NITAAC Is Dead: Where the Work Goes Next

NITAAC just announced it's sunsetting all of its governmentwide acquisition vehicles — including CIO-SP3, CIO-SP3 Small Business, and the next-generation CIO-SP4 — with all program functions ending after December 31, 2028. A vehicle that has processed tens of billions in IT task orders is going dark.

The instinct for most small business contractors will be to panic or ignore it. Both are wrong. This is a migration event, and migration events are where BD positioning gets reshuffled. If you move first, you capture the arbitrage. If you wait, you're chasing incumbents into crowded vehicles with no differentiation.

What NITAAC Actually Was

NITAAC — the NIH Information Technology Acquisition and Advisory Center — ran three major GWACs: CIO-SP3, CIO-SP3 SB (small business), and the perpetually-delayed CIO-SP4. CIO-SP3 Small Business alone had a $20 billion ceiling and was a preferred vehicle for civilian agencies seeking to comply with small business set-aside requirements on complex IT work.

The vehicles were popular precisely because NITAAC was a relatively contractor-friendly Assisted Acquisition Services shop. Agencies could route task orders through NITAAC with less friction than some competing vehicles, and the CIO-SP3 SB was a legitimate on-ramp for small businesses into major civilian IT programs.

CIO-SP4 was supposed to replace all of this. It was announced, delayed, protested, restructured, and delayed again — for years. The sunset announcement effectively acknowledges the program never recovered from that sequence of setbacks.

The Migration Map

When a major vehicle sunsets, the work doesn't disappear. It migrates — to other GWACs, to agency-specific IDIQs, and to direct acquisitions. For small business contractors, the migration flows in three directions:

GSA GWACs absorb the bulk. Alliant 2 Small Business is the most direct comparable for civilian IT work. STARS III (8(a) set-aside) and OASIS+ SB (professional services with IT scope) are the other major absorbers. If you don't have a spot on one of these vehicles, that's your most urgent positioning gap. Task order competition is meaningless without access.

Agency-specific IDIQs expand. When agencies lose a preferred GWAC, procurement shops often respond by standing up or expanding their own multiple-award IDIQs. Watch for new solicitations from civilian agencies that were NITAAC-heavy users — HHS components beyond NIH itself, as well as agencies in the civilian health IT space. These new IDIQs represent ground-floor positioning opportunities that don't exist under incumbent-heavy GWACs.

Some work goes direct. Smaller task orders that were routed through NITAAC for convenience may migrate to simplified acquisitions or direct awards, particularly as agencies deal with constrained contracting officer bandwidth. That creates opportunities for small businesses with existing agency relationships who can capture work outside the vehicle competition entirely.

What the BD Calendar Looks Like

NITAAC announced the sunset now, with a 2028 hard stop. That two-and-a-half year runway is deliberate — it's long enough for agencies to plan, but short enough that they need to act. Here's how to read the timeline:

2026-2027: Agency migration decisions. Contracting offices will be figuring out which vehicle they migrate to. This is relationship time, not proposal time. If you have existing work with NITAAC-using agencies, get in front of their acquisition teams now and understand their transition plans. That conversation has a legitimate reason to happen and gives you intelligence you can't get any other way.

Late 2027: New vehicle solicitations spike. Agency-specific IDIQs that replace NITAAC usage will start hitting SAM.gov. Most small businesses will see these as cold opportunities. The ones who spent 2026-2027 building relationships will see them as scripted wins.

2028: Last task order rush. Expect a surge of task orders under existing NITAAC vehicles before the shutdown date as agencies burn down ceiling and wrap up continuity work. These are likely to be incumbent-favoring follow-ons, but they'll generate protest and recompete activity that creates openings.

The GWAC Access Problem

Here's the uncomfortable truth most small business BD leads don't want to say out loud: if NITAAC CIO-SP3 SB was your primary vehicle for civilian IT work and you don't have a comparable spot elsewhere, you have a serious access problem — not an opportunity problem.

Opportunity volume is irrelevant without vehicle access. A $50 million task order you can't bid isn't an opportunity; it's a reminder that your vehicle strategy has a gap.

Alliant 2 SB, STARS III, and OASIS+ SB will absorb the majority of the displaced work. Alliant 2 SB is closed — there's no new on-ramp. STARS III requires 8(a) status. OASIS+ SB had its on-ramp in 2023-2024 and GSA has signaled potential future on-ramps, but nothing is confirmed.

