206 Terms

The GovCon Dictionary

Government contracting terms explained in plain English. No jargon, no fluff. Built for small businesses breaking into federal contracting.

A

8(a) Business Development Program SBA: An SBA program that helps small businesses owned by socially and economically disadvantaged individuals compete for federal contracts. Participants can receive sole-source contracts (no competition) up to $5.5 million for services or $8.5 million for manufacturing. The program lasts nine years.
Acquisition BASICS: The process the government uses to buy goods and services from private businesses. It covers everything from identifying a need to awarding and managing a contract. When you hear "federal acquisition," think "federal purchasing."
Adjectival Rating Scale PROPOSALS: The five-tier scale DoD uses to score proposal factors: Outstanding, Good, Acceptable, Marginal, and Unacceptable. Published in the DoD Source Selection Procedures manual (March 2016, as revised). An Outstanding rating requires proposal strengths that significantly exceed requirements with minimal weaknesses. Civilian agencies may use different scales, so always read Section M of your specific solicitation before you write.; Read more →
Allowable Cost COMPLIANCE: A cost the government will reimburse on a cost-type contract. To be allowable, a cost must be reasonable, allocable to the contract, and permitted under FAR Part 31. Your accounting system must separate allowable from unallowable costs before billing the government.; Read more →
APEX Accelerator BASICS: A free government-funded counseling center that helps small businesses win contracts. Formerly called PTACs (Procurement Technical Assistance Centers). There are over 300 locations nationwide. They help with SAM.gov registration, finding opportunities, and writing proposals at no cost.; Read more →
APMP (Association of Proposal Management Professionals) BD: The leading professional association for proposal, bid, and capture management practitioners. APMP publishes industry benchmarks on win rates and capture best practices. Their research, along with Shipley Associates, is widely cited for the finding that the majority of government buying decisions are made before proposals are submitted.; Read more →
ATO (Authorization to Operate) COMPLIANCE: A formal sign-off from an Authorizing Official (AO) granting permission for a federal information system to operate. Issued at the end of the NIST RMF assessment process, after the system\'s controls have been documented in an SSP, tested in a Security Control Assessment, and any residual risk is accepted in writing. Most ATOs are time-bound (typically three years) and require continuous monitoring to stay valid.
Automatic Stay (CICA) BASICS: A legal halt on contract performance that takes effect when a timely bid protest is filed with GAO under the Competition in Contracting Act (31 U.S.C. 3553). If the protest is filed within 10 days of award or within 5 days of a required post-award debriefing (whichever is later), the government must stop work on the protested contract until GAO resolves the case. The stay is one of the most powerful tools a protester has because it gives the agency an incentive to take voluntary corrective action before GAO issues a ruling.; Read more →
Award BASICS: When the government officially selects a contractor and signs the contract. Getting an "award" means you won the contract and can start work. The contracting officer is the only person who can make an award official.
Award Fee COMPLIANCE: A bonus payment the government adds to your contract price based on how well you perform the work. Used on cost-plus-award-fee (CPAF) contracts. The government evaluates your performance periodically and decides how much of the available fee pool you earn.

B

Berry Amendment DLA: A law requiring the Department of Defense to buy food, clothing, fabrics, and hand tools only from U.S. sources. If you sell these items to the military, your products must be 100% domestically sourced. This applies to most DLA Troop Support purchases.
Best Value PROPOSALS: An evaluation method where the government picks the proposal that offers the best combination of quality and price, not just the cheapest option. This means a higher-priced proposal can still win if it offers a better technical approach or stronger past performance.
Bid PROPOSALS: An offer you submit to the government in response to a solicitation. In sealed bidding (IFBs), the lowest-priced responsive bid wins. In negotiated procurements (RFPs), the government evaluates your entire proposal, not just the price.
Bid/No-Bid Decision PROPOSALS: The process of deciding whether a contract opportunity is worth pursuing before you spend time writing a proposal. Good contractors evaluate their win probability, available resources, and fit before committing. Chasing every opportunity wastes time and money.
Blanket Purchase Agreement (BPA) GROWTH: A simplified method for filling recurring government needs for supplies or services. Think of it like a standing account at a store. The government sets up the agreement once, then places individual orders as needed without going through a full bidding process each time.
Bonding PROPOSALS: A guarantee from a surety company that you will complete the contract work. Construction contracts often require bid bonds, performance bonds, and payment bonds. The Miller Act requires bonds on federal construction projects over $150,000.
Buy American Act COMPLIANCE: A federal law requiring the government to prefer U.S.-made products when buying supplies. Manufactured items must have 55% or more domestic content (rising to 75% by 2029). If you sell products to the government, check whether your goods qualify as domestic.

