Module 6: Can I Bid? Eligibility Assessment

The SBA assigns a size standard to every NAICS code. This standard determines whether your company qualifies as "small business" for government contracting purposes. Being small matters because roughly 23% of all federal contract dollars are set aside exclusively for small businesses.

Size standards come in two forms:

Revenue-based: your average annual receipts over the last 3 or 5 fiscal years (depending on the NAICS code) must be below the threshold. Most IT and professional services codes use this method.

Employee-based: your average number of employees over the last 12 months must be below the threshold. Manufacturing and some construction codes use this method.

How to look up your size standard:

Step 1: Identify your primary NAICS code (from Module 5). Step 2: Go to sba.gov/size-standards or use the SBA Size Standards Tool. Step 3: Enter your NAICS code. The tool returns the applicable size standard.

Examples for common IT NAICS codes: 541512 (Computer Systems Design): $34 million in average annual receipts 541511 (Custom Programming): $34 million 541519 (Other Computer Related): $34 million 541330 (Engineering Services): $25.5 million 518210 (Computing Infrastructure): $40 million

What "average annual receipts" means:

The SBA calculates this as your total revenue (not profit) averaged over your most recent 3 or 5 completed fiscal years. For a brand new company: your average is based on whatever history exists. A company with zero revenue in its first year has an average annual receipt of $0, which is below every threshold.

When you are no longer small:

If your average annual receipts grow above the size standard, you must recertify your size status. This does not happen automatically. You recertify when you submit a new offer on a set-aside contract, receive an option exercise, or complete a merger/acquisition. You can continue performing on existing small business set-aside contracts even if you have grown past the threshold.

Use the ClariFAR Eligibility Qualifier at /qualifier to check your size status against your NAICS codes and see which set-aside programs you qualify for.

The federal government has several programs that set aside contracts exclusively for specific categories of small businesses. If you qualify for one or more of these programs, you have access to contracts that larger competitors cannot bid on.

WOSB (Women-Owned Small Business): Eligibility: 51%+ owned and controlled by one or more women who are U.S. citizens. "Controlled" means the women make day-to-day management decisions. Certification: self-certification in SAM.gov, or third-party certification through SBA-approved certifiers. Benefit: sole-source contracts up to $4.5M (manufacturing) or $7M (other), and competitive set-asides in underrepresented NAICS codes. EDWOSB (Economically Disadvantaged WOSB): additional program for women who meet economic disadvantage criteria. Eligible for a broader range of set-aside NAICS codes.

SDVOSB (Service-Disabled Veteran-Owned Small Business): Eligibility: 51%+ owned and controlled by one or more service-disabled veterans. The veteran must have a service-connected disability rating from the VA. Certification: certified through SBA's VetCert program (mandatory since January 2023, previously self-certification for non-VA contracts). Benefit: sole-source contracts up to $4.5M (manufacturing) or $7M (other). DoD and VA are the largest users of SDVOSB set-asides.

HUBZone (Historically Underutilized Business Zone): Eligibility: principal office in a HUBZone, 35%+ of employees reside in a HUBZone, and 51%+ owned by U.S. citizens. Certification: SBA-certified only (not self-certification). Application processing takes 60-90 days. Benefit: 10% price evaluation preference on full-and-open competitions, plus sole-source and competitive set-asides. HUBZone lookup: use the SBA HUBZone Map at maps.sba.gov/hubzone to check if your address qualifies.

8(a) Business Development: Eligibility: 51%+ owned by socially and economically disadvantaged individuals. Must demonstrate social disadvantage (rebuttable presumption for certain racial/ethnic groups) and economic disadvantage (personal net worth under $850,000 excluding primary residence and business). Certification: SBA-certified. Program lasts 9 years (4-year developmental stage, 5-year transitional stage). Benefit: sole-source contracts up to $4.5M (manufacturing) or $7M (other), plus mentoring and training. Important note: 8(a) program admissions have declined significantly in recent years due to program reforms. Do not build your business plan around 8(a) certification.

