Summary. Federal contracting is not commercial contracting with extra paperwork. It is a distinct body of law in which terms are incorporated by regulation whether or not anyone negotiated them, the buyer may change the work and terminate for its own convenience, deadlines are jurisdictional, and the contractor must report itself. This toolkit runs the full arc: registration and positioning, the size and affiliation analysis that determines eligibility, proposal preparation and pricing, the accounting and timekeeping systems that must exist before a cost-reimbursement award, performance including changes and claims, protests and their clocks, the compliance obligations that create the most exposure, and the suspension and debarment risk that governs everything else.

What this toolkit is for, and who should use it

The companies that fail in this market do not fail on the technical work. They fail because they performed changes directed by someone who could not bind the government, because their timekeeping could not separate contract labor from commercial labor, because a size representation did not survive an affiliation analysis, or because they missed a five-day window after a debriefing.

This toolkit is for a company entering the federal market or growing inside it, and for the counsel advising it. It assumes a small or mid-sized business rather than a large prime with an established government contracts department.

Roadmap at a glance

  1. Registration and positioning — SAM, NAICS, and getting known before the solicitation.
  2. Size and eligibility — affiliation, set-asides, and limitations on subcontracting.
  3. Teaming and subcontracting.
  4. Reading the solicitation — and the waiver rule that runs from day one.
  5. Proposal preparation — compliance before persuasion.
  6. Pricing and the systems behind it — accounting, timekeeping, and allowability.
  7. Award, debriefing, and protest — the clocks that are jurisdictional.
  8. Performance — changes, notice, and the records that prove them.
  9. Claims and disputes under the Contract Disputes Act.
  10. Compliance obligations, including the duty to disclose yourself.
  11. The questions companies actually ask.

Stage 1 — Registration and positioning

  • Register in SAM, obtain a Unique Entity Identifier, and complete the annual representations and certifications carefully rather than by clicking through. They are enforceable under the False Claims Act.
  • Select NAICS codes deliberately, because the code drives the size standard and the size standard drives set-aside eligibility.
  • Obtain any facility or personnel clearances the target work requires, which take months.
  • Get known before the solicitation. Respond to sources sought notices, submit capability statements, attend industry days, and comment on draft solicitations. A company that first learns of a requirement when the RFP posts is usually too late.
  • Build past performance deliberately, including through subcontracting, because relevant and recent references are an evaluation factor in nearly every procurement.

Resources

Stage 2 — Size, affiliation, and set-asides

Size is determined by NAICS code, by employee count or receipts averaged over a period, and including affiliates. Run the analysis before certifying: common ownership, common management, identity of interest among family members, the newly organized concern rule, economic dependence, and the ostensible subcontractor rule under which a subcontractor performing the primary and vital requirements makes the prime a joint venturer.

Socioeconomic programs — 8(a), HUBZone, service-disabled veteran-owned, and women-owned small business — each have their own eligibility and certification requirements, and sole-source authority at various thresholds.

Limitations on subcontracting require the small business to perform a minimum percentage of the work, generally 50 percent of the amount paid for services and supplies, with different rules for construction.

Misrepresenting size is a False Claims Act problem and a criminal one, and the statute presumes loss equal to the full contract value.

Stage 3 — Teaming and subcontracting

  • Paper the teaming agreement before proposal work begins, addressing exclusivity, work share, proposal cost, proprietary information, and — critically — whether it is enforceable at all, since many teaming agreements are agreements to agree.
  • Confirm the work share is consistent with the size representation and with the limitations on subcontracting.
  • Prepare the small business subcontracting plan where required, with realistic goals, a documented basis, and the semiannual reporting the plan obligates.
  • Flow down the mandatory clauses, and confirm subcontractors can actually comply — cybersecurity, labor standards, and domestic preference clauses are the ones subcontractors most often cannot meet.
  • Remember that subcontractors have no privity with the government; their claims travel through prime sponsorship, and the subcontract's release language determines whether a pass-through claim survives.

Stage 4 — Reading the solicitation

Read Section L (instructions) and Section M (evaluation) first and build a compliance matrix mapping every requirement to a proposal location.

Identify defects on day one. Under Blue & Gold Fleet, L.P. v. United States, 492 F.3d 1308 (Fed. Cir. 2007), a party who knew of a patent solicitation defect and did not object before the close of bidding waives the challenge. Submit questions during the Q&A window, in writing.

