The IC is not like other federal buyers
Most federal agencies post solicitations on beta.SAM.gov. You filter, you register, you bid. The Intelligence Community works differently. CIA, NSA, DIA, NGA, and NRO operate under classified procurement rules. A large share of their contracts never appear in public databases. The ones that do are often redacted to the point of uselessness.
That is not a reason to avoid this market. It is a reason to understand how it actually works before wasting time on strategies built for civilian agencies.
The IC buys roughly $60–$80 billion in goods and services annually when you include all 18 member agencies and the classified programs that fund them. The Office of the Director of National Intelligence (ODNI) oversees the community and runs a Small Business Program that publishes guidance for small and diverse firms. The unclassified portion of this spend flows through standard federal contracting vehicles, and that is where your foothold exists.
What IC agencies actually buy
The dominant spend categories are:
- IT services and cybersecurity — software development, systems integration, cloud migration, zero-trust architecture work
- Intelligence analysis support — all-source analysis, geospatial intelligence (GEOINT), signals intelligence (SIGINT) processing
- Engineering and technical services — satellite systems, sensor development, communications infrastructure
- Professional services — training, logistics, facilities management, administrative support
Cybersecurity and IT make up the largest unclassified share. The National Geospatial-Intelligence Agency (NGA) has been particularly active in commercial geospatial data and cloud contracts. NSA's commercial solutions acquisition activity has increased since the NSA Commercial Solutions for Classified Program (CSfC) opened certain vendor categories. These are entry points worth tracking.
Set-aside programs: used, but selectively
The IC does use standard SBA set-aside programs. 8(a), HUBZone, WOSB, SDVOSB, and small business set-asides all appear in IC-adjacent contracting. However, the classified nature of much of this work limits how aggressively agencies can use set-asides.
The agencies most likely to use small business set-asides for accessible contracts include:
- Defense Intelligence Agency (DIA) — publishes unclassified solicitations through standard channels; has a formal small business program office
- NGA — has pursued vendor diversity through its Commercial Imagery Program and cloud contracts
- ODNI's Intelligence Advanced Research Projects Activity (IARPA) — funds research programs with significant small business participation; BAA (Broad Agency Announcement) solicitations appear publicly
For classified programs, agencies can waive standard competition rules entirely. Do not expect set-aside percentages here to match what you see at DoD or civilian agencies.
ODNI publishes an annual IC Small Business Report that tracks small business utilization across the community. The 2023 edition reported that IC agencies collectively awarded approximately 20% of prime contract dollars to small businesses, below the governmentwide 27% goal. The gap is structural: classified contract vehicles simply exclude most competitors. That gap also means the unclassified slice gets more competition from small businesses who cannot access the classified work.
Finding opportunities
This is where IC procurement diverges most from other agencies.
beta.SAM.gov remains the starting point. Filter by NAICS codes aligned to your work, then add agency filters for DIA, NGA, or IARPA. Most open solicitations from these agencies will appear here if they are unclassified. NSA and CIA post almost nothing publicly.
FPDS-NG (Federal Procurement Data System) shows historical awards, including some IC contracts where the award itself is not classified. You can pull award history for a specific agency and NAICS combination to understand what has been awarded, to whom, and at what dollar thresholds.
IARPA.gov publishes its own BAA list directly. IARPA funds basic and applied research programs; many are accessible to small firms without facility clearances, particularly in early-stage research phases.
IC Vendor Day events — ODNI and individual IC agencies periodically host unclassified industry days. These are your best opportunity to meet contracting officers and small business representatives in person. ODNI's Small Business Program office announces these through their website and IC procurement newsletters.
Agency forecast documents — DIA and NGA publish acquisition forecasts. NGA's forecast has historically listed upcoming contracts by category, dollar estimate, and likely small business set-aside status. Check agency procurement pages in Q4 each fiscal year when forecasts are updated.
What you will not find publicly: anything in Sensitive Compartmented Information (SCI) or Special Access Programs (SAP). That work lives in classified systems your firm cannot access until you have appropriate facility and personnel clearances.
Registration requirements beyond SAM.gov
SAM.gov registration is the floor, not the ceiling.
