CIO-SP3 Sunsets October 29: What Small Business IT Contractors Should Do Now

CIO-SP3 sunset on October 29 2026 with NITAAC GWAC transition dates for IT contractors

Table of Contents

If your pipeline includes federal IT work, one date is now just days away. NITAAC has confirmed that three of its governmentwide acquisition contracts will permanently sunset on October 29, 2026.

Those three vehicles are CIO-SP3, CIO-SP3 Small Business, and CIO-CS. For small businesses that built their federal IT revenue on them, this changes how you find, price, and win work.

This guide breaks down what NITAAC actually announced, what it left unanswered, and the practical moves to make this week.

What NITAAC Announced

A reminder notice issued September 25, 2026, signed by NITAAC Director Ricky L. Clark, sets the final timeline. It follows an earlier June announcement.

Here are the confirmed terms.

Item What the notice says
Sunset date CIO-SP3, CIO-SP3 SB, and CIO-CS will permanently sunset on October 29, 2026
New orders Cannot have a period of performance beyond December 31, 2028
Pre-June 8, 2026 orders Keep their original period of performance and the terms in effect when awarded
HHS orders All active HHS orders terminate on December 31, 2028, with no extensions
Non-HHS orders past 2028 GSA will administer them after sunset

For non-HHS orders that run beyond December 31, 2028, the NITAAC contracting officer will coordinate the handoff with each order’s contracting officer of record, working with GSA.

The notice ties this move to Executive Order 14240 and OMB Memorandum M-25-31, which push to consolidate federal procurement of common goods and services, including IT, under GSA.

What the Notice Does Not Say

The notice is clear on dates, but it leaves real gaps. Treat anything beyond it as unconfirmed, and ask your contracting officers directly.

It names no successor vehicle. There is no “CIO-SP5” waiting in the wings. The planned successor, CIO-SP4, was cancelled, which is why the program is winding down rather than rolling over.

It also does not spell out how orders already running past October 29 will operate day-to-day once the GWACs retire, or exactly how HHS orders will be handled between the sunset and the 2028 cutoff. For those answers, go to the source. NITAAC lists support at 1-888-773-6542 and NITAACsupport@nih.gov.

What the Sunset Stops, and What It Does Not

It helps to separate panic from reality. The sunset does not cancel the work already under contract. It stops new orders on these vehicles after October 29.

Existing orders keep running under their own terms. Orders awarded before June 8, 2026, hold their original period of performance. Later orders can run until December 31, 2028, at the latest. So the near-term hit is to new awards, not to work already underway.

That distinction shapes your plan. Delivery continues, but the pipeline of new NITAAC orders is closing, which is why your next vehicle matters so much.

Why This Matters for Small Businesses

Two forces are now in motion, and both reward early action.

The Recompete Clock

Any task order that currently runs past December 31, 2028, under a NITAAC vehicle is either moving to GSA administration or, for HHS, hitting a fixed end date. Programs ending in 2028 will have to be re-procured somewhere.

Agencies usually begin market research well before a solicitation drops. Small businesses that get in front of those requirements early are better positioned than those that wait. The sunset is not just an end date. It is a recompete calendar.

Picture a help desk task order that runs through mid-2029. It cannot stay on a retired NITAAC vehicle, so the agency has to move or re-procure it. A contractor watching that clock can build the relationship and shape the requirement in 2027, long before the formal solicitation. A contractor who waits meets it cold as one of many bidders.

Your Next Vehicle

The vehicle you hold determines the work you can see. If your company holds a CIO-SP3 Small Business seat, your access to new task orders ends on October 29.

So the real question is which vehicle you will use next. GSA options such as OASIS+ and the Multiple Award Schedule are common landing spots. On-ramp windows and eligibility terms change often, so confirm the current rules with GSA before you invest in a bid.

Choose the vehicle by fit, not just familiarity. Check that your core labor categories and NAICS codes map to the vehicle, that your past performance supports the domains it covers, and that your target agencies actually buy through it. A vehicle you can win on but no one uses for your work is a dead end.

A Rising-Scrutiny Signal: GSA’s 8(a) Audit

The same week brought a second message for small businesses. On October 21, 2026, GSA announced it will audit federal contracts held by 689 firms removed from the 8(a) Business Development Program, with a combined ceiling of $5.5 billion.

