Information Collection; Certain Federal Acquisition Regulation Part 28 Requirements
The Office of Federal Procurement Policy (OFPP), in coordination with DoD, GSA, and NASA, has published a notice seeking public comment on extending the information collection requirements tied to FAR Part 28 (Bonds and Insurance) for an additional three years.…
Cabrillo Club
Editorial Team · May 27, 2026 · 7 min read

TL;DR
The Office of Federal Procurement Policy (OFPP), in coordination with DoD, GSA, and NASA, has published a notice seeking public comment on extending the information collection requirements tied to FAR Part 28 (Bonds and Insurance) for an additional three years. The current Office of Management and Budget (OMB) approval expires January 31, 2027, and this administrative action proposes a routine extension through January 31, 2030. This is not a substantive regulatory change—no new bonding thresholds, insurance requirements, or compliance obligations are being introduced. However, contractors in construction, engineering, facilities management, and professional services sectors should treat this as a signal that FAR Part 28 compliance remains a high-priority enforcement area across major contract vehicles including OASIS+, STARS III, ASTRO, 8(a) STARS III, Alliant 2, and VETS 2. The 60-day comment period represents an opportunity for industry to shape administrative burden discussions, particularly around Miller Act performance and payment bond documentation. Firms with active or pipeline work under these vehicles should audit their bonding capacity, review surety relationships, and ensure proposal templates reflect current FAR Part 28 citation language.
Key Points
- What happened: OFPP, DoD, GSA, and NASA published a Federal Register notice proposing a three-year extension of FAR Part 28 information collection requirements, maintaining existing bonding and insurance obligations without introducing new compliance burdens.
- Who is affected: Prime contractors and subcontractors operating under construction, engineering, IT services, professional services, and facilities management contracts across DoD, GSA, NASA, and civilian agencies—particularly those holding or pursuing awards under OASIS+, STARS III, ASTRO, 8(a) STARS III, Alliant 2, and VETS 2.
- What the timeline is: The current OMB approval expires January 31, 2027; the proposed extension runs through January 31, 2030. Public comments are due 60 days from the Federal Register publication date.
- What contractors should do NOW: Audit bonding capacity and surety relationships, review proposal compliance matrices for FAR Part 28 citations, and monitor for follow-on guidance or policy memoranda that may clarify enforcement priorities under the extended collection period.
Who Is Affected
Market Segments: Construction, professional services, IT services, engineering services, facilities management, insurance and bonding, and general contracting firms.
NAICS Codes: 524126 (Direct Property and Casualty Insurance Carriers), 524128 (Other Direct Insurance Carriers), 541990 (All Other Professional, Scientific, and Technical Services), 236220 (Commercial and Institutional Building Construction), 237310 (Highway, Street, and Bridge Construction), 238210 (Electrical Contractors and Other Wiring Installation Contractors), 541330 (Engineering Services), 541512 (Computer Systems Design Services), 541519 (Other Computer Related Services), 541611 (Administrative Management and General Management Consulting Services), 541614 (Process, Physical Distribution, and Logistics Consulting Services), 541618 (Other Management Consulting Services), 561210 (Facilities Support Services), 561621 (Security Systems Services), 561730 (Landscaping Services).
Agencies: Department of Defense (DoD), General Services Administration (GSA), National Aeronautics and Space Administration (NASA), and all civilian agencies subject to FAR Part 28 bonding requirements.
Contract Vehicles: OASIS+, STARS III, ASTRO, 8(a) STARS III, Alliant 2, VETS 2, and agency-specific IDIQs with construction, engineering, or facilities management task order scopes.
Frequently Asked Questions
Q: Does this extension change my bonding or insurance requirements?
No. This is an administrative extension of existing information collection requirements under FAR Part 28. The Miller Act thresholds, performance bond percentages, payment bond requirements, and insurance minimums remain unchanged. Contractors are not required to obtain new bonds, increase coverage limits, or modify existing surety arrangements solely because of this extension.
Q: Should I submit a public comment, and what would be the strategic value?