C

C3PAO (CMMC Third Party Assessment Organization) COMPLIANCE: An organization accredited by the Cyber AB to perform CMMC Level 2 certification assessments. Defense contractors handling Controlled Unclassified Information must pass a C3PAO assessment to win or keep DoD contracts that require CMMC Level 2. C3PAOs are independent from the contractor and follow standardized DoD assessment procedures.
CAGE Code SAM: Commercial and Government Entity Code. A five-character ID assigned to your business by the Defense Logistics Agency during SAM.gov registration. You need it to do business with the Department of Defense. It is assigned automatically and usually arrives within five business days after your SAM registration is validated.
Capability Statement BD: A one-page document that tells the government what your business does, who you have worked for, and why they should pick you. It is your business resume for government buyers. Every contractor needs one. Include your NAICS codes, UEI, certifications, and past performance.
Capture Management BD: The process of positioning your company to win a specific contract before the solicitation is even released. It starts 12 to 18 months before bid day and involves meeting with the agency, understanding the requirement, and building relationships. Most contracts are won or lost during capture, not during proposal writing.
CAS (Cost Accounting Standards) COMPLIANCE: A set of rules that govern how you track and report costs on government contracts. Small businesses are fully exempt. Modified CAS (4 standards: 401, 402, 405, 406) kicks in at $35 million per contract. Full CAS (all 19 standards) applies at $100 million in aggregate CAS-covered contracts. Thresholds updated by FY2026 NDAA, effective after June 30, 2026.; Read more →
Ceiling Price COMPLIANCE: The maximum dollar amount the government will pay on a contract. Common on time-and-materials and IDIQ contracts. You cannot bill above the ceiling without a contract modification. Track your spending against the ceiling to avoid working for free.
Certifications and Representations SAM: Self-declarations you make during SAM.gov registration about your business type, size, ownership, and compliance status. These are legally binding. Misrepresenting your status (like claiming to be small when you are not) can result in fines, contract termination, and debarment.
CICA (Competition in Contracting Act) BASICS: The 1984 federal statute (31 U.S.C. 3551-3557) that requires full and open competition in federal contracting and established GAO as the primary forum for bid protests. CICA gives GAO authority to issue the automatic stay that halts contract performance when a timely protest is filed. Most of the protest rules contractors rely on trace back to CICA.; Read more →
CMMC (Cybersecurity Maturity Model Certification) COMPLIANCE: A Department of Defense cybersecurity standard that contractors must meet to handle sensitive government information. Level 1 requires 17 basic practices (self-assessed). Level 2 requires 110 practices with third-party assessment. If you want DoD contracts involving controlled information, you will need CMMC certification.
CMMC Enclave COMPLIANCE: A separate, bounded digital environment where a contractor isolates all Controlled Unclassified Information (CUI) and the systems that process it. By limiting the CUI footprint to a defined enclave, a contractor can reduce the scope of a CMMC Level 2 assessment to only the assets inside the boundary. The enclave approach works best when government work is a distinct part of the business and CUI has not spread into everyday operations.; Read more →
CO (Contracting Officer) BASICS: The government official with legal authority to enter into, change, or terminate contracts. Only the CO can bind the government to a deal. If anyone else at the agency tells you to change the scope of work or spend more money, get it in writing from the CO first.
Color Team Review PROPOSALS: A structured review process used during proposal development. Different review stages have color names: Pink (outline), Red (full draft), Gold (final). Each review checks compliance, persuasiveness, and quality. Even small businesses benefit from having someone review their proposal before submission.
Combined Synopsis/Solicitation PROPOSALS: A single document on SAM.gov that announces a contract opportunity and includes the full solicitation at the same time. Common for simpler purchases. When you see one of these, you can start writing your proposal immediately.
Competitive Range PROPOSALS: The group of proposals that the government considers good enough to move forward in the evaluation process. If your proposal makes the competitive range, you may get a chance to revise it during discussions. If it does not, you are out.
Compliance Matrix PROPOSALS: A table that maps every requirement from the solicitation to the exact section of your proposal that addresses it. It proves you read and responded to everything the government asked for. Building one before you start writing keeps your proposal organized and compliant.
Contract Line Item Number (CLIN) BASICS: A numbered line in a contract that identifies a specific item or service being purchased, along with its quantity and price. Think of CLINs like line items on an invoice. Each one describes something the government is buying and what they are paying for it.
Contract Modification COMPLIANCE: A written change to an existing contract. Only the contracting officer can issue one. Modifications can change the scope, price, schedule, or terms. Never start extra work based on a verbal request. Always get a signed modification first.
Contract Vehicle GROWTH: A pre-established contract that agencies use to buy goods or services without running a full competition each time. GSA Schedule, GWACs, and BPAs are contract vehicles. Getting on one gives you access to a steady stream of task orders from multiple agencies.
Contracting Officer Representative (COR) BASICS: A government employee appointed to monitor your day-to-day performance on a contract. The COR is your main point of contact but cannot make changes to the contract. Only the contracting officer can do that. Build a good working relationship with your COR.
Contractor Team Arrangement (CTA) TEAMING: An agreement between two or more contractors to work together on government task orders. Unlike a joint venture, each company keeps its own contract. CTAs let small businesses combine capabilities to compete for larger orders.
Cooperative Purchasing STATE/LOCAL: Programs that let state and local governments buy from existing federal or multi-state contracts. NASPO ValuePoint, Sourcewell, and GSA cooperative purchasing are the major ones. If you hold one of these contracts, state and local buyers can order from you directly.
COR (Contracting Officer Representative) BASICS: See Contracting Officer Representative. The COR monitors your work on behalf of the contracting officer. They review deliverables, approve invoices, and report on your performance. Treat them as your primary government contact during contract execution.
Cost Pool COMPLIANCE: A grouping of indirect costs that share a common allocation base. Most government contractors use three pools: fringe benefits (allocated on total labor), overhead (allocated on direct labor dollars), and general and administrative or G&A (allocated on total cost input). Fringe typically runs 25-40%, overhead 20-60%, and G&A 8-25% for small service contractors. Each pool is calculated as a rate and applied to contracts consistently.; Read more →
Cost-Plus Contract BASICS: A contract type where the government pays your actual allowable costs plus a fee (profit). Used when the scope of work is uncertain. You must track every cost carefully because the government will audit them. Requires a DCAA-adequate accounting system.
CPARS (Contractor Performance Assessment Reporting System) GROWTH: The government database where agencies rate your performance on contracts above $350,000 (per FAR 42.1502). Five rating levels: Exceptional, Very Good, Satisfactory, Marginal, and Unsatisfactory. Over 50% of all ratings are Satisfactory. Ratings stay in the system for 3 years (6 for construction). You have 14 days to respond to a rating you disagree with.; Read more →
CUI (Controlled Unclassified Information) COMPLIANCE: Government information that is not classified (not secret) but still needs protection. Examples include personnel records, law enforcement data, and technical drawings. If your contract involves CUI, you must follow NIST 800-171 security standards and will need CMMC certification for DoD work.

D

Davis-Bacon Act COMPLIANCE: A federal law requiring contractors on government construction projects over $2,000 to pay workers the local prevailing wage. If you do construction work for the government, you must pay at least the wage rate the Department of Labor sets for your area and trade.
DBE (Disadvantaged Business Enterprise) STATE/LOCAL: A certification for small businesses owned by socially and economically disadvantaged individuals, used primarily on state and local transportation projects funded by the U.S. Department of Transportation. This is separate from the federal 8(a) program. Apply through your state DOT.
DCAA (Defense Contract Audit Agency) COMPLIANCE: The Department of Defense agency that audits contractor accounting systems, costs, and billing. DCAA examined $599.8 billion in contractor costs in FY2024. They check that every dollar you charge is allowable, allocable, and reasonable under federal cost principles. Most relevant for cost-reimbursement and time-and-materials contracts.; Read more →
DCMA (Defense Contract Management Agency) COMPLIANCE: The Department of Defense agency that administers and manages contracts after award on behalf of DoD and other federal customers. DCMA monitors contractor compliance with contract terms, reviews purchasing systems, and conducts cybersecurity assessments through its DIBCAC unit. If your DoD contract is administered by DCMA rather than the buying agency, DCMA is your primary point of contact for contract administration.; Read more →
Debarment COMPLIANCE: When the government bans a company or individual from receiving new federal contracts, usually for fraud, poor performance, or integrity violations. Debarment typically lasts three years. The government checks the SAM.gov exclusions list before making any award.
Debriefing PROPOSALS: A meeting or written explanation from the government about why your proposal was not selected. You have a right to request one under FAR 15.506. Always request a debriefing when you lose. It tells you exactly what to improve for next time.
Defense Industrial Base (DIB) COMPLIANCE: The network of commercial companies and government entities that provide products and services essential to U.S. national security. For CMMC purposes, DIB refers specifically to the roughly 80,000-plus companies in the DoD supply chain that handle Controlled Unclassified Information. Companies in the DIB must meet DFARS 252.204-7012 cybersecurity requirements and, under CMMC Phase 2 (effective November 10, 2026), achieve the appropriate CMMC level for their contracts.; Read more →
DFARS (Defense Federal Acquisition Regulation Supplement) COMPLIANCE: Additional procurement rules that apply specifically to Department of Defense contracts, on top of the standard FAR. DFARS includes requirements for cybersecurity, domestic sourcing, and cost accounting that do not apply to civilian agency contracts.
DIBBS (DLA Internet Bid Board System) DLA: The Defense Logistics Agency online platform where DLA posts solicitations for supplies and you submit quotes. If you sell physical products to the military, this is where you find and bid on DLA opportunities. Access it at dibbs.bsm.dla.mil.
DIBCAC (Defense Industrial Base Cybersecurity Assessment Center) COMPLIANCE: The unit within DCMA that conducts high-confidence cybersecurity assessments of defense contractors. DIBCAC assessments are government-led and carry more authority than contractor self-assessments. DIBCAC has publicly reported that assessed scores across the defense industrial base skew significantly below zero on the SPRS scale, meaning most contractors are less compliant than their own self-assessments suggest.; Read more →
Direct Cost COMPLIANCE: A cost you can trace to a specific contract. Examples: labor hours billed to a project, materials bought for a job, travel for a specific contract. Direct costs are the opposite of indirect costs. Your accounting system must separate the two clearly.; Read more →
DLA (Defense Logistics Agency) DLA: The Department of Defense agency that manages the military supply chain. DLA buys food, fuel, clothing, medical supplies, construction materials, and spare parts. It spends over $52 billion per year and sets aside 47% or more for small businesses. A major opportunity for product suppliers.
DUNS Number SAM: A nine-digit business identifier that was previously required for government contracting. Replaced by the UEI (Unique Entity Identifier) in April 2022. You no longer need a DUNS number. If you see it mentioned in older documents, the UEI is the current equivalent.
Dynamic Small Business Search SAM: A free tool on SAM.gov that lets you search for other small businesses by location, NAICS code, or certification. Government buyers use it to find contractors. Other small businesses use it to find teaming partners. Make sure your SAM.gov profile is complete so you show up in searches.

E

EDWOSB (Economically Disadvantaged Women-Owned Small Business) SBA: A subset of the WOSB program for women-owned small businesses whose owners meet additional economic disadvantage criteria. EDWOSB certification opens more set-aside categories than the standard WOSB program. Certify through certify.sba.gov.
Effectiveness Rate (GAO Protest) BASICS: The percentage of GAO bid protests in which the protester received some form of relief, including voluntary corrective action the agency took before GAO issued a formal ruling. In FY2024, the effectiveness rate was 52%, compared to the 16% sustain rate. The gap exists because agencies often take corrective action voluntarily once a protest is filed and the automatic stay threatens their program schedule.; Read more →
EIN (Employer Identification Number) SAM: A nine-digit number assigned by the IRS that identifies your business for tax purposes. You need an EIN before you can register on SAM.gov. Apply for free at irs.gov. If you already have one for your business, use that same number.
Electronic Funds Transfer (EFT) SAM: The method the government uses to pay contractors directly into their bank account. You must provide your banking information during SAM.gov registration. The government does not send checks. All payments go through EFT.
Entity Registration SAM: The process of registering your business on SAM.gov to be eligible for federal contracts. It is free, takes about an hour to fill out, and requires validation that can take 7 to 10 business days. Your registration expires after one year and must be renewed annually.
EO 14158 (DOGE Executive Order) BASICS: Executive Order 14158, signed January 20, 2025, establishing the Department of Government Efficiency (DOGE) advisory body to identify waste and recommend spending cuts across the federal government. For contractors, EO 14158 is the authority behind DOGE-driven contract cancellations, scope reductions, and agency workforce cuts that reduced contract spending in early 2025. It is not a procurement regulation but its downstream effects on agency budgets and contracting activity are real.; Read more →
EO 14275 (FAR 2.0 Overhaul) BASICS: Executive Order 14275, signed March 20, 2025, directing the FAR Council and OFPP to eliminate non-statutory provisions from the Federal Acquisition Regulation and replace them with plain-language Strategic Acquisition Guidance (SAG). EO 14275 is the authority behind Phase 1 of the FAR 2.0 overhaul, which is reorganizing FAR clauses through agency class deviations. It operates separately from the FY2026 NDAA statutory threshold changes.; Read more →
Evaluation Criteria PROPOSALS: The standards the government uses to judge your proposal. Common criteria include technical approach, past performance, management plan, and price. The solicitation lists them in order of importance. Structure your proposal to address each criterion directly and in the same order.
Exclusions SAM: The SAM.gov list of companies and individuals barred from receiving federal contracts. Also called the "excluded parties list." The government checks this before every award. If a potential teaming partner is on it, do not work with them on government contracts.

F

FAR (Federal Acquisition Regulation) BASICS: The rulebook for how the federal government buys goods and services. It has 53 parts and covers everything from how contracts are advertised to how disputes are resolved. You do not need to memorize it, but you need to know the parts that affect your contracts. Found at acquisition.gov.
FAR 2.0 BASICS: An informal name for the ongoing overhaul of the Federal Acquisition Regulation initiated by EO 14275. Phase 1 involves stripping non-statutory rules from the FAR and publishing them as Strategic Acquisition Guidance (SAG) through agency class deviations. Phase 2 will be formal rulemaking under the Administrative Procedure Act. The FY2026 NDAA threshold changes (TINA, CAS) are separate statutory actions that are often discussed alongside FAR 2.0 but operate on their own timelines.; Read more →
FCI (Federal Contract Information) COMPLIANCE: Information created or collected for the government under a contract that is not intended for public release. Less sensitive than CUI but still requires basic protection. CMMC Level 1 (17 security practices) applies to contractors who handle FCI.
FedMall DLA: An online marketplace at fedmall.mil where government buyers purchase commercial products. If you sell off-the-shelf items, FedMall lets government agencies find and buy your products directly. Registration is free for SAM.gov-registered vendors.
FedRAMP (Federal Risk and Authorization Management Program) COMPLIANCE: A government-wide program that standardizes how federal agencies authorize cloud services. Cloud Service Providers complete a security assessment based on NIST 800-53, work with a Third-Party Assessment Organization (3PAO), and earn a FedRAMP authorization (Low, Moderate, or High baseline) before federal agencies can purchase the service. Authorizations are listed publicly at marketplace.fedramp.gov.
FedRAMP Moderate COMPLIANCE: The mid-tier FedRAMP authorization baseline, based on NIST SP 800-53 Moderate impact controls, required when a cloud service handles federal data whose unauthorized disclosure could cause serious harm. Most federal agency cloud procurements require FedRAMP Moderate authorization or higher. For defense contractors, FedRAMP Moderate for collaboration tools (email, file storage) is often cited as one acceptable path toward CMMC Level 2 compliance for those specific systems.; Read more →
Firm Fixed Price (FFP) BASICS: A contract type where you agree to do the work for a set price, regardless of your actual costs. If the job costs you less than expected, you keep the difference. If it costs more, you absorb the loss. FFP is the most common contract type and carries the most risk for the contractor.
First Article Testing DLA: A requirement in some contracts (especially DLA) to produce and test a sample item before full production begins. The government inspects the sample to verify it meets specifications. Until your first article passes, you cannot ship the full order.
FISMA (Federal Information Security Modernization Act) COMPLIANCE: The federal law that requires every federal agency to develop, document, and run an information security program for the systems that support its operations. Originally passed in 2002 and modernized in 2014, FISMA flows down to contractors who operate systems on behalf of an agency. Compliance is implemented through the NIST Risk Management Framework and reported annually to OMB.
FPDS (Federal Procurement Data System) BD: A free government database at fpds.gov that records details on every federal contract award. Use it to research who won contracts, how much they were paid, and which agencies buy what you sell. Essential for market research before you bid.
Fringe Benefits Rate COMPLIANCE: The percentage added to labor costs to cover employee benefits like health insurance, retirement contributions, paid leave, FICA taxes, and workers compensation. Allocated on total labor dollars (both direct and indirect employees). On government contracts, fringe is an indirect cost that must be calculated and applied consistently. DCAA reviews this rate during audits.; Read more →
Full and Open Competition BASICS: When a contract opportunity is open to all businesses, regardless of size or certifications. No set-asides, no restrictions. Anyone who meets the requirements can submit a proposal. Most large federal contracts use full and open competition.
FY2026 NDAA (National Defense Authorization Act) BASICS: The National Defense Authorization Act for Fiscal Year 2026, enacted December 18, 2025. For government contractors, the most significant provisions are Section 1804(c), which raised the Truth in Negotiations Act (TINA) threshold to $10 million for contracts awarded after June 30, 2026, and Section 1806, which raised the Cost Accounting Standards (CAS) thresholds. These are statutory changes with their own effective dates, separate from the EO 14275 / FAR 2.0 overhaul.; Read more →

G

GAO (Government Accountability Office) BASICS: The independent federal agency that investigates how the government spends taxpayer money. In GovCon, GAO is best known for handling bid protests. If you believe a contract was awarded unfairly, you can file a protest with GAO within 10 days of the award.
GAUGE Report BD: The annual survey of government contractors published by Unanet and CohnReznick. The GAUGE Report tracks industry trends including win rates, revenue growth, and operational challenges across government contracting firms. The 2021 report found that 75% of approximately 1,500 surveyed firms reported win rates of 50% or less.; Read more →
GCC High (Microsoft Government Community Cloud High) COMPLIANCE: A version of Microsoft 365 (email, Teams, SharePoint) built for U.S. defense contractors and federal agencies that handle Controlled Unclassified Information. GCC High meets the data residency and access control requirements of DFARS 252.204-7012 and is one of the most common starting points for small defense contractors building a CMMC enclave. A properly configured GCC High tenant does not automatically equal CMMC compliance; additional controls are required.; Read more →