Each card gives the rule, its status, the words that matter and our part in the work. Your agency makes the determinations; we provide the evidence and the documentation.
U.S. federal (executive agencies)Key date: March 10, 2026
OMB Circular A-123 (revised 2026): Management's Responsibility for Internal Control
In force on issuance (March 10, 2026); supersedes all previous versions of the Circular, and Appendices A, B, C and D remain in effect.
“When possible, agencies should consider automated systems and technologies to streamline the process of conducting risk assessments, testing controls, and monitoring control performance.”
What we do: We build the governed data model and dashboards your control owners use for automated control testing and monitoring, on the financial system you already run.
Source: OMB Circular A-123 (revised 2026) (whitehouse.gov, PDF) (opens in a new tab) · Checked November 10, 2026
U.S. federal (executive agencies)Key date: March 25, 2025
Executive Order 14249: Protecting America's Bank Account Against Fraud, Waste, and Abuse
In force (signed March 25, 2025). Section 5 directs consolidation of core financial systems.
“all heads of CFO Act agencies shall use standard financial management solutions available through the Financial Management Marketplace”
What we do: We write the migration business case and prepare your data, integrations and controls for the solution your agency selects from the Financial Management Marketplace.
Source: Executive Order 14249 (federalregister.gov) (opens in a new tab) · Checked November 10, 2026
U.S. federal (executive agencies)Key date: August 20, 2025
OMB M-25-32: Preventing Improper Payments and Protecting Privacy Through Do Not Pay
In force (issued August 20, 2025); implements Executive Order 14249 Section 3(c) and (d) through a standard Do Not Pay routine use in agency system of records notices and the conditions for Treasury's waiver of computer matching agreements.
“ensure that a thorough review of available databases with relevant information on eligibility occurs to determine program or award eligibility and prevent improper payments before the release of any Federal funds”
What we do: We build the data flows that prepare payee and award data for the Do Not Pay checks your agency is authorized to run, and the approval steps where your staff review the results before a payment is released.
Source: OMB M-25-32 (whitehouse.gov, PDF) (opens in a new tab) · Checked November 10, 2026
U.S. federal and state (criminal justice information)Key date: June 25, 2026
FBI CJIS Security Policy (v6.1) and Microsoft CJIS agreements
CJIS Security Policy v6.1 released June 25, 2026; Texas audits through March 31, 2027 use v5.9.5.
“All Texas CJIS audits through March 31, 2027 are conducted against FBI CJIS Security Policy version 5.9.5.”
What we do: Criminal-justice data stays inside the Microsoft government services your state's CJIS agreement covers, and we design to the policy version your auditor uses.
Source: FBI CJIS Security Policy (dps.texas.gov) (opens in a new tab) · Checked November 10, 2026
U.S. (state and local governments)Key date: April 20, 2026
ADA Title II web and mobile accessibility rule: compliance dates extended (DOJ interim final rule)
IFR (91 FR 20902) effective April 20, 2026: 50,000 or more → April 26, 2027; under 50,000 and special districts → April 26, 2028; WCAG 2.1 AA stands as adopted in 2024. DOJ plans future rulemaking on the substance, and NFB v. DOJ, No. 1:26-cv-02007 (D. Md., filed May 21, 2026), which asks the court to vacate the extension, is pending.
“The compliance date for public entities with a total population of less than 50,000, or any special district government, is extended from April 26, 2027, to April 26, 2028.”
What we do: Public-facing apps, agents and dashboards we build for state and local governments are built and tested to WCAG 2.1 Level AA, and remediation against your compliance date becomes a costed line in the business case.
Source: ADA Title II web and mobile accessibility rule (govinfo.gov) (opens in a new tab) · Checked November 12, 2026