You can hold multiple certifications simultaneously. A service-disabled veteran who is a woman and operates from a HUBZone can certify as SDVOSB, WOSB, and HUBZone.

Beyond set-aside certifications, some contracts require specific business or technical certifications before you can bid. Here are the ones small IT contractors encounter most frequently.

SAM.gov Registration (mandatory for all): Already covered in Module 5. No contract award without an active SAM registration.

Small Business Self-Certification: Done through your SAM.gov representations and certifications. You self-certify that you meet the SBA size standard for your primary NAICS code. No separate application needed.

CMMC Certification (for DoD contracts handling CUI): CMMC Level 1: self-assessment, submit score to SPRS. No third-party assessment required. CMMC Level 2: requires assessment by a CMMC Third-Party Assessment Organization (C3PAO). Cost: $30,000-100,000+ depending on your environment size. Timeline: 3-6 months for preparation + assessment. Module 8 covers CMMC in detail.

ISO 27001 (sometimes required): Information security management system certification. Not federally mandated, but some solicitations require it. Cost: $10,000-50,000 for initial certification. Annual surveillance audits: $5,000-15,000.

ISO 9001 (sometimes required): Quality management system certification. Common in manufacturing and engineering solicitations. Rarely required for pure IT services contracts.

Facility Security Clearance (FCL) (for classified work): Required when a contract involves access to classified information. You cannot apply on your own. A government agency or cleared prime contractor must "sponsor" your facility clearance through DCSA (Defense Counterintelligence and Security Agency). Timeline: 6-18 months. You must have a contract or pre-contract requirement before sponsorship.

Personnel Security Clearances (for classified work): Individual employees need clearances (Confidential, Secret, Top Secret) to access classified data. These are sponsored by the government or a cleared prime. Timeline: 3-12 months depending on level. You cannot pre-apply.

For most small IT contractors starting out: SAM.gov registration and small business self-certification are all you need. CMMC becomes relevant when you bid on DoD contracts that handle CUI. ISO and clearances become relevant when specific solicitations require them.

Do not spend money on certifications you do not need yet. Each one costs time and money. Get them when a contract requires them, not before.

The ClariFAR Eligibility Qualifier at /qualifier takes your company information and produces a personalized eligibility report showing exactly which contracts you can bid on and which set-aside programs you qualify for.

How to use the Qualifier:

Step 1: Go to /qualifier on the ClariFAR site.

Step 2: Enter your business details: NAICS code(s): your primary and any secondary codes from Module 5. Annual revenue: your average annual receipts (or projected revenue if pre-revenue). Number of employees: your headcount including full-time, part-time, and contractors. Business type: LLC, corporation, sole proprietorship. Years in business: how long since formation. Ownership demographics: for set-aside eligibility (veteran status, gender, disadvantaged status). Location: your principal office zip code (for HUBZone check).

Step 3: Review your report. The Qualifier checks your inputs against current SBA size standards, set-aside program requirements, and NAICS code eligibility. It produces a report showing:

Size status: whether you qualify as "small" under each NAICS code you entered.

Set-aside eligibility: which programs (WOSB, SDVOSB, HUBZone, 8(a)) you may qualify for based on your inputs.

Contract types available: based on your size status and certifications, which types of solicitations you should be searching for.

Next steps: specific actions to take (register on SAM.gov, apply for certifications, etc.).

What the Qualifier does NOT do:

It does not certify you for any program. You still need to complete the actual certification process through SBA or SAM.gov.

It does not guarantee eligibility. The tool checks against published criteria, but SBA makes final eligibility determinations.

It does not replace legal advice. If your ownership structure is complex (multiple owners, trusts, affiliates), consult a government contracts attorney before self-certifying.

Action item for this lesson:

Run the Qualifier now with your actual business information. Save the report. Compare it to what you entered in your SAM.gov reps and certs (Module 5, Lesson 4). They should be consistent. If the Qualifier says you do not qualify for a program you certified for in SAM.gov, investigate the discrepancy before it becomes a problem.