The complete government contracting acronym glossary

14 min read

Government contracting runs on acronyms. SAM, UEI, CAGE, FAR, IDIQ, LPTA — the first time you read a federal solicitation, it feels like someone ran the English language through a shredder. I’ve been there, and I kept a running list taped to my monitor for months before these started sticking.

This glossary covers every acronym you’ll realistically encounter as a small business entering the federal marketplace. They’re grouped by where you’ll run into them, starting with the ones you need on day one and working outward from there.

Bookmark this page. You’ll be back.

Registration and getting started

These are the first acronyms you’ll encounter. You can’t bid on anything until you’ve dealt with most of them.

SAM — System for Award Management. The central database at sam.gov where every business must register before it can win a federal contract. SAM replaced several older systems and is now the one-stop shop for entity registration, contract opportunities, and wage determinations. If you haven’t registered yet, start with our complete registration guide.

UEI — Unique Entity Identifier. A 12-character alphanumeric code assigned automatically when you register in SAM. It replaced the DUNS number in April 2022. You don’t apply for it separately — SAM generates it during registration. For the full story on what changed, see our DUNS vs UEI breakdown.

DUNS — Data Universal Numbering System. The old 9-digit identifier issued by Dun & Bradstreet. Dead since 2022, but you’ll still see it referenced in older solicitations and contract databases. Your UEI is the replacement.

CAGE — Commercial and Government Entity Code. A 5-character code assigned by the Defense Logistics Agency during SAM registration. It ties to your physical location. DoD uses CAGE codes heavily, and you’ll need one for any defense-related work. See the full CAGE code guide for how to get one and what to do when something goes wrong.

NAICS — North American Industry Classification System. The numeric codes that classify what your business does. You select them during SAM registration, and they determine two things: which contracts you can bid on and what the small business size standard is for each industry. Picking the wrong ones can lock you out of opportunities or disqualify you from small business set-asides.

EIN — Employer Identification Number. Your business’s federal tax ID from the IRS. Required during SAM registration. If you’re a sole proprietor without employees, you can use your SSN, but getting an EIN takes five minutes on the IRS website and keeps your Social Security number off government forms.

Agencies and offices you’ll deal with

SBA — Small Business Administration. The federal agency that manages small business certification programs (8(a), HUBZone, WOSB, SDVOSB) and sets government-wide small business contracting goals. They’re your advocate in the federal marketplace. Check out our set-aside certifications guide for more on what the SBA offers.

GSA — General Services Administration. The agency that manages the Multiple Award Schedule (MAS) program — a pre-negotiated contract vehicle that lets agencies buy from you without running a full competition. Getting on a GSA Schedule is a significant milestone for most contractors.

DoD — Department of Defense. The single largest buyer in the federal government. If your business touches anything defense-related, you’ll encounter DoD-specific rules (DFARS), agencies (DCAA, DCMA, DLA), and security requirements (CMMC).

DLA — Defense Logistics Agency. The DoD agency that issues CAGE codes and manages a massive supply chain. If you’re selling products to the military, DLA is probably your customer.

DCAA — Defense Contract Audit Agency. The auditors. If you have a cost-reimbursement DoD contract, DCAA will review your accounting system, your indirect rates, and your cost proposals. Their approval of your accounting system is often a prerequisite for certain contract types.

DCMA — Defense Contract Management Agency. The contract administrators. After DoD awards you a contract, DCMA monitors your performance, inspects deliveries, and makes sure you’re hitting milestones.

GAO — Government Accountability Office. Congress’s watchdog. If you lose a contract award and believe the evaluation was flawed, GAO is where you file a bid protest. They have 100 days to issue a decision.

OSDBU — Office of Small and Disadvantaged Business Utilization. Every major federal agency has one. Their job is to advocate for small business participation, and they can point you toward upcoming opportunities. Worth finding the OSDBU contact at agencies you want to sell to.

APEX — APEX Accelerator (formerly PTAC). Local counseling centers funded by DoD that provide free one-on-one help with government contracting. They’ll review your SAM registration, look over your capability statement, and help you find opportunities. There are roughly 300 locations nationwide, and the advice is genuinely useful — not just pamphlets.

The rules of the game

FAR — Federal Acquisition Regulation. The master rulebook for how the federal government buys things. Every federal contract is governed by the FAR. It’s publicly available at acquisition.gov, and yes, it’s dense — but the sections that apply to small businesses are more digestible than you’d expect.

DFARS — Defense Federal Acquisition Regulation Supplement. Extra procurement rules that apply specifically to DoD contracts, layered on top of the FAR. If you see a solicitation reference a DFARS clause, it’s a defense contract.

TINA — Truth in Negotiations Act. A law requiring contractors to submit certified cost or pricing data when negotiating contracts above a certain dollar threshold (currently $2 million). It’s the government’s way of making sure you’re not inflating your prices.

Solicitations and the bidding process

RFI — Request for Information. A preliminary notice where an agency asks industry what’s available. You cannot win a contract from an RFI — it’s market research. But responding to one puts you on the agency’s radar.

RFP — Request for Proposal. The formal solicitation for complex or high-value work. You submit a detailed technical approach and cost proposal. This is the big one — the document that can run 200 pages and has strict formatting requirements.

RFQ — Request for Quotation. A solicitation asking for price quotes, typically for simpler purchases with well-defined requirements. Less paperwork than an RFP.

SOW — Statement of Work. The section of a contract that describes exactly what you must deliver — tasks, timelines, and deliverables. Read it three times before you price your bid.

PWS — Performance Work Statement. Similar to a SOW but focused on outcomes rather than specific tasks. The government tells you what results they want, and you propose how to achieve them.

LPTA — Lowest Price Technically Acceptable. An evaluation method where every proposal that meets the minimum technical requirements is considered equal, and the cheapest one wins. Price is the deciding factor. If you see LPTA in a solicitation, your technical proposal just needs to clear the bar — the battle is on price.

BVTO — Best Value Tradeoff. The opposite approach. The government weighs technical quality against price and may pay more for a stronger technical solution. This is where a well-written proposal actually matters.

BAFO — Best and Final Offer. After initial evaluations, the government can ask shortlisted bidders to sharpen their pencils and submit one last best offer. Not every competition uses a BAFO round, but when it comes, take it seriously.

Contract types and vehicles

FFP — Firm-Fixed Price. The price is set before work begins. If your costs run over, you eat the difference. If they come in under, you keep the savings. The simplest and most common contract type.

CPFF — Cost Plus Fixed Fee. The government reimburses your allowable costs and pays a fixed fee (profit) on top. The government bears the cost risk here, which is why they require an approved accounting system and DCAA audits.

T&M — Time and Materials. You bill fixed hourly labor rates plus actual material costs. Common when the scope isn’t fully defined upfront. Always has a “not to exceed” ceiling.

IDIQ — Indefinite Delivery/Indefinite Quantity. A contract vehicle with a broad scope, a minimum guarantee, and a maximum ceiling. Actual work is ordered through individual task orders over the contract period — usually 5 to 10 years. Think of it as a hunting license, not a guaranteed paycheck.

BPA — Blanket Purchase Agreement. A simplified arrangement for recurring purchases, like a standing account with pre-negotiated terms. Common for supplies and routine services.

MAS — Multiple Award Schedule. GSA’s government-wide contract program (also called the GSA Schedule or Federal Supply Schedule). Once you’re on a Schedule, agencies can buy from you without running a full competition. Getting on one takes effort, but it opens doors.

GWAC — Government-Wide Acquisition Contract. A large, pre-competed IDIQ contract — usually for IT — that any federal agency can use. Big ones include OASIS+ and SEWP.

SIN — Special Item Number. A category code within the GSA Schedule that groups similar products or services. You must have the right SIN to sell a particular offering through GSA.

Contract administration

CO (or KO) — Contracting Officer. The only person authorized to obligate government funds or make binding changes to your contract. If someone else tells you to change scope, add work, or adjust pricing and they’re not the CO, don’t do it — it’s not binding.

COR — Contracting Officer’s Representative. The government employee who handles day-to-day oversight. They’ll be your main point of contact, but they cannot change the contract terms. Only the CO can do that.

CLIN — Contract Line Item Number. Each distinct deliverable or service in your contract gets its own CLIN with its own pricing. Your invoices are structured around CLINs.

MOD — Modification. A written change to an existing contract. Could be additional scope, a price adjustment, or an extension. No modification is valid unless the CO signs it.

CDRL — Contract Data Requirements List. A list specifying what data, reports, and documentation you must deliver, in what format, and when. Common in DoD contracts. Pronounced “SEE-drill.”

GFE — Government Furnished Equipment. Equipment the government gives you to use on the contract. You’re responsible for taking care of it and returning it when the work ends.

Performance tracking

CPARS — Contractor Performance Assessment Reporting System. The government’s rating system for contractor performance. After a contract ends (and sometimes during), the government grades you on quality, schedule, cost control, and management. These ratings follow you. A bad CPARS review can sink future bids, and a strong one can set you apart. Take the review period seriously and respond to every evaluation.

FPDS — Federal Procurement Data System. The public database of all federal contract actions. Useful for competitive intelligence — you can look up who holds contracts at your target agencies, what they’re paying, and when those contracts expire.

FAPIIS — Federal Awardee Performance and Integrity Information System. Tracks contractor integrity issues — terminations, criminal proceedings, civil judgments. Contracting officers check it before making awards. You want a clean record here.