Submitting a comment is optional but can be strategically valuable if your firm has experienced administrative burden related to FAR Part 28 documentation, particularly around bond form approvals, surety consent requirements, or insurance certificate processing delays. Comments that quantify compliance costs or propose streamlined documentation processes can influence future FAR Council rulemaking. If your firm holds multiple IDIQ vehicles and has insights into redundant bonding requirements across agencies, this is an opportunity to advocate for harmonization.
Q: How does this affect my proposal compliance matrices and win themes?
Your proposal compliance matrices should already reference FAR 28.102 (Performance and Payment Bonds), FAR 28.307 (Insurance Under Fixed-Price Contracts), and FAR 28.311 (Solicitation Provision and Contract Clause on Liability Insurance Under Cost-Reimbursement Contracts). The extension confirms these citations remain valid through January 2030. Win themes emphasizing surety capacity, bonding track record, and insurance adequacy remain relevant. If your proposal templates auto-populate FAR citations, verify that your Proposal Studio (Proposal OS) (/insights/secure-operations-guide) compliance library reflects the extended OMB control number and expiration date to avoid evaluator questions during agency reviews.
Definitions
- FAR Part 28: The Federal Acquisition Regulation section governing bonds and insurance requirements for government contracts, including performance bonds, payment bonds, and various forms of liability insurance required to protect the government and subcontractors.
- Miller Act: A federal statute (40 U.S.C. §§ 3131-3134) requiring performance and payment bonds on federal construction contracts exceeding $150,000, ensuring subcontractors and suppliers are paid and that the government is protected against contractor default.
- Performance Bond: A surety bond guaranteeing that a contractor will complete the work according to contract terms; if the contractor defaults, the surety either completes the work or compensates the government for the cost of completion.
- Payment Bond: A surety bond protecting subcontractors, laborers, and material suppliers by guaranteeing they will be paid for work performed or materials supplied, even if the prime contractor fails to pay them.
- OMB Control Number: A unique identifier assigned by the Office of Management and Budget to approved information collection requests under the Paperwork Reduction Act, ensuring federal agencies do not impose unnecessary reporting burdens on the public.
Intelligence Response
Cabrillo Signals War Room detected this FAR Part 28 extension within minutes of Federal Register publication and auto-generated this flash briefing, tagging affected NAICS codes, contract vehicles, and compliance surfaces. The platform continuously monitors OMB information collection notices, FAR Council dockets, and agency-specific policy memoranda to identify administrative actions that signal enforcement priorities or upcoming regulatory shifts. While this extension introduces no new obligations, it confirms that FAR Part 28 compliance remains a high-visibility area for contracting officers across DoD, GSA, and NASA—meaning bonding capacity and insurance adequacy will continue to be evaluated rigorously during responsibility determinations and task order competitions.
Cabrillo Signals Intelligence Hub has already indexed this event against your firm's saved searches for OASIS+, STARS III, and Alliant 2 solicitations. If you've configured alerts for construction, engineering, or facilities management opportunities under NAICS 236220, 237310, 541330, or 561210, the system will flag any follow-on solicitations that reference updated FAR Part 28 clauses or revised bonding thresholds. The Match Engine will automatically rescore your opportunity pipeline if agencies issue policy memoranda clarifying Miller Act enforcement or surety consent requirements, ensuring your capture team prioritizes bids where your bonding capacity provides a competitive advantage. For firms managing multiple IDIQ vehicles, the Proposal Studio Workflow Tracker ensures that compliance matrices, insurance certificates, and surety consent letters are routed through the 9-gate capture process with audit-ready version control, reducing the risk of proposal deficiencies tied to outdated FAR citations or expired OMB control numbers.
Systems to Configure
- Cabrillo Signals War Room — Already monitoring FAR Council dockets, OMB information collection notices, and agency policy memoranda for follow-on guidance related to FAR Part 28 enforcement priorities.
- Cabrillo Signals Intelligence Hub — Configure saved searches for solicitations under affected NAICS codes (236220, 237310, 541330, 561210) and contract vehicles (OASIS+, STARS III, Alliant 2) to receive alerts when agencies reference updated FAR Part 28 clauses or revised bonding requirements.
- Proposal Studio (Proposal OS) — Update compliance library to reflect the extended OMB control number and January 31, 2030 expiration date; verify that auto-populated FAR 28.102, 28.307, and 28.311 citations match current regulatory text.