An SBA assessment found that hundreds of these participants had not demonstrated compliance with program requirements. GSA says suspected fraud will be referred to the Office of Inspector General and the Department of Justice.

Whether or not you are an 8(a) firm, the takeaway is the same. Keep your eligibility records, size representations, and compliance documentation current and audit-ready. Scrutiny is rising across the small business space.

Another Date to Watch: Federal Award Data Moves to SAM.gov

If your capture team pulls award data from the Federal Procurement Data System, your tooling may need attention. FPDS data and search have moved to SAM.gov, and the legacy FPDS feeds are being retired.

Reports point to a late-October cutoff for the legacy ATOM feed, with users directed to the SAM.gov Contract Awards API. Confirm the exact date and endpoint with GSA before you change anything, then check your tools so your competitive intelligence does not go dark.

Your CIO-SP3 Sunset Checklist for This Week

With the sunset days away, work through this fast.

  • Inventory your NITAAC work. List every active task order and pursuit tied to CIO-SP3, CIO-SP3 SB, or CIO-CS, and note each end date.
  • Flag the long runners. Mark anything that runs past December 31, 2028.
  • Find the contracting officer of record for each order, and ask how administration will work after October 29.
  • Map your replacement vehicles. Identify which GSA vehicle fits each line of business and confirm your eligibility.
  • Update your capture plan. Target the recompetes that the 2028 cutoff will drive.
  • Refresh your gov registration, representations, and size documentation so you can respond fast when opportunities appear.

Key Takeaways

  • NITAAC says CIO-SP3, CIO-SP3 Small Business, and CIO-CS will be permanently sunset on October 29, 2026.
  • New orders cannot run past December 31, 2028, and active HHS orders terminate on that date; orders awarded before June 8, 2026, keep their original terms.
  • The notice names no successor vehicle, since CIO-SP4 was cancelled, so confirm transitions with each contracting officer and pick your next vehicle now.
  • Keep eligibility and compliance records audit-ready, as GSA’s 8(a) audit of 689 firms shows scrutiny is rising.

How CyberX Gov Solutions Can Help

A sunset like this rewards fast, organized action, and that is where support pays off.

CyberX Gov Solutions helps small businesses re-map their contract vehicles, build capture plans around the recompetes this change will drive, and prepare compliant, audit-ready proposals. For firms moving to a new vehicle, our Get Fed Ready™ program supports readiness, SAM.gov accuracy, and opportunity fit.

The goal is simple: keep your federal IT pipeline moving as the vehicles shift underneath it.

Conclusion

October 29 is not just a program end date. It is the start of a transition that will reshape how small businesses win federal IT work for years.

Inventory your orders, confirm the handoff plan with your contracting officers, and line up your next vehicle now. The firms that move early will be ready when the 2028 recompetes arrive. The ones that wait will be scrambling.

Want a vehicle and pipeline review before the sunset? Talk to the CyberX Gov Solutions team or schedule a consultation at cyberxgovsolutions.com/schedule-a-meeting/.

Frequently Asked Questions

When do the NITAAC GWACs sunset?

CIO-SP3, CIO-SP3 Small Business, and CIO-CS will permanently sunset on October 29, 2026. The timeline comes from a NITAAC reminder notice dated September 25, 2026.

Can I still get new task orders after the sunset?

No. Once the vehicles sunset on October 29, 2026, no new orders can be placed on them. New orders awarded before the sunset cannot have a period of performance beyond December 31, 2028.

What happens to my existing NITAAC task orders?

Orders awarded before June 8, 2026, keep their original period of performance and terms. Active HHS orders terminate on December 31, 2028. Non-HHS orders running past that date will be administered by GSA, coordinated with each order’s contracting officer of record.

Is there a successor to CIO-SP3?

The notice names no successor vehicle. The planned follow-on, CIO-SP4, was cancelled. Agencies are expected to buy future IT requirements through existing GSA vehicles and other sources.

Which vehicles can replace CIO-SP3 for small business IT work?

Common GSA options include OASIS+ and the Multiple Award Schedule. On-ramp windows and eligibility rules change, so confirm the current terms with GSA before you build a bid around any vehicle.

Why are the NITAAC GWACs being retired?

The move aligns with Executive Order 14240 and OMB Memorandum M-25-31, which push to consolidate federal procurement of common goods and services, including IT, under GSA.