Set-aside and certification programs

These programs give qualifying small businesses a competitive advantage on certain contracts. Our set-aside certifications guide breaks down which one fits your business.

8(a) — 8(a) Business Development Program. An SBA program for businesses owned by socially and economically disadvantaged individuals. Participants can receive sole-source contracts (no competition) and compete in 8(a) set-asides for up to 9 years. It’s the most powerful certification in the game.

HUBZone — Historically Underutilized Business Zone. For small businesses located in and employing people from economically distressed areas. Provides set-aside access and a 10% price evaluation preference on full-and-open competitions.

WOSB — Women-Owned Small Business. For businesses at least 51% owned and controlled by women. Eligible for WOSB set-aside contracts in industries where women are underrepresented. We have a full WOSB/EDWOSB walkthrough.

EDWOSB — Economically Disadvantaged Women-Owned Small Business. A subset of WOSB for women owners who meet specific income and net worth thresholds. Opens up an additional tier of set-aside contracts.

SDVOSB — Service-Disabled Veteran-Owned Small Business. For businesses majority-owned by veterans with a service-connected disability. Certification is through the SBA’s VetCert platform.

SDB — Small Disadvantaged Business. A designation for businesses owned by socially and economically disadvantaged individuals. Provides a price evaluation adjustment in full-and-open competitions, even without 8(a) participation.

Compliance and security

CMMC — Cybersecurity Maturity Model Certification. DoD’s program requiring defense contractors to prove they meet specific cybersecurity standards before handling controlled information. CMMC 2.0 has three levels. If you plan to do DoD work involving CUI, you’ll need at least Level 2, which means implementing all 110 controls in NIST SP 800-171.

CUI — Controlled Unclassified Information. Government information that isn’t classified but still requires safeguarding. Think technical drawings, personnel data, or law enforcement information. Handling CUI triggers CMMC requirements.

FCI — Federal Contract Information. Information provided by or generated for the government under a contract that’s not intended for public release. Less sensitive than CUI, but still needs basic protection (CMMC Level 1).

ITAR — International Traffic in Arms Regulations. State Department rules controlling the export of defense articles and technical data. If your work involves items on the U.S. Munitions List, ITAR compliance is mandatory — and violations carry serious penalties.

EAR — Export Administration Regulations. Commerce Department rules covering dual-use items (civilian items with potential military applications). Less restrictive than ITAR, but still requires export licenses for certain destinations.

Teaming and subcontracting

JV — Joint Venture. A separate legal entity formed by two or more businesses to bid on contracts together. Under SBA’s Mentor-Protege Program, a large mentor and small protege can JV while the protege keeps its small business size status. For a detailed comparison, see our joint ventures vs teaming agreements guide.

CTA — Contractor Team Arrangement. A partnership between GSA Schedule holders to combine their offerings for a specific opportunity. Less formal than a JV — no new legal entity required.

SBIR — Small Business Innovation Research. A competitive federal program providing R&D funding to small businesses. DoD, NIH, NASA, and other agencies with large research budgets run SBIR programs. If your business develops new technology, this is grant money worth pursuing.

STTR — Small Business Technology Transfer. Similar to SBIR but requires partnering with a nonprofit research institution like a university. Focused on moving research from the lab to the marketplace.

eSRS — Electronic Subcontracting Reporting System. Where prime contractors report how much they subcontracted to small businesses. If you’re a sub, your prime’s eSRS reports are how the government tracks whether large primes are meeting their small business subcontracting goals.

A few more you’ll see in the wild

PSC — Product and Service Code. Four-character codes describing what’s being purchased. Useful for filtering contract opportunities in SAM.gov to your specific industry.

CONUS / OCONUS — Continental United States / Outside Continental United States. Defines where work is performed. OCONUS contracts (Alaska, Hawaii, overseas) often carry different labor rates, per diem, and logistics requirements.

OASIS+ — One Acquisition Solution for Integrated Services. GSA’s latest large GWAC for complex professional services. If you qualify and get on OASIS+, you’re competing for task orders across multiple NAICS codes.

SEWP — Solutions for Enterprise-Wide Procurement. A NASA-managed GWAC for IT products and services used across the government. Pronounced “soup.”

NTE — Not To Exceed. The ceiling amount on a T&M or labor-hour contract. You can’t bill past it without a contract modification.


That’s the list. If you’re just getting started, focus on the first two sections — registration and agencies. The rest will make more sense once you’ve submitted your SAM registration and started reading your first solicitation.

Your next step: if you haven’t registered in SAM yet, our step-by-step registration guide walks through every field. If you’re already registered and figuring out what to bid on, our first 30 days checklist maps out the path from registration to first bid.

Related guides