1. Home
  2. |Insights
  3. |GAO Blasts FBI's "Second-Tier" IDIQ Solicitations

GAO Blasts FBI's "Second-Tier" IDIQ Solicitations

Client Alert | less than 1 min read | 10.15.15

In Harris IT Servs. Corp. (Oct. 2, 2015), GAO arrested the FBI's issuance of two solicitations under existing IDIQ contracts because each solicitation called for a single, "second-tier IDIQ instrument" that would deny other, existing IDIQ holders the fair opportunity to compete for future task orders as required by FAR 16.505. GAO also found that the contemplated future task orders could potentially exceed the scope of the underlying IDIQ contracts and contained unduly restrictive specifications.


Contacts

Insights

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA....