Government Contracting Terms Explained: The 40 Acronyms You Need to Know Before Your First Bid

The first time you open SAM.gov, it can feel like the federal government is speaking a different language — because it is. SAM, UEI, NAICS, RFP, IDIQ, FAR. Every industry has jargon, but government contracting has turned acronyms into an art form, and nothing slows a new contractor down faster than nodding along in a meeting while quietly wondering what a CAGE code is.

Here’s the good news: you don’t need to memorize hundreds of terms. You need about forty — and once you have them, everything else about finding government contracts gets dramatically easier. Solicitations start reading like plain English. Conversations with contracting officers stop feeling intimidating. And you stop losing time (and credibility) to translation.

So consider this your GovCon dictionary. We’ve organized all 40 into five groups that follow the same order you’ll actually encounter them on your 90-day path to a first contract: getting registered, understanding the money, claiming your set-asides, staying compliant, and responding to proposals. Bookmark it. Share it with your team. Let’s build your vocabulary — brick by brick.

Group 1: Getting Started — Registration & the Marketplace

1. SAM — System for Award Management. The federal government’s master vendor database at SAM.gov. Registration is free, mandatory before you can win any federal contract, and must be renewed every year (U.S. General Services Administration [GSA], 2026).

2. UEI — Unique Entity Identifier. The 12-character ID SAM.gov assigns your business when you register. It replaced the old DUNS number in 2022 and now serves as your business’s federal fingerprint on every bid, award, and payment.

3. CAGE — Commercial and Government Entity code. A five-character code assigned during SAM registration that identifies your physical location. Defense contracts in particular reference it constantly.

4. NAICS — North American Industry Classification System. The six-digit codes that classify what your business does — and determine whether you count as “small” for a given contract (U.S. Census Bureau, 2022). Choosing yours correctly matters enough that we wrote a full beginner’s guide to NAICS codes.

5. PSC — Product Service Code. A four-character code describing what the government is buying (versus NAICS, which describes what you do). Smart contractors search opportunities by both.

6. SBA — U.S. Small Business Administration. The agency that sets size standards, runs the certification programs, and advocates for small business contracting goals government-wide (U.S. Small Business Administration [SBA], 2026a).

7. GSA — General Services Administration. The government’s central purchasing agency. It runs SAM.gov and the Multiple Award Schedule program that thousands of small businesses sell through.

8. DSBS — Dynamic Small Business Search. SBA’s public directory of registered small businesses. Contracting officers use it to find vendors for set-asides — which means your profile is marketing, not paperwork.

9. APEX — APEX Accelerators. Formerly known as PTACs, these government-funded centers provide free, one-on-one help with registration, certifications, and bidding. Every new contractor should know their local one.

Group 2: Money & Contract Types

10. FFP — Firm-Fixed-Price. You deliver at an agreed price, period. If your costs run over, that’s on you; if you’re efficient, the margin is yours. Under the 2026 FAR Part 16 overhaul, fixed-price is now the government’s default preference — making this the most important contract type to price well.

11. CPFF — Cost-Plus-Fixed-Fee. The government reimburses your allowable costs and pays a set fee on top. Common in research and complex services, but it demands an approved accounting system.

12. T&M — Time and Materials. Billing at fixed hourly labor rates plus material costs. Flexible, but agencies now need stronger justification to use it.

13. IDIQ — Indefinite Delivery, Indefinite Quantity. An umbrella contract that doesn’t guarantee work itself — it makes you eligible to compete for task orders under it. Many of the government’s biggest vehicles are IDIQs.

14. TO — Task Order. The actual funded work issued under an IDIQ or similar vehicle. Winning the vehicle gets you to the table; winning task orders pays the bills.

15. BPA — Blanket Purchase Agreement. A simplified account the government sets up with trusted vendors for recurring needs — think of it as a charge account for repeat purchases.

16. GWAC — Governmentwide Acquisition Contract. A pre-competed IDIQ, usually for IT, that any agency can buy through. Several major GWACs are reserved for small and certified businesses.

17. MAS — Multiple Award Schedule. GSA’s long-term governmentwide contract program (often just called “getting on Schedule”) with pre-negotiated pricing agencies can order against directly.

18. CLIN — Contract Line Item Number. The numbered line items that break a contract into priced deliverables. Your invoices and your proposal pricing both live at the CLIN level.

Group 3: Set-Asides & Certifications

19. SDB — Small Disadvantaged Business. A business at least 51% owned and controlled by socially and economically disadvantaged individuals. The foundation status behind several certification programs.

20. WOSB — Woman-Owned Small Business. SBA certification opening set-aside competitions in industries where women-owned firms are underrepresented.

21. EDWOSB — Economically Disadvantaged Woman-Owned Small Business. A WOSB whose owners also meet economic disadvantage thresholds — unlocking additional set-aside categories.

22. SDVOSB — Service-Disabled Veteran-Owned Small Business. Certification for businesses majority-owned by service-disabled veterans, now verified through SBA’s VetCert program.

23. VOSB — Veteran-Owned Small Business. The broader veteran-owned certification, especially valuable for VA procurements under its Vets First priority.

24. HUBZone — Historically Underutilized Business Zone. Certification for firms located in — and employing residents of — designated distressed areas. One of the least crowded set-aside lanes.

