Guide

· 7 min read

Subcontracting plan compliance: what the SBA audits and how to stay in good standing

Approved subcontracting plans carry legal obligations enforced by SBA Commercial Market Representatives. Non-compliance can trigger liquidated damages under FAR 52.219-16 or contract termination.

The legal weight behind an approved subcontracting plan

Winning a federal contract with an approved subcontracting plan is not the finish line. It is the starting gun.

Once SBA or the contracting officer approves your plan, you have made legally binding commitments: specific dollar or percentage goals for small businesses, small disadvantaged businesses, women-owned small businesses, HUBZone firms, service-disabled veteran-owned small businesses, and veteran-owned small businesses. Miss those goals without documented good-faith efforts and you face consequences that range from financial penalties to debarment.

Most primes treat the plan as a proposal artifact. The ones who end up in trouble are exactly that group.

ISR and SSR: the two reporting obligations

Individual Subcontracting Report (ISR). Required for each contract that contains a subcontracting plan. You submit it semi-annually (for periods ending March 31 and September 30) and at contract completion. The ISR captures actual subcontracting dollars paid to each small business category against your plan goals for that specific contract.

Summary Subcontracting Report (SSR). Filed once a year by October 30, the SSR rolls up subcontracting activity across all contracts with the same federal agency. It shows cumulative performance at the company level, not the contract level.

Both reports go through eSRS.gov, the Electronic Subcontracting Reporting System. The contracting officer and, in many cases, the SBA Commercial Market Representative (CMR) assigned to your agency will review them.

Missing a filing is itself a compliance failure. Contracting officers have withheld final payments for late or missing ISRs. Set calendar reminders for March 31 and September 30 and do not wait until the last week to pull your data.

What "good-faith efforts" actually requires

FAR 52.219-8 and the subcontracting plan regulations use the phrase "good-faith efforts" without spelling out a precise checklist. SBA and contracting officers fill that gap during compliance reviews. In practice, good-faith efforts means documented, proactive outreach before you select a subcontractor.

Specific actions that count:

  1. Searching SBA's Dynamic Small Business Search (DSBS) and SAM.gov for small and diverse firms that perform the relevant work. Print or export the search results with a timestamp.
  1. Soliciting at least three small business sources for each subcontracting opportunity where a small business could perform the work. Keep copies of the solicitations and any responses.
  1. Attending outreach events. SBA and agency small business offices run matchmaking events, industry days, and supplier showcases. Attendance — and the contacts made there — becomes part of your compliance record.
  1. Participating in mentor-protégé programs. SBA's All Small Mentor-Protégé Program and the DoD Mentor-Protégé Program are both evidence of genuine commitment. They also help you develop qualified diverse subcontractors over the life of a multi-year contract.
  1. Providing notice to trade associations and small business development centers when subcontracting opportunities arise.

What does not count: a blanket email sent to a distribution list the week before source selection closes, or a post on a website with no evidence anyone saw it. Reviewers look for specificity and timing.

If you genuinely could not find a qualified small business for a particular scope, document that. Write a brief memo explaining the effort, whom you contacted, what responses you received, and why the small business sources were not suitable. That memo is your protection.

How SBA Commercial Market Representatives conduct reviews

SBA assigns CMRs to federal agencies and large prime contractors. A CMR is not an auditor in the adversarial sense, but they have real authority and they know what to look for.

A typical compliance review involves:

  • Requesting your subcontracting plan, ISR and SSR filings, and any subcontract awards for the review period
  • Comparing actual awards to plan goals and asking you to explain shortfalls
  • Reviewing your outreach records: DSBS search logs, solicitation emails, event attendance sheets, mentor-protégé agreements
  • Interviewing your small business liaison officer (SBLO), whose name appears in your plan

If your ISR shows you came in at 60% of your women-owned small business goal, the CMR will ask what happened. "We couldn't find anyone" is not a sufficient answer without documentation.

CMRs also conduct on-site visits, though they have moved to virtual reviews more frequently since 2020. Either way, your SBLO should be the primary point of contact and should have immediate access to all compliance records.

Consequences of non-compliance

The consequences are specific and serious.

FAR 52.219-16 — Liquidated Damages. If the contract includes this clause and you fail to make good-faith efforts to comply with your subcontracting plan, the government can assess liquidated damages equal to the amount by which you failed to achieve each goal. If your plan committed $500,000 to small disadvantaged businesses and you paid out $200,000, the potential damages are $300,000.

Contract termination for default. Willful or persistent non-compliance with a subcontracting plan can be grounds for termination. This is rare but it happens, particularly on high-visibility contracts with agency small business advocates paying close attention.

Past performance rating. Every contracting officer who evaluates you on a recompete will see your subcontracting plan performance. A negative past performance narrative on subcontracting compliance is a bid killer.

Debarment or suspension. Patterns of non-compliance, false reporting, or fraud in subcontracting plan reporting can trigger suspension and debarment proceedings under FAR Subpart 9.4. Debarment locks you out of federal contracting for up to three years.

Best practices that protect the prime and help diverse suppliers grow

Assign a dedicated SBLO. Your small business liaison officer should not be a title that sits in a drawer. This person needs authority, budget, and time. They should know every subcontracting plan the company holds and current performance against each one.

Track by contract, not just company-wide. Your SSR shows aggregate performance, but the ISR is where auditors focus first. A company that hits its aggregate goals but misses badly on specific contracts is still vulnerable to a compliance finding on those contracts.

Build a pre-qualified diverse supplier list before you bid. The time to find qualified HUBZone electrical contractors is not the week after contract award. If you are bidding on a five-year facilities contract, you should have supplier relationships in place. Run DSBS searches during proposal development and start conversations then.

Document every outreach action in real time. A spreadsheet built after the fact, even if accurate, looks constructed. Use your purchasing or ERP system to log outreach with dates, contact names, and outcomes at the time the activity happens.

Use mentor-protégé relationships strategically. A formal mentor-protégé agreement gives you a subcontracting partner you have helped develop. SBA's All Small program allows any large business as a mentor to almost any small business as a protégé. The protégé gets access to your technical expertise; you get a documented, capable diverse subcontractor you can count on for future work.

Run internal compliance reviews quarterly. Do not wait for your ISR due date to find out you are behind. Pull a monthly report from your accounts payable system filtered by subcontractor size status. If you are trending below goal with two months left in the reporting period, you still have time to redirect work.

Keep your plan goals realistic. Overpromising during the proposal phase to win points and then failing to deliver creates the compliance problem. If your industry has limited small business depth for a specific scope, build that into the plan with documentation. A plan with credible goals you consistently meet is worth more than an aggressive plan that earns a compliance finding every cycle.

The bottom line

Federal subcontracting plan compliance is a contract obligation with financial and reputational consequences attached. The ISR and SSR are not administrative paperwork; they are the audit trail that SBA CMRs and contracting officers use to evaluate whether you honored your commitments.

Prime contractors who stay in good standing treat the plan as a procurement policy, not a proposal section. They assign clear ownership, document outreach before source selection, and track performance at the contract level throughout the year.

The diverse suppliers in your subcontracting plan also depend on those commitments being real. When primes hit their goals consistently, they create predictable revenue for small businesses that are often one major contract away from the next level of growth.

Tools that pair with this article

Confirm which certifications fit your business.

The quiz checks ownership, location, revenue, and NAICS codes against the eligibility rules for every federal, national, and state certification we track. The result is a ranked list with the buyers each one opens and the order to pursue them in.