CAGE code and facility clearance — To hold a classified contract directly, your facility needs a Facility Clearance (FCL) from the Defense Counterintelligence and Security Agency (DCSA). This is a separate process from SAM.gov. FCL sponsorship typically requires a prime or an agency to sponsor your company; you cannot self-initiate.
Personnel Security Clearances — Your key personnel need clearances appropriate to the work. Secret clearances take 3–6 months under current processing times. Top Secret/SCI clearances run 12–18 months or longer depending on scope. Plan accordingly.
Contractor Performance Assessment Reporting System (CPARS) — Past performance ratings in CPARS matter here just as elsewhere. IC agencies reference CPARS for source selection even when the work is classified.
IC-specific portals — Some IC agencies use separate procurement portals for unclassified work. DIA uses a contractor portal distinct from beta.SAM.gov for certain acquisitions. Check each agency's small business office website for current portal requirements.
If you are starting from scratch with no clearances, do not spend money on the FCL process speculatively. Get sponsored through a subcontract first.
Subcontracting: the actual entry point
The primary path for diverse businesses entering the IC is subcontracting through cleared primes. This is not a consolation prize. It is how most small businesses in the IC ecosystem started, including firms that now hold prime contracts worth hundreds of millions of dollars.
The primes with the largest IC presence:
- Booz Allen Hamilton — one of the largest IC contractors; has a formal supplier diversity program and a supplier registration portal at boozallen.com/supplier-diversity
- SAIC (Science Applications International Corporation) — significant NSA and IC-wide footprint; supplier portal at saic.com
- Leidos — holds major DIA and NGA contracts; supplier diversity office at leidos.com/company/supplier-diversity
- CACI International — strong presence across IC agencies; supplier registration at caci.com
- Peraton — formed from Northrop Grumman's IT services arm; substantial IC contracts; supplier information at peraton.com
- ManTech International — focused almost exclusively on federal and IC markets; supplier portal through their procurement page
Register in each prime's supplier portal before you approach their small business or supplier diversity teams. Come with your NAICS codes, certifications (8(a), WOSB, HUBZone, SDVOSB), a one-page capability statement, and specific names of contracts you believe they hold where your work fits.
Do not send a generic introduction email. Research the specific contract vehicle you are targeting. Look up the prime's FPDS award history in your NAICS category. Reference specific work. Prime contractor small business offices receive hundreds of inquiries per month; the ones that get traction come from firms who did their homework.
Practical first steps
Step 1: Get your house in order. SAM.gov active registration, DUNS/UEI, all certifications current. If you have 8(a), HUBZone, WOSB, or SDVOSB status, make sure it is active and shows correctly in SAM.gov. Primes verify this directly.
Step 2: Define your IC-relevant capability. Generic IT services will not get you far. Identify the specific technical domain where you have demonstrable past performance — cybersecurity assessments, data engineering, geospatial analysis, whatever it is. The IC rewards specificity.
Step 3: Target three primes. Pick the three primes most active in your NAICS codes and register in their portals. Follow their small business program offices on LinkedIn. Attend any public industry days they host.
Step 4: Apply for the IC's SBIR/STTR programs if you do R&D. IARPA funds research through BAAs and occasionally through SBIR-like mechanisms. If your firm does technical research, this is a funded path to cleared work without needing an FCL on day one.
Step 5: Pursue clearance strategically. Once you have a subcontract in hand that requires cleared personnel, your sponsor (the prime) initiates the clearance process through DCSA. That is the legitimate sequence. Clearances follow contracts; contracts do not wait for clearances.
Step 6: Join the IC OSDBU ecosystem. ODNI's Small Business Program hosts events and publishes resources specifically for small and diverse businesses. Sign up for their mailing list. Attend IC industry days. These events have a different quality of contact than civilian agency events because the audience self-selects toward firms that are serious about this market.
The IC is a long game. Plan for 18–36 months from first contact with a prime to your first subcontract award. That timeline shortens if you have cleared personnel already on staff, or if you bring a highly specific technical capability a prime needs on a contract they just won.
The opportunity is real. The entry requirements are higher than most federal markets. Both things are true.