- Proposal Studio Workflow Tracker — Ensure that bonding capacity certifications, surety consent letters, and insurance certificates are routed through Gate 3 (Compliance Review) and Gate 5 (Final Proposal Review) with version control and audit trails.
Notification Chain
- Capture Managers — Need to assess whether pipeline opportunities under OASIS+, STARS III, or Alliant 2 will require updated bonding capacity demonstrations or surety consent letters during the extended collection period.
- Contracts & Compliance Directors — Responsible for auditing proposal templates, compliance matrices, and FAR citation libraries to ensure alignment with the extended OMB approval and for coordinating any public comments if the firm has strategic insights on administrative burden reduction.
- Finance & Surety Relationship Managers — Should review bonding capacity limits, surety credit lines, and insurance policy expiration dates to ensure the firm can support bid volumes through January 2030 without capacity constraints.
- Proposal Coordinators — Must verify that the Proposal Studio compliance library reflects the updated OMB control number and that auto-populated FAR Part 28 citations in Section L compliance matrices are current.
First 48-Hour Playbook
- Hour 0-4: Capture leadership reviews the flash briefing and identifies active proposals or pipeline opportunities under affected contract vehicles (OASIS+, STARS III, Alliant 2, VETS 2) that reference FAR Part 28 bonding or insurance requirements. Contracts & Compliance pulls the current OMB control number and expiration date from the Federal Register notice and flags any proposal templates with outdated citations.
- Hour 4-12: Finance & Surety Relationship Managers audit bonding capacity limits and insurance policy expiration dates, confirming that the firm can support projected bid volumes through January 2030. If capacity constraints are identified, initiate discussions with surety partners about credit line increases or alternative bonding arrangements. Proposal Coordinators update the Proposal Studio compliance library with the extended OMB approval date and verify that FAR 28.102, 28.307, and 28.311 citations auto-populate correctly in active proposal templates.
- Hour 12-24: Contracts & Compliance Director determines whether the firm will submit a public comment during the 60-day comment period. If the firm has experienced administrative burden related to bond form approvals, surety consent processing, or redundant insurance certificate requirements across multiple agencies, draft a comment quantifying compliance costs and proposing streamlined documentation processes. Capture Managers review the Secure Operations Guide (/insights/secure-operations-guide) and CMMC Compliance Guide (/insights/cmmc-compliance-guide) to ensure that bonding and insurance compliance workflows align with broader CUI handling and cybersecurity requirements for DoD contracts.
- Hour 24-48: Cabrillo Signals Intelligence Hub saved searches are configured to alert on follow-on solicitations under affected NAICS codes and contract vehicles that reference updated FAR Part 28 clauses or revised bonding thresholds. Capture leadership schedules a 30-day review to monitor for agency policy memoranda or FAR Council guidance that may clarify enforcement priorities under the extended collection period. Proposal Studio Workflow Tracker is updated to ensure that bonding capacity certifications and surety consent letters are routed through Gate 3 (Compliance Review) with audit-ready version control for all active and pipeline opportunities through January 2030.
---
Stop missing federal opportunities
Signals matches SAM.gov opportunities to your NAICS codes, tracks regulatory changes, and alerts you before competitors.
Start Free Trialor try our free Intelligence Dashboard →

Cabrillo Club
Editorial Team
Cabrillo Club is a defense technology company building AI-powered tools for government contractors. Our editorial team combines deep expertise in CMMC compliance, federal acquisition, and secure AI infrastructure to produce actionable guidance for the defense industrial base.
Related Articles

AI Proposal Writing for Gov Contracts: Automation vs Compliance
Learn where AI accelerates government proposal writing—and where compliance risks live. A technical guide to automation patterns that keep you audit-ready.

CMMC 2.0 Level 2 in 2026: Timeline, Requirements, and a 4-Step Plan
A practical playbook for achieving CMMC 2.0 Level 2 in 2026: key requirements, realistic timelines, and the steps to prepare for a smooth assessment.

Email Ingestion & CUI Compliance: Protecting CUI in Your CRM
An anonymized case study on securing email-to-CRM ingestion to prevent CUI exposure. Learn the controls, timeline, and measurable outcomes.