Action Kit: Golden Dome Initiative & Lunar Development Shift

Event Type: Executive Order

Severity: HIGH

Effective Date: December 2025

Key Deadlines: Missile shield prototype (2028), Lunar return (2028), Permanent moon presence elements (2030)

---

Immediate Actions (This Week)

• [ ] Conduct capability gap analysis against Golden Dome requirements (missile defense, lunar infrastructure, launch services) and identify which NAICS codes (336414, 336415, 541712, 541715) your company can credibly pursue
• [ ] Review and update ITAR (International Traffic in Arms Regulations)/EAR compliance posture — space defense and lunar systems will trigger International Traffic in Arms Regulations controls; verify your registration status and identify any CUI (Controlled Unclassified Information) handling gaps
• ] **Assess current CMMC (Cybersecurity Maturity Model Certification) certification level** against anticipated DOD Space Force and Missile Defense Agency requirements; if below Level 2, initiate gap assessment immediately (see [CMMC Compliance Guide (/insights/cmmc-compliance-guide))
• [ ] Identify teaming partners with complementary capabilities in space systems, advanced manufacturing, or systems engineering; SpaceX/Blue Origin prime contractor relationships will drive subcontracting opportunities
• [ ] Monitor NASA SEWP, GSA (General Services Administration) STARS III, and Space Enterprise Consortium (SpEC) for rapid solicitation releases; set up daily SAM.gov (System for Award Management) alerts for NAICS 336414, 336415, 541712, and agencies: DOD, NASA, Space Force, Missile Defense Agency

Short-Term Actions (30 Days)

• [ ] Develop Golden Dome-specific capability statement highlighting relevant past performance in aerospace manufacturing, missile defense, or R&D; emphasize any lunar, space defense, or rapid prototyping experience
• [ ] Initiate DFARS (Defense Federal Acquisition Regulation Supplement) 252.204-7012 compliance audit for all systems that will handle Covered Defense Information (CDI); lunar and missile defense contracts will require full NIST 800-171 (NIST Special Publication 800-171) implementation and System Security Plan (SSP) documentation
• [ ] Register or update profiles on relevant contract vehicles: NASA SEWP, Space Enterprise Consortium (SpEC), Air Force Contract Augmentation Program (AFCAP), and Rapid Resilient Command and Control (R2C2)
• [ ] Conduct bid/no-bid analysis for early Golden Dome opportunities using probability of win (Pwin) scoring that factors in: technical capability match, past performance relevance, CMMC readiness, and teaming strength
• ] **Establish CUI-safe collaboration environment** for teaming discussions and proposal development; verify your CRM and document management systems meet NIST 800-171 requirements (see [CUI-Safe CRM Guide (/insights/cui-safe-crm-guide))
• [ ] Schedule executive briefing with business development, contracts, and technical leads to align capture strategy for 2026-2028 Golden Dome solicitations

Long-Term Actions (90+ Days)

• [ ] Pursue CMMC Level 2 certification (or Level 3 if targeting prime contractor roles) through a C3PAO assessment; budget 6-12 months for remediation and certification process
• [ ] Develop specialized technical workforce in lunar systems engineering, space-rated manufacturing, or missile defense integration; consider partnerships with universities or research institutions for talent pipeline
• [ ] Invest in facility security upgrades if pursuing ITAR-controlled space defense work; coordinate with Defense Counterintelligence and Security Agency (DCSA) for facility clearance requirements
• [ ] Build past performance portfolio by pursuing smaller R&D contracts (SBIR/STTR, OTA awards through SpEC) that demonstrate lunar or missile defense capability before major Golden Dome solicitations drop
• [ ] Establish quality management system compliant with AS9100 (aerospace quality standard) if not already certified; many prime contractors will require this for space systems subcontractors
• [ ] Monitor and participate in industry days hosted by Space Force, Missile Defense Agency, and NASA for Golden Dome-related programs; capture intelligence on technical requirements, evaluation criteria, and incumbent positioning

---

Compliance Checklist

This executive order triggers multiple overlapping compliance frameworks for space defense and lunar infrastructure contractors:

ITAR (International Traffic in Arms Regulations)

