to monitor FY27 solicitations, and use Proposal Studio > Bid/No-Bid Engine to prioritize opportunities aligned with missile defense funding priorities.

---