Unique Entity ID UEI
The 12-character alphanumeric ID that identifies your business across the federal award system. It replaced the DUNS number in 2022 and is assigned in SAM.gov.
Estimate your SPRS score →
DECODE THE ALPHABET SOUP
Govcon, in plain English.
UEI, CAGE, SAM, NAICS, SPRS, 800-171, CMMC, POA&M, set-asides — federal contracting runs on acronyms. Here’s a clear, no-jargon glossary of the terms that actually matter when you’re registering, bidding, and staying compliant. Search it, then put it to work with our free tools.
THE TERMS
Search the glossary
Every entry links to the tool or service that puts it into practice.
CAGE Code CAGE
Commercial and Government Entity code — a 5-character ID assigned by the DoD to identify a contractor at a specific location. Required for most defense work.
See our capabilities →SAM.gov Registration SAM
System for Award Management — the official, free federal registration every entity must hold (and renew annually) to receive contracts or grants.
GovCon Enablement →NAICS Code NAICS
North American Industry Classification System code that classifies your business activity. Each solicitation lists a NAICS code with an associated small-business size standard.
Add NAICS to a cap statement →NIGP Commodity Code NIGP
The classification system most U.S. state and local governments use (instead of NAICS) to categorize the goods and services they buy.
Our NIGP codes →SPRS SPRS
Supplier Performance Risk System — the DoD database where contractors post their NIST SP 800-171 Basic Assessment score. Scores range from 110 down to negative values.
Calculate your score →NIST SP 800-171 800-171
The federal standard of 110 security requirements for protecting Controlled Unclassified Information (CUI) on non-federal systems. Compliance is scored via the DoD Assessment Methodology.
Self-assess all 110 controls →CMMC CMMC
Cybersecurity Maturity Model Certification — the DoD program that will require third-party assessment of NIST 800-171 (and beyond) for many contracts. Most firms today pursue readiness, not certification.
CMMC readiness advisory →Controlled Unclassified Information CUI
Government-created or -owned information that is sensitive but not classified, and that requires safeguarding under federal rules (the data NIST 800-171 protects).
Scope your CUI boundary →Plan of Action & Milestones POA&M
A documented plan listing each unimplemented security requirement, the remediation steps, resources, and target dates. Required alongside an SSP for SPRS.
Find your gaps →System Security Plan SSP
The document describing how your system meets each NIST 800-171 requirement — system boundary, controls, and responsibilities. Required for a valid assessment.
Compliance Advisory →Section 508 508
The federal law (29 U.S.C. § 794d) requiring electronic and information technology procured by federal agencies to be accessible to people with disabilities.
508 remediation →WCAG 2.1 AA WCAG
Web Content Accessibility Guidelines, Level AA — the technical standard Section 508 conformance is measured against. The bar most government web work must meet.
Our accessibility statement →Set-Aside
A contract (or portion) reserved for competition among a specific category of small business — e.g. small-business, 8(a), HUBZone, SDVOSB, or WOSB set-asides.
Filter the live board by set-aside →8(a) Business Development 8(a)
An SBA program for small businesses owned by socially and economically disadvantaged individuals, offering sole-source and set-aside contracting advantages for up to nine years.
GovCon Enablement →HUBZone HUBZone
An SBA program for small businesses located in Historically Underutilized Business Zones, providing competitive and sole-source set-asides and a price-evaluation preference.
GovCon Enablement →SDVOSB SDVOSB
Service-Disabled Veteran-Owned Small Business — a designation that qualifies a firm for veteran set-aside and sole-source federal opportunities.
Add it to a cap statement →WOSB / EDWOSB WOSB
Woman-Owned Small Business (and the Economically Disadvantaged variant) — federal designations qualifying firms for women-owned set-aside contracts.
Add it to a cap statement →Capability Statement
The one-page govcon calling card summarizing your core competencies, differentiators, past performance, and company data (UEI/CAGE/NAICS) for contracting officers.
Build one free →Past Performance
A record of relevant prior work used by evaluators to judge your ability to deliver. New entrants build it via subcontracting, small awards, and commercial references.
Package your past performance →Sources Sought / RFI RFI
A pre-solicitation Request for Information (or Sources Sought notice) used by agencies for market research. Responding shapes the eventual solicitation and signals interest.
Watch the opportunity board →Solicitation (RFP / RFQ / IFB) RFP
The formal request for offers — Request for Proposal, Request for Quote, or Invitation for Bid — that defines requirements, evaluation criteria, and the submission deadline.
See open solicitations →