If you don't have access to one of these vehicles, the practical path forward is teaming — finding a prime who holds the vehicle and structuring work where your capabilities are genuinely additive, not just pass-through. That's a legitimate strategy, but it's a margin-compressing one. The better answer is to pursue any open on-ramps aggressively and position for agency-specific IDIQ solicitations as they emerge.

The Wired RFP Risk Is Elevated During Transitions

Migration periods are when wired RFP patterns are most pronounced. When an agency transitions work from one vehicle to another, the contracting officer often knows exactly which incumbent they want to carry forward — and the solicitation gets written to reflect that. PWS language that maps to the incumbent's past performance, evaluation criteria weighted toward experience that only one team has, short response windows that favor teams already in conversation with the agency.

This isn't conjecture. It's the structural logic of how continuity-of-service requirements interact with competitive acquisition rules. The agency needs the work to continue. The incumbent knows the environment. The path of least resistance is a transition solicitation designed so the incumbent wins.

For small businesses trying to break in during NITAAC migration, the question isn't "is this a real opportunity?" — it's "is this agency actually open to a new contractor, or are they going through the motions?" The answer usually lives in the pre-solicitation activity: industry days, RFIs, sources sought notices. If none of those happened, and the RFP appeared fully-formed with a 2028 transition deadline, read that as a continuity vehicle for the incumbent.

The STARS III Angle

If you hold 8(a) status and a STARS III spot, the NITAAC sunset is a gift. HHS, NIH, and adjacent civilian health IT agencies that routed work through NITAAC's small business vehicle will be looking for compliant alternatives. STARS III is the natural landing spot for 8(a) firms. But "natural landing spot" means you'll be competing against every other STARS III holder who's had the same realization.

The differentiation play here is technical specialization. Agencies migrating work aren't going to accept a generic IT services pitch — they have too many options. Your positioning needs to be specific to their domain. If you've done work in clinical informatics, health data modernization, or NIH-adjacent research computing, lead with that. If you haven't, be honest with yourself about whether you're actually competitive for that work or just chasing displaced ceiling.

Understanding how to allocate pursuit resources across these migration scenarios is exactly the kind of bid strategy analysis that separates disciplined BD shops from ones that just respond to everything.

The Bottom Line

NITAAC's shutdown is a market structure event, not a procurement announcement. The work doesn't go away. The access routes change. The incumbents scramble. And the small businesses that understand where the work is migrating — and who built relationships with affected agencies before the solicitations drop — will be positioned to capture it.

The ones who wait for the RFPs to hit SAM.gov will find themselves competing against teams that have been running capture for 18 months. That's not a competition; that's a formality.

The migration map is visible right now. The question is whether you're willing to act on it before the crowd does.

Frequently Asked Questions

Does the NITAAC sunset affect contracts already awarded under CIO-SP3?

Existing task orders awarded under CIO-SP3 or CIO-SP3 SB can continue to execute through their period of performance. The sunset affects the vehicle itself — no new task orders can be issued after NITAAC's program shutdown date of December 31, 2028. If you have active work under those vehicles, focus on whether your task order PoPs extend past that date and how your agency customer plans to bridge continuity.

If I don't hold a GWAC, is there any realistic path to this work?

Yes, but it's narrower. Teaming with a GWAC holder as a subcontractor is the most direct route, though it compresses your margin and leaves you dependent on the prime's BD decisions. The better medium-term play is pursuing agency-specific IDIQ solicitations that will emerge as agencies build their own transition vehicles — those often have lower barriers to entry than GWACs and reward domain-specific expertise over broad-vehicle access.

How does OASIS+ SB compare to CIO-SP3 SB as a replacement vehicle?

OASIS+ SB covers professional services including IT, but its scope is broader and its task order competition is structured differently than CIO-SP3 SB. Agencies that used NITAAC specifically for IT-intensive work may find OASIS+ SB an imperfect fit for highly technical requirements, which could push some work toward agency-specific IDIQs or direct acquisitions. GSA has been actively marketing OASIS+ as the successor vehicle for displaced NITAAC work, so expect it to absorb a significant share regardless.

Should small businesses be worried about the concentration of IT GWAC access in fewer vehicles?

The concern is legitimate. When work concentrates on fewer GWACs with closed or constrained on-ramps, the competitive advantage of holding a spot increases and the barrier to entry for newer small businesses rises. SBA and GSA have historically responded to access concerns with new on-ramps or set-aside vehicles, but those take years to materialize. For now, the practical implication is that GWAC access is a strategic asset worth protecting — if you hold a spot on a surviving vehicle, maintain your qualifications and don't let it lapse.