Navigating Government Tech Procurement: Challenges and Opportunities

In a recent conversation, Emily Murphy, former GSA Administrator and current senior fellow at George Mason University’s Baroni Center for Government Contracting, offered a candid assessment of the persistent friction at the heart of federal technology procurement. The government’s stated desire is to tap into the vibrant, fast-paced commercial technology sector, but its execution often leaves innovators hesitant at the gate. This isn’t a failure of intent, Murphy suggests, but a fundamental clash of cultures and obligations.

At the core of this tension is a simple, unresolved question. “Yes, to a point,” Murphy responded when asked if the government truly wants to buy like a business. “We always say we want the government to act more like a business but at the end of the day, the government isn’t a business.” The distinction is critical. Commercial entities operate with a singular focus on their best interest, making swift decisions based on market conditions. The federal government, however, is bound by a different social contract. It must uphold principles of fairness, transparency and public accountability, running competitions that can be legally protested if rules aren’t followed. This foundational difference creates an inherent friction, one now magnified by new technological threats.

Nowhere is this friction more visible than in the ongoing struggle to establish cybersecurity standards for Controlled Unclassified Information (CUI). For over a decade, the Department of Defense has been developing its Cybersecurity Maturity Model Certification (CMMC) framework, a process Murphy notes is currently on hold. Simultaneously, the Federal Acquisition Regulatory (FAR) Council is working on government-wide CUI rules while individual agencies like the General Services Administration (GSA) pursue their own tailored approaches. This patchwork of requirements isn’t arbitrary chaos, Murphy explains, but reflects the genuine, divergent needs of different missions. The Department of Defense, as she points out, has a unique industrial base and faces threats of a different magnitude than civilian agencies.

The problem, however, arises in the implementation. While a technical standard from the National Institute of Standards and Technology (NIST) exists, its translation into contract language becomes a bureaucratic labyrinth. “It’s going to be interesting to see if that’s adjusted at all based on the signals we’re getting from the Pentagon,” Murphy observed, highlighting the reactive and often disjointed policy adjustments. This inconsistency sends confusing signals to the industrial base. A company investing heavily to meet one agency’s interpretation of a standard may find itself over-qualified for one contract and under-qualified for another, creating unpredictable costs and competitive disadvantages.

For a commercial technology company considering the federal marketplace, this landscape can be paralyzing. Murphy’s advice is sobering. A new market entrant would need “pretty hard” convincing to engage outside of limited, protected avenues like Commercial Solutions Openings (CSOs). The reason is simple: shifting rules introduce untenable risk. “You’re changing the rules on me day to day,” she imagines a company CEO saying. This hesitation has a direct cost for the public, leading to a government that lags behind the very innovation it seeks. Murphy uses the legacy of the Cost Accounting Standards (CAS) as a poignant example. Companies developed complex, government-specific accounting systems because they were required to adding significant overhead. The government then wonders why these contractors are more expensive than their commercial peers creating a cycle of misaligned incentives.

Is this instability simply the new normal in our era of rapid technological change? Murphy believes we are at a particular inflection point driven by the dual transformations of artificial intelligence and the impending shift to quantum computing. The constant churn of policy is not entirely new, she recalls similar dynamics during the Y2K preparations decades ago but the pace has undoubtedly accelerated. The government’s greater challenge, she argues, is its inherent difficulty in changing and evolving standards compared to the private sector. It is perpetually trying to reconcile competing interests: national security, economic industrial base health and the immediate need to simply purchase a solution and get work done.

This creates a paradox that defines the current moment. Agencies are not creating complexity “just for fun,” Murphy is quick to assert. They are earnestly wrestling with unprecedented challenges in AI governance, quantum readiness and supply chain security. Yet, their earnest efforts to manage risk and uphold diverse policy goals—from cybersecurity to socioeconomic support for small businesses—can inadvertently construct a barrier to entry. The very rules designed to protect and modernize the government can end up insulating it from the cutting-edge technology it desperately needs. Navigating this paradox requires more than new procurement guides; it demands a fundamental acknowledgment that buying innovation cannot be neatly separated from the complex, often contradictory, work of governing. The path forward lies not in pretending the government is a business but in designing a procurement ecosystem that respects its unique duties while creating clearer, more stable pathways for the commercial world to contribute.

Key Points to Consider:

• Persistent friction in federal technology procurement
• Government’s intent vs. execution in engaging commercial technology
• Divergent needs of different military and civilian agencies
• Complexities in establishing cybersecurity standards
• Impact of shifting rules on commercial technology firms
• Necessity for a stable procurement ecosystem