Jane Edwards 
- Commerce OIG has selected Telos’ Xacta platform
- Contract covers AI-assisted compliance tools
- The 2026 FedCiv Summit will explore zero trust, cloud and more
Telos has received a 12-month contract from the Department of Commerce’s Office of Inspector General to provide its Xacta software-as-a-service platform for cyber compliance automation.
As Telos brings its Xacta platform to Commerce OIG, federal civilian agencies continue to update how they manage IT and cybersecurity. The Potomac Officers Club’s 2026 FedCiv Summit on Oct. 29 will convene federal technology officials and industry executives to discuss IT modernization, federal shared services, AI-driven assessment of legacy IT portfolios, zero trust, cloud computing and more. Sign up now to join the conversation on how agencies will invest in their technology priorities.
What Is the Scope of the Commerce OIG Contract?
Under the contract, the company said Thursday the inspector general’s office will use the platform to support its compliance obligations under the Federal Information Security Modernization Act.
Commerce OIG will use Xacta 360, Xacta.io and Xacta.ai to automate its cybersecurity governance, risk and compliance, or GRC, processes. Telos will deploy and configure the platform and train the office’s personnel.
According to the company, Xacta 360 will handle the National Institute of Standards and Technology’s risk management framework, from security controls through system authorization. Xacta.io will consolidate security data for ongoing monitoring, while Xacta.ai will assist with drafting and reviewing compliance materials.
John Wood, chairman and CEO of Telos, said agencies require a platform that supports ongoing compliance and risk management rather than one limited to generating documentation.
“Xacta combines decades of federal risk management experience with practical AI assistance in a secure SaaS environment. That combination gives agencies a strong foundation for modernizing cyber compliance while allowing their teams to focus more of their expertise on managing risk,” Wood said.
What Is Xacta?
Xacta is a cyber GRC platform from Telos that comprises Xacta 360, Xacta.io and Xacta.ai. The suite has achieved Federal Risk and Authorization Management Program, or FedRAMP, authorization at the High impact level, enabling agencies to adopt its software-as-a-service capabilities in environments that handle sensitive unclassified information.
Xacta 360 obtained FedRAMP High authorization in July 2025, followed by Xacta.io and Xacta.ai, which were authorized at the same level in April.
How Has Telos Expanded Its Federal Cyber Work?
The latest award follows Telos’ receipt of an 18-month, $13.7 million task order from the Department of Health and Human Services to modernize cyber governance, risk and compliance and authority to operate processes for the Office of Information Security within the HHS Office of the Chief Information Officer.
Earlier in September, the company secured a contract from the Office of Naval Intelligence to provide customer-hosted Xacta.io subscription licenses, along with technical services supporting the platform’s implementation, integration and administration.
In August, the Air Force selected Telos for a $37.8 million indefinite-delivery/indefinite-quantity contract to help Air Combat Command modernize its cybersecurity framework and integrate AI tools, with work expected to run through January 2031.
In June 2025, Telos secured a one-year, $3.7 million contract option to maintain Air Force access to Xacta.