Track amendments and acknowledge each one; failure to acknowledge a material amendment renders a bid nonresponsive.

Note the contract type, the set-aside status, the NAICS code, and every deadline.

Stage 5 — Proposal preparation

Follow Section L exactly — format, page limits, file naming, and submission method. Non-compliance is a basis for rejection and requires no explanation.

Address every evaluation factor in Section M, in the order and with the emphasis assigned.

Analyze and disclose any organizational conflict of interest — unequal access to information, biased ground rules, or impaired objectivity — with a mitigation plan. An unaddressed OCI is a common and avoidable elimination.

Confirm compliance with the Procurement Integrity Act: no improperly obtained contractor bid or proposal information or source selection information, and no post-employment restriction violated by a recent hire.

Run a compliance review by someone who did not write the proposal, against the matrix, and submit early.

Resources

Stage 6 — Pricing, and the systems behind it

Contract type determines who bears cost risk. Fixed price puts it on the contractor. Cost reimbursement puts it on the government and requires an accounting system determined adequate by DCAA before award, plus the cost principles at FAR Part 31 and, above thresholds, the Cost Accounting Standards. Time-and-materials requires labor category qualification for every billed person, because billing an unqualified person at a category rate is a false claim.

Allowability surprises commercial contractors: entertainment, alcohol, most lobbying, bad debts, contingencies, fines, most legal costs of unsuccessfully defending government claims, advertising other than recruitment, and compensation above statutory caps are unallowable and must be identified and excluded — including from indirect pools.

Build, before the first award:

  • An accounting system segregating direct and indirect costs, tracking by contract and contract line item, and identifying unallowable costs at entry.
  • A timekeeping system with daily employee entry, supervisor approval, an audit trail for corrections, and training that says hours are charged where worked and nowhere else.
  • Indirect rate structure and support.

Where certified cost or pricing data is required, confirm it is accurate, complete, and current as of the agreement date, because defective pricing claims arise years later.

Stage 7 — Award, debriefing, and protest

The deadlines are jurisdictional and unforgiving.

  • Request a debriefing in writing within 3 days of notice. For defense procurements, use the enhanced debriefing process, which extends the clock.
  • A protest of a solicitation impropriety apparent on the face must be filed before the time set for receipt of proposals.
  • Any other protest must be filed within 10 days of when the basis was known or should have been known, or within 10 days after a required debriefing.
  • To obtain the CICA automatic stay of performance, file at GAO within 10 days after award or 5 days after a required debriefing, whichever is later. Missing the stay deadline makes winning largely academic, because the awardee performs while the protest is pending.

Assess standing (interested party) and prejudice (a substantial chance of award but for the error) before filing, and choose among the agency, GAO, and the Court of Federal Claims with the stay, the timeline, and the standard of review in mind. Note the task order protest bar, which limits protests of orders under multiple-award vehicles.

Illustration. A company loses a recompete, requests the debriefing on day four rather than day three, and forfeits the required-debriefing timing. Its protest, filed twelve days after award, is untimely for the stay. The incumbent performs for eighteen months while GAO's recommendation becomes irrelevant.

Stage 8 — Performance

Only the contracting officer can bind the government. Program managers and technical representatives cannot, and direction from them is not a change order regardless of how insistent.

The Changes clause permits the contracting officer to direct changes within the general scope unilaterally; the contractor must perform and is entitled to an equitable adjustment. Constructive changes — direction functioning as a change without the paperwork — require contemporaneous written notice and segregated cost data. Both are cheap; without them the claim is unprovable.

Termination for convenience permits the government to terminate any contract at any time, with recovery of costs incurred, a reasonable profit on work performed, and settlement expenses — but no anticipated profit on unperformed work. Price that risk and preserve the cost records.

Termination for default brings reprocurement costs, loss of unliquidated progress payments, and a past performance record that impairs future awards. Defenses include excusable delay, waiver by continued acceptance, prior material breach, and impossibility.

Respond to every draft CPARS evaluation within the comment window; an unrebutted negative rating follows the company for years.

Stage 9 — Claims and disputes

Under the Contract Disputes Act, a claim is a written demand seeking, as a matter of right, payment of a sum certain or other relief. Claims over $100,000 require certification in the statutory form; the absence of a certification is jurisdictional, though a defective one can be corrected.

Submit within six years of accrual. The contracting officer must decide within 60 days for smaller claims or state a firm date for larger ones; failure to decide is a deemed denial. Appeal to the agency board of contract appeals within 90 days or to the Court of Federal Claims within 12 months, both de novo.