25. 8(a) — the 8(a) Business Development Program. SBA’s nine-year program for disadvantaged businesses, including access to sole-source awards. Which of these certifications to pursue, and in what order, is exactly what our 2026 Certification Playbook walks through.

Group 4: Compliance & Performance

26. FAR — Federal Acquisition Regulation. The rulebook governing nearly all federal buying (Acquisition.gov, 2026). You don’t need to read all of it — but the clauses in your contract are binding, so know the ones you sign.

27. DFARS — Defense Federal Acquisition Regulation Supplement. The Department of Defense’s additional layer on top of the FAR, including its cybersecurity clauses.

28. CMMC — Cybersecurity Maturity Model Certification. DoD’s framework for verifying contractor cybersecurity. Its rollout has been turbulent — see our coverage of the Phase 2 suspension and what still applies.

29. NIST — National Institute of Standards and Technology. The agency behind the security standards (especially NIST SP 800-171) that defense contractors must implement to protect sensitive data.

30. CUI — Controlled Unclassified Information. Government information that isn’t classified but still requires safeguarding. If CUI touches your systems, cybersecurity obligations follow.

31. CPARS — Contractor Performance Assessment Reporting System. Where the government grades your performance after each contract. Those ratings follow you into every future evaluation — protect them.

32. DCAA — Defense Contract Audit Agency. The auditors who review contractor accounting systems and costs, primarily on cost-reimbursement work.

33. OIG — Office of Inspector General. Each agency’s internal watchdog for fraud, waste, and abuse. When set-aside fraud gets prosecuted, an OIG investigation usually started it.

Group 5: Proposals & the People Behind Them

34. RFP — Request for Proposal. The government’s formal solicitation for complex requirements, evaluated on technical approach and past performance as well as price.

35. RFQ — Request for Quotation. A simpler solicitation, typically for well-defined purchases where price drives the decision.

36. RFI — Request for Information. Market research, not a buy — but responding is how you shape requirements and get on an agency’s radar, as we covered in our guide to sources sought notices.

37. SOW — Statement of Work. The section of a solicitation describing exactly what must be done, delivered, and by when. Your proposal must answer it point by point.

38. PWS — Performance Work Statement. A SOW’s outcome-focused cousin: it defines required results and lets the contractor propose the how.

39. CO — Contracting Officer. The only person with legal authority to award, modify, or terminate a federal contract (sometimes written KO in defense circles). Direction from anyone else isn’t binding.

40. COR — Contracting Officer’s Representative. The CO’s designated eyes and ears on day-to-day performance. Your most frequent government contact once work begins — but not the person who can change your contract.

The Bottom Line

Fluency in these 40 terms won’t win you a contract by itself — but the lack of it will absolutely cost you one. Every stage of the federal sales cycle assumes you speak the language: registration (SAM, UEI, NAICS), positioning (DSBS, WOSB, 8(a)), bidding (RFP, SOW, CLIN), and performance (CPARS, COR, FAR). The contractors who win consistently aren’t necessarily smarter — they’ve simply removed the friction of translation and put that energy into strategy instead.

Learn a group a week. Use the terms in real sentences. In five weeks, you’ll read a solicitation the way a contracting officer does. That’s how every GovCon business gets built — brick by brick.

Frequently Asked Questions

What does SAM stand for in government contracting?

SAM stands for System for Award Management — the free federal database at SAM.gov where every business must register before it can bid on or receive federal contracts. Registration assigns your Unique Entity Identifier (UEI) and must be renewed annually to stay active.

What is the difference between an RFP, an RFQ, and an RFI?

An RFI (Request for Information) is market research — the government is gathering input, not buying. An RFQ (Request for Quotation) seeks pricing for simpler, well-defined purchases. An RFP (Request for Proposal) is a full solicitation for complex work, evaluated on technical merit, past performance, and price. Only RFQs and RFPs lead directly to awards, but smart contractors respond to RFIs to shape the eventual competition.

What does 8(a) mean in government contracting?

The 8(a) program is SBA’s nine-year business development program for small businesses majority-owned by socially and economically disadvantaged individuals. It’s named after Section 8(a) of the Small Business Act, and its biggest advantage is access to set-aside and sole-source contracts reserved for program participants.

What is the difference between the FAR and DFARS?

The FAR (Federal Acquisition Regulation) is the governmentwide rulebook for federal purchasing that applies to nearly all agencies. DFARS (Defense Federal Acquisition Regulation Supplement) is the Department of Defense’s supplement — an additional layer of DoD-specific rules, including cybersecurity requirements, that applies on top of the FAR for defense contracts.

References

Acquisition.gov. (2026). Federal Acquisition Regulation. U.S. General Services Administration. https://www.acquisition.gov/browse/index/far

U.S. Census Bureau. (2022). North American Industry Classification System. https://www.census.gov/naics/

U.S. General Services Administration. (2026). SAM.gov: Home. https://sam.gov

U.S. Small Business Administration. (2026a). Contracting guide. https://www.sba.gov/federal-contracting/contracting-guide

U.S. Small Business Administration. (2026b). Table of small business size standards. https://www.sba.gov/document/support-table-size-standards