• [ ] Verify ITAR registration with Directorate of Defense Trade Controls (DDTC) is current
• [ ] Identify all technical data and defense articles that fall under USML Categories IV (launch vehicles), VIII (aircraft/spacecraft), and XII (fire control systems)
• [ ] Implement Technology Control Plan (TCP) for any foreign national access to ITAR-controlled technical data
• [ ] Establish export compliance training program for all employees with access to ITAR materials
• [ ] Verify all teaming partners and subcontractors have valid ITAR registrations

CMMC (Cybersecurity Maturity Model Certification)

• [ ] Achieve CMMC Level 2 certification minimum for DOD contracts involving CUI (required for Space Force, Missile Defense Agency work)
• [ ] Implement all 110 NIST 800-171 security controls across your environment
• [ ] Develop and maintain System Security Plan (SSP) documenting control implementation
• [ ] Conduct annual self-assessments and maintain Plan of Action & Milestones (POA&M) for any gaps
• [ ] Engage C3PAO (Certified Third-Party Assessment Organization) for formal CMMC assessment

NIST 800-171 / DFARS 252.204-7012

• [ ] Implement all 14 control families: Access Control, Awareness & Training, Audit & Accountability, Configuration Management, Identification & Authentication, Incident Response, Maintenance, Media Protection, Personnel Security, Physical Protection, Risk Assessment, Security Assessment, System & Communications Protection, System & Information Integrity
• [ ] Establish boundary protection for all systems processing, storing, or transmitting CUI
• [ ] Deploy multifactor authentication (MFA) for all privileged and non-privileged users
• [ ] Implement encryption for CUI at rest and in transit
• [ ] Establish incident response plan with 72-hour breach reporting to DOD
• [ ] Maintain audit logs for all CUI system access and security events
• [ ] Document all security controls in System Security Plan (SSP) and submit to contracting officer upon request

EAR (Export Administration Regulations)

• [ ] Determine Export Control Classification Numbers (ECCN) for any dual-use space technology
• [ ] Verify compliance with EAR Part 744 (Entity List screening) for all foreign partners
• [ ] Implement deemed export controls for foreign national employees accessing EAR-controlled technology

NIST 800-53 (for higher-sensitivity programs)

• [ ] If pursuing classified space defense work, implement NIST 800-53 moderate or high baseline controls
• [ ] Coordinate with DCSA for facility clearance and personnel security clearance requirements

Additional Golden Dome-Specific Requirements

• [ ] Verify compliance with NASA NPR 8715.24 (Planetary Protection) if lunar surface operations are in scope
• [ ] Implement AS9100 quality management system for aerospace manufacturing work
• [ ] Establish configuration management and version control for all technical data packages
• [ ] Verify supply chain security for all COTS components used in space-rated systems (DFARS 252.204-7012 supply chain risk management)

Reference: For comprehensive security operations guidance across these frameworks, see the Secure Operations Guide (/insights/secure-operations-guide).

---

Resources

Official Guidance & Regulations

• White House Golden Dome Executive Order (December 2025) (https://www.whitehouse.gov/briefing-room/presidential-actions/) — Full text of the executive order
• ITAR Regulations (22 CFR 120-130) (https://www.ecfr.gov/current/title-22/chapter-I/subchapter-M) — International Traffic in Arms Regulations
• CMMC Model 2.0 (https://dodcio.defense.gov/CMMC/) — Cybersecurity Maturity Model Certification requirements
• NIST SP 800-171 (NIST Special Publication 800-171) Rev 2 (https://csrc.nist.gov/publications/detail/sp/800-171/rev-2/final) — Protecting Controlled Unclassified Information
• DFARS 252.204-7012 (https://www.acquisition.gov/dfars/252.204-7012-safeguarding-covered-defense-information-and-cyber-incident-reporting) — Safeguarding Covered Defense Information
• EAR Regulations (15 CFR 730-774) (https://www.bis.doc.gov/index.php/regulations/export-administration-regulations-ear) — Export Administration Regulations