Interest runs from receipt of the claim, which rewards prompt submission. And do not stop work over nonpayment absent a clear material breach — a default termination is far harder to undo than a payment dispute is to litigate.

Stage 10 — Compliance obligations

  • Mandatory disclosure. FAR 52.203-13 requires timely written disclosure to the agency Inspector General of credible evidence of criminal fraud, conflict of interest, bribery, gratuity violations, a civil False Claims Act violation, or a significant overpayment. Knowing failure to disclose is a cause for suspension or debarment. This is an affirmative obligation to report oneself.
  • Labor standards — the Service Contract Act, Davis-Bacon, and the Contract Work Hours and Safety Standards Act, with wage determinations, back wage exposure, and debarment.
  • Domestic preference — the Buy American Act, the Trade Agreements Act, and defense-specific restrictions.
  • Cybersecurity — FAR 52.204-21 basic safeguarding, DFARS 252.204-7012 with NIST SP 800-171 and 72-hour incident reporting, and CMMC certification at higher levels, all flowing down to subcontractors. A false representation about implementation status has already produced False Claims Act settlements.
  • Section 889 prohibitions on covered telecommunications equipment.
  • Whistleblower protections at 41 U.S.C. § 4712, which are non-waivable.
  • Suspension and debarment is the existential risk, and it turns on present responsibility — which rewards self-disclosure, cooperation, discipline of responsible individuals, and a documented fix.

Resources

Stage 11 — The questions companies actually ask

"How long until we win something?" Twelve to twenty-four months from registration to a first meaningful award, and the companies that shorten it do so by subcontracting first.

"Can we negotiate the FAR clauses?" Generally no, and under the Christian doctrine a mandatory clause is read into the contract even if omitted. What is negotiable is the statement of work, the contract type, the ceiling, and sometimes whether an item qualifies as commercial — which changes the clause load substantially.

"The COR asked us to do extra work. Should we?" Not without the contracting officer's written direction. Forward the request, state that it appears outside the statement of work, request direction, and open a segregated charge code the moment direction is given.

"Will protesting blacklist us?" Protests are routine in some agencies and rare in others. The realistic considerations are cost, the strength of the prejudice showing, and whether the relationship matters more than the award. An untimely or unsupported protest damages the relationship more than a strong one does.

"Do we really have to report ourselves?" Yes, where the disclosure rule applies, and a knowing failure is an independent basis for suspension or debarment. The disclosure decision is a legal one; make it with counsel and make it promptly.

"What is the single most expensive first-year mistake?" Performing work directed by someone other than the contracting officer, without written direction and without a segregated charge code.

Stage 12 — Building the internal function

A company doing federal work needs a compliance capability proportionate to its size, and the components are consistent.

A contracts function that reads the incorporated clauses rather than the cover page, maintains a clause matrix per contract, tracks flow-down obligations into subcontracts, and owns the representations and certifications calendar.

An accounting system with segregated direct and indirect cost pools, cost tracking by contract and contract line item, identification and exclusion of unallowable costs at entry, and the reports DCAA expects. For a company pursuing cost-reimbursement work, obtain a pre-award accounting system survey before it is a condition of an award you have already won.

A timekeeping discipline with daily employee entry, supervisor approval, an audit trail for every correction, and training that says plainly that hours are charged where worked. Labor mischarging is the most common basis for a False Claims Act case against a services contractor, and it is almost always the product of a permissive system rather than an intent to defraud.

Change control routing every request for additional work to the contracting officer, with a segregated charge code opened the moment written direction is received.

A compliance program with a written code, training, a hotline, and — specifically — a documented process for evaluating whether something constitutes credible evidence requiring disclosure, because that determination is a legal judgment with a short fuse.

Calendar discipline for annual representations, subcontracting plan reports, CPARS comment windows, incident reporting deadlines, claim limitations, and protest windows.

Records retention matching the audit and claim periods, because a defective pricing allegation or an incurred cost audit can arrive years after performance ends and is resolved on the contemporaneous records or not at all.

Master resource index

Articles

Checklists

Related toolkits

External and primary sources

This toolkit is educational and not legal advice. Federal procurement rules change frequently, agency supplements impose additional requirements, and thresholds are adjusted periodically. Consult qualified government contracts counsel before submitting a proposal, filing a protest, or making a disclosure.