Summary. Selling to the federal government is not selling with extra paperwork. It is a different body of contract law: terms incorporated by regulation whether or not anyone negotiated them, a unilateral right in the buyer to change and to terminate, mandatory disclosure obligations running against the contractor's own interest, and a protest system letting competitors challenge an award before performance begins. This article covers how federal procurement is structured, what contract types mean for risk, how protests work at GAO and the Court of Federal Claims and when they are worth filing, the Contract Disputes Act claims process, and the compliance obligations that create the most exposure for new entrants.
A software company wins its first federal contract — a $4.2 million task order to build a case management system for a small agency. The team is experienced, the price was competitive, and the technical proposal was excellent.
Eighteen months later the company has lost money on the contract and is defending a False Claims Act investigation.
What happened, in order. The agency issued eleven change orders, each described as "clarification," which the project manager implemented because the customer asked. None was priced. The company's cost accounting could not separate the changed work from the base scope, so its request for equitable adjustment was denied for lack of proof. Its timekeeping system allowed employees to record hours to whatever charge code they selected, and the DCAA auditor found labor charged to the contract that had been performed on a commercial project. The subcontractor it used to satisfy the small business subcontracting plan performed almost none of the work. And the company certified annually that it had no reportable violations while its own general counsel had documented the labor charging problem eleven months earlier.
Each of those is a distinct failure of a federal-contracting-specific control, and each would have been unremarkable in a commercial contract. That gap is the subject of this article.
The framework
The Federal Acquisition Regulation, codified at 48 C.F.R. Chapter 1, governs acquisitions by executive agencies. Agencies supplement it — the DFARS for Defense, the DEAR for Energy, the HHSAR for Health and Human Services, and so on — and the supplements are frequently where the operative requirements live.
Key structural facts about the FAR:
Its clauses are incorporated into the contract, often by reference to a clause number rather than by reproducing the text. FAR 52.212-4 alone rewrites the commercial terms most companies assume apply.
Under the Christian doctrine, a mandatory clause expressing a significant procurement policy is read into the contract by operation of law even if it was omitted. G.L. Christian & Associates v. United States, 312 F.2d 418 (Ct. Cl. 1963). A contractor cannot rely on the absence of a required clause.
The contracting officer is the only person who can bind the government. Program managers, technical representatives, and agency staff cannot — and direction from them is not a change order, no matter how insistent. A contractor that performs additional work at the direction of a COR without the contracting officer's written direction has performed a constructive change at best, and volunteered at worst.
Authority is limited and published. A contracting officer's warrant states a dollar ceiling. Actions beyond it are not binding, and the government is not estopped by an unauthorized official's conduct — a rule with a long and unforgiving pedigree.
Getting the contract
Market research and the acquisition planning phase precede the solicitation. This is when a company can most effectively influence a requirement — by responding to sources sought notices, submitting capability statements, participating in industry days, and commenting on draft solicitations. A company that first learns of a requirement when the RFP is posted is usually too late.
Competition. The Competition in Contracting Act requires full and open competition with enumerated exceptions — only one responsible source, unusual and compelling urgency, industrial mobilization, international agreement, statutory authorization, national security, and public interest — each requiring a written justification and approval at increasing levels for larger values.
Methods.
Sealed bidding (FAR Part 14) — award to the responsive, responsible bidder with the lowest price. Bids are opened publicly. No discussions. Used where the requirement is definite and price is the only discriminator.
Negotiated procurement (FAR Part 15) — the norm for anything complex. A request for proposals states the evaluation factors and their relative importance. The agency may award on initial proposals or establish a competitive range, conduct discussions — which must be meaningful and must address deficiencies and significant weaknesses — and request final proposal revisions. Evaluation is either best-value tradeoff, permitting the agency to pay more for superior non-price merit, or lowest price technically acceptable, which permits no tradeoff at all.
Commercial products and services (FAR Part 12) — streamlined terms, reduced clause load, and no cost or pricing data. Whether an item qualifies as commercial is worth fighting for.
Simplified acquisition (FAR Part 13) — below the simplified acquisition threshold, with reduced procedures, and micro-purchases below a lower threshold requiring no competition at all.
GSA Schedules and other multiple-award vehicles (FAR Subpart 8.4 and Part 16.5) — a contract to hold a contract, followed by task or delivery order competitions among holders. Most federal services work now flows through these. Note the protest limitation: task and delivery order protests are barred except on grounds that the order increased the scope, period, or maximum value of the underlying contract, or (for orders above a statutory threshold, which differs between defense and civilian agencies) at GAO only.
Small business programs (FAR Part 19) — the rule of two requires set-aside for small business when the contracting officer expects offers from at least two responsible small businesses at fair market prices. Socioeconomic programs include 8(a) business development, HUBZone, service-disabled veteran-owned, and women-owned small business, with sole-source authority at various thresholds.
Size and affiliation is the trap. Size is determined by NAICS code, by employee count or receipts averaged over a period, and including affiliates — entities controlled by or under common control with the concern, through ownership, management, contractual relationships, identity of interest among family members, newly organized concern rules, or the ostensible subcontractor rule, under which a subcontractor performing the primary and vital work makes the prime a joint venturer. Limitations on subcontracting require the small business to perform a minimum percentage of the work — generally 50 percent of the amount paid for services and supplies, with different rules for construction. Misrepresenting size is a False Claims Act problem and a criminal one; the statute presumes loss to the government equal to the full contract value.
Contract types and where the risk sits
Fixed price — the contractor bears cost risk entirely. Variants include firm-fixed-price, fixed-price with economic price adjustment, fixed-price incentive (with a target cost, target profit, share ratio, and ceiling price), and fixed-price with award fee.
Cost reimbursement — the government bears cost risk, and the contractor is paid allowable, allocable, reasonable costs plus a fee. Variants: cost-plus-fixed-fee, cost-plus-incentive-fee, cost-plus-award-fee, and cost or cost-sharing. These require an adequate accounting system determined adequate by DCAA before award, and they carry the full weight of the cost principles at FAR Part 31 and, above thresholds, the Cost Accounting Standards.
Time-and-materials and labor-hour — fixed hourly rates plus materials at cost. Permitted only when no other type is suitable, with a ceiling price and a determination and findings. The recurring compliance problem is labor category qualification: billing an employee at the senior rate who does not meet the contract's education and experience requirements is a false claim.
Indefinite delivery vehicles — IDIQ, requirements, and definite-quantity — establish terms and compete orders later. IDIQ contracts guarantee only a minimum, which is frequently trivial.
Allowability is the concept that surprises commercial contractors most. FAR Part 31 makes entire categories of ordinary business cost unallowable on government contracts: entertainment, alcohol, most lobbying, bad debts, contingency reserves, fines and penalties, most legal costs of defending against government claims where the contractor does not prevail, advertising other than recruitment, and compensation above statutory caps. Unallowable costs must be identified and excluded, and claiming them — even in an indirect pool — is a potential false claim. A compliant accounting system segregates them at the point of entry.
Bid protests
A protest challenges the terms of a solicitation or the award of a contract. Three forums.
The agency — cheapest and fastest, decided by the agency that made the decision. Rarely successful, but it preserves options and can be filed within a short window with limited cost.
The Government Accountability Office — the primary forum. 31 U.S.C. §§ 3551–3556 and the bid protest regulations at 4 C.F.R. Part 21.
- Timeliness is jurisdictional and unforgiving. A protest of solicitation improprieties apparent on the face must be filed before the time set for receipt of proposals. Any other protest must be filed within 10 days of when the protester knew or should have known the basis. If the protester requested a required debriefing, the protest is due within 10 days after the debriefing date.
- The automatic stay (CICA stay) is the reason the deadline matters more than anything else. A protest filed within 10 days after award, or within 5 days after a required debriefing, triggers a statutory suspension of contract performance. Miss it and the awardee performs while the protest is pending, which changes the practical value of winning to nearly nothing. The agency may override the stay on written findings of urgent and compelling circumstances or best interests of the United States, and an override is itself challengeable at the Court of Federal Claims.
- GAO decides within 100 days. A protective order permits outside counsel — but not company personnel — to see the agency report, source selection documents, and the awardee's proposal.
- Relief is a recommendation: re-evaluate, amend the solicitation and recompete, terminate and reaward, or reimburse proposal preparation costs and protest costs including attorneys' fees. Agencies nearly always follow it.
- The effectiveness rate matters more than the sustain rate. GAO sustains a small minority of protests, but a substantially larger share obtain relief because the agency takes voluntary corrective action — which is frequently the realistic objective.
The Court of Federal Claims — jurisdiction under 28 U.S.C. § 1491(b). No automatic stay; a protester must move for a preliminary injunction and satisfy the ordinary equitable factors. Review is on the administrative record under the Administrative Procedure Act standard: whether the agency acted arbitrarily, capriciously, or contrary to law. Available for task order protests otherwise barred? No — the task order bar applies here too, and the split between forums on scope challenges is worth checking before filing. Appeals go to the Federal Circuit.
Standing requires an interested party — an actual or prospective offeror whose direct economic interest is affected. A protester that would not be next in line for award frequently lacks it.
Prejudice is required, and it is where most protests die: the protester must show a substantial chance it would have received the award but for the error. Bannum, Inc. v. United States, 404 F.3d 1346 (Fed. Cir. 2005).
Waiver. Under Blue & Gold Fleet, L.P. v. United States, 492 F.3d 1308 (Fed. Cir. 2007), a party who knew of a patent solicitation defect and did not object before the close of bidding waives the challenge. Read the solicitation for defects on day one, not after losing.
Common winning grounds: unequal or misleading discussions; evaluation inconsistent with the stated criteria; unreasonable or undocumented technical or past performance evaluation; failure to conduct a proper price realism or cost realism analysis in a cost-reimbursement or professional services procurement; an inadequately documented best-value tradeoff that pays a premium without explaining why; disparate treatment of proposals; organizational conflicts of interest — unequal access to information, biased ground rules, or impaired objectivity — that were neither identified nor mitigated; and latent solicitation ambiguity.
Common losing grounds: disagreement with the agency's technical judgment; a protest of a rating rather than of the reasoning; and anything untimely.
The decision to protest should account for the customer relationship. Protests are common enough in some agencies to be unremarkable and rare enough in others to be memorable. A protest of a small award against an agency the company depends on is a different decision from a protest of a recompete it is losing anyway.
Debriefings are the information source. For competitive procurements above the simplified acquisition threshold, an unsuccessful offeror may request a debriefing within 3 days of notice, and the required debriefing must include the evaluation of the offeror's proposal, the overall ranking, the rationale for award, and a summary of the awardee's technical evaluation. Defense agencies use an enhanced debriefing process permitting written questions and extending the protest clock until the answers are delivered. Request it in writing, immediately, and calendar the protest deadline from it.
Performing the contract
The Changes clause (FAR 52.243-1 through -7, depending on contract type) gives the contracting officer the unilateral right to make changes within the general scope of the contract — in drawings, designs, specifications, method of shipment, place of delivery, and for services, the description of services. The contractor must perform and is entitled to an equitable adjustment in price and schedule.
Constructive changes — direction that functions as a change without the paperwork — are the most litigated concept in the field. Elements: government conduct amounting to an order or acceptance, beyond the contract's requirements, by a person with authority (or subsequently ratified), causing increased cost. The recurring failures are the absence of contemporaneous notice and the absence of segregated cost data. Notify in writing, immediately, and set up a separate charge code for the changed work. Both are cheap; without them the claim is unprovable.
Other adjustment clauses: Differing Site Conditions for construction (Type I, conditions differing materially from those indicated; Type II, unknown and unusual conditions); Suspension of Work; Government Delay of Work; Government Property; and Stop-Work Orders.
Termination for convenience (FAR 52.249-2 and related) — the government may terminate any contract, in whole or in part, for its own convenience, at any time. This is the single greatest structural difference from commercial contracting. The contractor recovers costs incurred, a reasonable profit on work performed, and settlement expenses — but not anticipated profit on unperformed work. Price the risk accordingly, and preserve the cost records that will support a termination settlement proposal.
Termination for default — for failure to deliver, to perform, or to make progress. Consequences are severe: reprocurement costs, loss of unliquidated progress payments, and a past performance record that impairs future awards. Defenses: excusable delay (causes beyond the contractor's control and without its fault or negligence, including acts of God, government acts in a sovereign capacity, epidemics, and certain subcontractor failures), waiver by the government's continued acceptance after the delivery date, prior material breach, and impossibility. A default termination converted to a termination for convenience is a standard remedy and a common outcome.
Past performance is recorded in CPARS, feeds into future evaluations, and is one of the few things in this system with compounding effects. Respond to every draft evaluation within the comment window; an unrebutted negative rating follows the company for years.
Claims and disputes
The Contract Disputes Act, 41 U.S.C. §§ 7101–7109, governs.
A claim is a written demand seeking, as a matter of right, payment of a sum certain, adjustment of contract terms, or other relief. A routine request for payment is not a claim unless it is disputed.
Certification is required for claims over $100,000: that the claim is made in good faith, the supporting data are accurate and complete to the best of the contractor's knowledge and belief, the amount accurately reflects the adjustment for which the contractor believes the government is liable, and the certifier is authorized. A defective certification can be corrected; the absence of a certification is jurisdictional.
Timing. A claim must be submitted within six years of accrual. The contracting officer must issue a final decision within 60 days for claims of $100,000 or less, and for larger claims must either decide within 60 days or state a firm date. Failure to decide is a deemed denial.
Appeal goes to the agency Board of Contract Appeals within 90 days, or to the Court of Federal Claims within 12 months. Both are de novo. Boards are faster, cheaper, and staffed by judges who do nothing else; the court offers broader discovery and a different appellate posture. Both appeal to the Federal Circuit.
Government claims run the other direction and require a contracting officer's final decision as well — for defective pricing, unallowable costs, liquidated damages, or reprocurement costs.
Interest runs from receipt of the claim by the contracting officer, at the Treasury rate — one of the few features that rewards submitting a claim promptly.
Subcontractors have no privity with the government and cannot bring a CDA claim. They proceed by sponsorship: the prime submits a pass-through claim on the subcontractor's behalf. Under the Severin doctrine, the prime must remain liable to the subcontractor for the pass-through to be viable, which is why subcontract release language matters enormously.
Compliance
The obligations that create the most exposure for companies new to the market:
Mandatory disclosure. FAR 52.203-13 requires a contractor to timely disclose in writing to the agency Inspector General, with a copy to the contracting officer, credible evidence of a violation of federal criminal law involving fraud, conflict of interest, bribery, or gratuity violations, a violation of the civil False Claims Act, or a significant overpayment. Knowing failure to disclose is a cause for suspension or debarment. This is an affirmative obligation to report oneself, and it is a genuine departure from commercial practice.
Truthful cost or pricing data (TINA), 41 U.S.C. §§ 3501–3509 — for negotiated contracts above the threshold without an exception (commercial items, adequate price competition, or prices set by law), the contractor must submit certified cost or pricing data and certify that they are accurate, complete, and current as of the agreement date. Understated or omitted data supports a defective pricing claim years later, with the government entitled to reduce the price by the amount of the overstatement.
Labor standards. The Service Contract Act (41 U.S.C. §§ 6701–6707) requires prevailing wages and fringe benefits for service employees per a wage determination; the Davis-Bacon Act (40 U.S.C. §§ 3141–3148) does the same for construction; the Contract Work Hours and Safety Standards Act governs overtime. Violations produce back wages, withholding, and debarment.
Domestic preference. The Buy American Act requires domestic end products with a domestic content threshold that has been increasing; the Trade Agreements Act substitutes a substantial-transformation test for designated countries above a threshold; and the Berry Amendment and specialty metals restrictions apply to defense items.
Cybersecurity. FAR 52.204-21 imposes fifteen basic safeguarding requirements on all contractors handling federal contract information. DFARS 252.204-7012 requires defense contractors handling covered defense information to implement NIST SP 800-171 and to report cyber incidents within 72 hours. CMMC adds third-party certification at higher levels. Note that these flow down to subcontractors, and that a false representation about NIST 800-171 implementation status has already produced False Claims Act settlements.
Other recurring obligations: Procurement Integrity Act restrictions on obtaining contractor bid or proposal information and source selection information, and post-employment restrictions on former officials; organizational conflict of interest identification and mitigation; small business subcontracting plans with good-faith effort obligations and semiannual reporting; Equal Employment Opportunity obligations under Executive Order 11246 as currently in effect, Section 503, and VEVRAA; anti-human-trafficking compliance plans; SAM registration and annual representations and certifications; Section 889 prohibitions on covered telecommunications equipment; and whistleblower protections at 41 U.S.C. § 4712, which prohibit retaliation and cannot be waived.
Suspension and debarment is the existential risk. A suspension is immediate, based on adequate evidence, pending investigation. Debarment follows a conviction, civil judgment, or a preponderance showing of a cause — including a serious business integrity failure or a knowing failure to disclose. Both are exclusions from all federal contracting, government-wide, and both are discretionary decisions that turn on present responsibility: whether the contractor can be trusted now. That posture rewards an organization that self-disclosed, cooperated, disciplined responsible individuals, and fixed the control — and punishes one that did not.
What to build before the first contract
- An accounting system that segregates direct and indirect costs, tracks costs by contract and by contract line item, identifies and excludes unallowable costs at entry, and produces the reports DCAA expects.
- A timekeeping system with daily entry by the employee, supervisor approval, an audit trail for corrections, and training that says explicitly that hours are charged where worked and nowhere else.
- Contract review by someone who reads the incorporated clauses, not the cover page.
- Change control that routes every request for additional work to the contracting officer and opens a charge code.
- A compliance program with a written code, training, a hotline, and — critically — a documented process for evaluating whether something is credible evidence requiring disclosure.
- Flow-down management for subcontracts, because the prime is responsible for the subcontractor's compliance with flowed-down clauses.
- Calendar discipline for representations, certifications, subcontracting plan reports, CPARS comment windows, and protest deadlines.
Conclusion
Federal contracting rewards preparation in places commercial contracting does not. Three points carry the most weight for a company entering the market.
Deadlines are jurisdictional. The five-day post-debriefing protest window, the ten-day protest rule, the ninety-day board appeal, the six-year claim limitation, the seventy-two-hour cyber incident report. None of them bends, and missing the stay deadline in particular converts a winnable protest into an academic exercise.
Documentation is the whole case. Contemporaneous written notice of a change, a separate charge code for the changed work, daily timekeeping, and segregated unallowable costs. Every one of the failures in the opening example was a documentation failure, not a legal one.
The government's rights are asymmetric by design. It can change the work unilaterally, terminate for its own convenience without paying lost profit, audit years after performance, and exclude a contractor from the entire federal market on a discretionary finding about present responsibility. A contractor that prices and staffs a federal contract as though it were a commercial one has mispriced it.
A worked example
A 60-person engineering firm with commercial clients decides to pursue federal work. Here is the sequence that actually determines whether it succeeds.
Registration and positioning. The firm registers in SAM, obtains a Unique Entity Identifier, selects NAICS codes deliberately (the code drives the size standard, and the size standard drives set-aside eligibility), completes the annual representations and certifications carefully rather than by clicking through, and confirms it qualifies as small under the codes it will pursue. It runs an affiliation analysis: the founder's spouse owns a related consultancy, which raises an identity-of-interest question that is resolved and documented before any certification is made.
Market research. Rather than waiting for solicitations, the firm responds to three sources sought notices, submits capability statements, and requests debriefings on two awards it did not bid. It identifies an incumbent contract expiring in fourteen months and begins building past performance references that will be relevant to it.
Teaming. It signs a teaming agreement to subcontract on a larger award. Counsel reviews it for the two provisions that matter: whether it is enforceable at all (many teaming agreements are agreements to agree and fail on that ground), and whether the work share and the ostensible subcontractor analysis are consistent with the prime's small business representation.
The first solicitation. The firm reads the RFP on the day it posts, not the week before proposals are due. It identifies an ambiguity in the labor category qualifications and an evaluation factor that appears to favor the incumbent. It submits questions during the Q&A period — which both clarifies the record and preserves any later challenge, because a defect apparent on the face of the solicitation that is not raised before the close of bidding is waived under Blue & Gold.
Pricing. The firm builds an indirect rate structure, identifies unallowable costs and excludes them from the pools, and prices the termination-for-convenience risk into its fixed-price line items. It declines to bid one line item as time-and-materials because it cannot yet document labor category qualifications for two of its staff.
The loss and the debrief. The firm does not win. It requests a debriefing within three days of notice, in writing. The debriefing reveals that the agency downgraded its past performance based on a reference the firm had never seen — and that the reference described a different company with a similar name. The firm files a GAO protest within five days of the debriefing, triggering the automatic stay. The agency takes corrective action, re-evaluates, and awards the contract to the firm.
Performance. The project manager receives an email from the technical representative asking for two additional deliverables. Under the firm's new change control procedure, he does not begin work. He forwards the request to the contracting officer, states that the work appears to be outside the statement of work, requests written direction, and opens a segregated charge code the moment direction is given. The equitable adjustment that follows is granted in full, because the cost data separating the changed work exists.
Audit. Eighteen months later DCAA reviews the firm's incurred costs. The timekeeping system shows daily entry, supervisor approval, and an audit trail. Unallowable costs were identified at entry and excluded from the indirect pools. The audit closes with no questioned costs.
None of that required unusual sophistication. It required knowing which deadlines are jurisdictional, which documents must be created contemporaneously, and which person can actually bind the government.
Frequently asked questions
Do I need a lawyer to bid? Not for a simplified acquisition. For anything with cost reimbursement, teaming, subcontracting plans, or CMMC flow-downs, review before submission is far cheaper than remediation after award.
How long does it take to win federal work? Realistically, twelve to twenty-four months from registration to a first meaningful award, and the firms that shorten it do so by subcontracting first.
Can I negotiate FAR clauses? Generally no. Mandatory clauses apply, and the Christian doctrine reads them in even when omitted. What is negotiable is the statement of work, the contract type, the ceiling, and — sometimes — whether an item qualifies as commercial, which changes the clause load substantially.
What is the most common first-year mistake? Performing work directed by someone other than the contracting officer, without written direction and without a segregated charge code.
Is a protest going to blacklist me? Protests are routine in some agencies and rare in others. The realistic considerations are cost, the strength of the prejudice showing, and whether the relationship matters more than the award. Filing an untimely or unsupported protest is worse for the relationship than filing a strong one.
What triggers debarment? Convictions and civil judgments, but also a preponderance showing of serious business integrity failures — including a knowing failure to make a required disclosure. The determinative question is always present responsibility, which is why self-disclosure, cooperation, discipline, and remediation change outcomes.
What happens if the government just stops paying? Submit a certified claim to the contracting officer and get a final decision or a deemed denial, then appeal to the board or the Court of Federal Claims. Interest runs from the date the claim is received, which is a reason to submit promptly rather than to keep negotiating informally. Stopping work in response to nonpayment is dangerous: absent a clear material breach, it exposes the contractor to a default termination, and a default termination is far harder to undo than a payment dispute is to litigate.
Does a subcontractor have any direct recourse? Not against the government. A subcontractor's remedies run against the prime under the subcontract, and its access to the disputes process is entirely through prime sponsorship of a pass-through claim. Negotiate that sponsorship obligation expressly, along with a survival of liability provision that keeps the Severin doctrine from defeating the claim.
Related articles
- Government Contract Bid and Proposal Compliance Checklist — the pre-submission review.
- Government Contracting Toolkit — the full roadmap from market research to closeout.
- Healthcare Fraud and Abuse: The Anti-Kickback Statute, the Stark Law, and the False Claims Act — the False Claims Act in its other major setting.
- Regulatory Investigations Toolkit — subpoenas, CIDs, and the mandatory disclosure decision.
- Corporate Governance for Closely Held Companies: Boards, Minutes, and Decisions That Hold Up — the program the suspension and debarment official will evaluate.
- Cybersecurity Program Toolkit — NIST 800-171, CMMC, and incident reporting.
- Wage and Hour Law Under the FLSA: Overtime, Exemptions, and Off-the-Clock Work — the baseline the Service Contract Act builds on.
- Choice of Law, Forum Selection, and Where Your Dispute Will Be Decided — and why none of it applies here.
- Sovereign Immunity and Suing the Government: The FTCA, Section 1983, and State Tort Claims Acts — the waiver framework outside contract.
- Whistleblower and Retaliation Claims — the non-waivable protections at 41 U.S.C. § 4712.
This article is provided for general informational purposes and does not constitute legal advice. Federal procurement rules change frequently, agency supplements impose additional requirements, and thresholds are adjusted periodically. Consult qualified government contracts counsel before submitting a proposal, filing a protest, or making a disclosure.