Unofficial satire. Not government guidance. Memes are not legal review.
CMCoEContracting Memes Center of Excellence

Daily acquisition brief // October 28, 2026

CMCoE Meme Intel: Have You Tried Searching?

A detector misses its keyword, repair estimates include kickbacks, destruction needs receipts, and an oversight office goes entirely out of office.

4 storiesRSS feed
GSA / Sensitive procurement information

The CUI detector forgot to search for CUI.

GSA OIG found a remarkably literal gap in the agency's sensitive-document search terms.

Captain Picard Facepalm meme: CUI DETECTOR / HAVE YOU TRIED SEARCHING 'CUI'?
CUI DETECTOR / HAVE YOU TRIED SEARCHING 'CUI'?

What happened

The October 27, 2026 audit found 116 CUI documents improperly shared with all GSA employees and contractors, including vendor proposals and pricing information.

The detection tool omitted the terms CUI and CONTROLLED. It included the full phrase Controlled Unclassified Information but still missed four documents bearing it.

Why CMCoE cares

Protecting procurement information requires checking the actual markings, not just buying detection software.

Regulatory fine print

The audit ran March–December 2025; this was internal overexposure, not a finding of an internet leak. The sample does not establish an agency-wide failure rate. GSA agreed with all seven recommendations and reported access restrictions and other improvements, including deployment of the image-scanning feature. Its October 5 response said there was no external exposure or malicious intent. The caption targets the documented search-term omission, not every capability of the tool.

Sources

  1. GSA OIG A250043/I/T/F27002, full audit and agency response (GSA Office of Inspector General, )
DOJ / Procurement kickbacks

The USPS repair estimate came with a built-in kickback.

A contractor admitted paying more than $465,000 to keep repair work coming.

Leonardo DiCaprio Cheers meme: USPS REPAIR ESTIMATE / GRATUITY INCLUDED
USPS REPAIR ESTIMATE / GRATUITY INCLUDED

What happened

DOJ announced on October 27, 2026 that Ilya Zagaryuk pleaded guilty to a conspiracy to pay kickbacks tied to USPS facility repairs.

From May 2022 to February 2024, he paid a prime contractor's employee for steering work. Estimates and invoices were deliberately inflated to fund the kickbacks.

Why CMCoE cares

The apparent repair cost concealed the price of steering the next job.

Regulatory fine print

This is a guilty plea, not merely an accusation. Zagaryuk agreed to $465,347.75 in restitution, jointly and severally with co-defendants. The court had not determined his sentence in the release. The recipient worked for a prime contractor, not USPS. Gratuity included is invented satire, not an actual invoice label; the template actor is unrelated to the case.

Sources

  1. DOJ release 26-1268, October 27 guilty plea (U.S. Department of Justice, )
From the acquisition files / FCC reimbursement

The destruction bill arrived. Proof of destruction did not.

An FCC audit found disposal reimbursements without verifiable evidence that the equipment had been destroyed.

Futurama Fry meme: NOT SURE IT'S DESTROYED / OR JUST INVOICED
NOT SURE IT'S DESTROYED / OR JUST INVOICED

What happened

FCC OIG's September 30, 2026 report reviewed one disposal-related invoice from each of 29 participants reimbursed for decommissioning through June 30, 2024. All 29 lacked proof of destruction.

The invoices and supporting records did not adequately identify the covered equipment or demonstrate that it had been permanently rendered inoperable.

Why CMCoE cares

Paying for equipment disposal does not establish that the security objective was achieved.

Regulatory fine print

Missing proof is not proof that equipment remained in service or that fraud occurred. FCC concurred with this finding and said it amended its process to require documentary disposal evidence, including destruction certificates. The official registry still listed 13 open recommendations on October 28; open does not mean no action. This is a previously unfeatured September report, not a new finding. The program reimburses providers' purchases and disposal rather than awarding all work directly.

Sources

  1. FCC OIG 24-AUD-06-02, findings and management response (FCC Office of Inspector General, )
  2. Official report and recommendation status (Oversight.gov, )
From the acquisition files / Aviation oversight

The last two people retired. The oversight office went with them.

DOE took six months to formally reassign its headquarters aviation-management responsibilities.

Confused Travolta meme: AVIATION OVERSIGHT, 2025 / OUT OF OFFICE. ALL OF US.
AVIATION OVERSIGHT, 2025 / OUT OF OFFICE. ALL OF US.

What happened

DOE OIG's September 25, 2026 report describes the retirement of the Office of Aviation Management's last two employees in February 2025.

From February 28 to September 5, 2025, no Department-level oversight authority was formally designated. Approvals, renewals and guidance were delayed; the office's duties included approving commercial aviation providers after safety audits.

Why CMCoE cares

A contract service can have an approval requirement but nobody formally assigned to carry out the headquarters role.

Regulatory fine print

Field aviation personnel continued their work; this does not say every flight lacked oversight. NNSA formally assumed the responsibilities on September 5, 2025. DOE issued replacement Order 440.2D on August 5, 2026, and it remains listed as current. OIG made one procedural suggestion, not a formal recommendation; management declined formal comments but supplied technical corrections. This feature revisits the documented 2025 lapse, not a current empty office.

Sources

  1. DOE-OIG-26-49, full report and response discussion (DOE Office of Inspector General, )
  2. DOE Order 440.2D, approved August 5, 2026 (U.S. Department of Energy, )