Agency Resources

• Space Force Acquisition (https://www.spaceforce.mil/About-Us/Fact-Sheets/Article/2197749/space-force-acquisition/) — Space Systems Command contracting opportunities
• Missile Defense Agency Contracting (https://www.mda.mil/business/index.html) — MDA small business and contracting information
• NASA Procurement (https://www.nasa.gov/offices/procurement/index.html) — NASA contracting opportunities and vehicles
• Space Enterprise Consortium (SpEC) (https://www.spaceinnovation.org/) — OTA consortium for rapid space prototyping
• SAM.gov (https://sam.gov/) — Federal contract opportunities database

Contract Vehicles

• NASA SEWP (https://www.sewp.nasa.gov/) — Solutions for Enterprise-Wide Procurement (IT and scientific equipment)
• GSA STARS III (https://www.gsa.gov/technology/technology-purchasing-programs/governmentwide-acquisition-contracts/stars-iii) — 8(a) STARS III GWAC (Government-Wide Acquisition Contract)
• AFCAP (https://www.afcec.af.mil/Home/AFCAP/) — Air Force Contract Augmentation Program
• R2C2 IDIQ (Indefinite Delivery/Indefinite Quantity) (https://www.ssc.spaceforce.mil/) — Rapid Resilient Command and Control

---

How Cabrillo Club Automates This

Cabrillo Signals War Room has already detected this Golden Dome executive order and delivered this briefing within minutes of the policy announcement. The War Room continuously monitors White House executive actions, DOD policy memoranda, NASA strategic plans, and Space Force acquisition updates across federal sources, ensuring you never miss a development that could impact your pipeline. For an event of this magnitude, War Room flagged the severity as HIGH and automatically cross-referenced affected agencies (DOD, NASA, Space Force, Missile Defense Agency) with your company's registered NAICS codes and contract vehicle access.

Cabrillo Signals Match Engine is automatically rescoring your entire opportunity pipeline based on this policy shift. Any opportunities tagged with NAICS 336414 (Guided Missile and Space Vehicle Manufacturing), 541712 (R&D in Physical/Engineering Sciences), or agencies like Space Force and Missile Defense Agency have been re-evaluated for keyword relevance ("lunar infrastructure," "missile defense," "space systems"), agency alignment, and competitive positioning. If you were tracking a NASA lunar lander opportunity at 65% match score, the Match Engine has likely elevated it to 80%+ given the new executive priority and accelerated timelines.

Cabrillo Signals Intelligence Hub is tracking all affected agencies, NAICS codes, and contract vehicles associated with Golden Dome. Use the saved search feature to configure alerts for new solicitations on SAM.gov matching this event's profile: NAICS 336414/336415/541712, agencies DOD/NASA/Space Force/MDA, and contract vehicles NASA SEWP/SpEC/R2C2. The Intelligence Hub will notify you within hours when relevant RFIs, sources sought notices, or RFPs drop, giving you first-mover advantage in the capture process.

Proposal Studio (Proposal OS) accelerates your response to Golden Dome opportunities with AI-powered proposal automation. When a Space Force missile defense RFP arrives, Proposal OS generates compliance matrices mapping your technical approach to CMMC, ITAR, and DFARS requirements automatically. The platform maintains your win theme library (emphasizing rapid prototyping, space-rated manufacturing, or lunar systems experience) and produces first-draft technical approaches by pulling relevant past performance data from your corporate repository. The bid/no-bid decision engine factors in this executive order's impact automatically, scoring opportunities higher if they align with Golden Dome priorities and your certified capabilities.

Proposal Studio Workflow Tracker manages the entire capture lifecycle from opportunity identification through post-submission for these complex space defense pursuits. When you move a Golden Dome opportunity into active capture, Workflow Tracker automatically routes compliance reviews to your contracts team (for DFARS flowdowns) and legal counsel (for ITAR restrictions), tracks supplier CMMC certifications for your subcontractor base, and generates audit-ready documentation packages for DCAA or DCMA reviews. The 9-gate process ensures you don't miss critical milestones like C3PAO assessment scheduling, teaming agreement execution, or facility security clearance applications.

Ready to capitalize on Golden Dome opportunities? Explore how Cabrillo Club's integrated platform transforms regulatory intelligence into competitive advantage. Log in to configure your saved searches in the Intelligence Hub, review rescored opportunities in the Match Engine, and activate Proposal Studio workflows for your priority Golden Dome pursuits.

---