In dealing with a lot of these vendors for a very large company myself, I have to say this isn't a single-year change for them. A lot of these vendors probably have their hands deep in the pockets of some of these agencies, and will be reticent to change the model. They'll say they will work with them, however behind the scenes they'll just be strategizing on how to get the exact same cash flows from them.
At the same time, the government is operating from a position with no leverage. Engineering out some of these solutions may take many years and itself comes with a large expense, hence the "lock-in".
The *only* way the CIA will pay less is if they introduce a truly competitive threat. Although they may openly bid on solutions to get the best price, they only way they can actually do this is to start growing their own solutions using Open Source and hire good people. And I can tell you, at the government salary scales I've seen that's going to be a real challenge.
Good luck, "Gus"!