Customer Education

Requirements Package 101

What contracting needs before the acquisition can move. Could be a little. Could be a lot. Depends entirely on what you're buying.

A requirements package is the file you hand to contracting that says: this is what we need, this is why we need it, this is how much it costs, this is when we need it, and this is how we'll know it worked. The purchase request is just one document inside it.

The job here is not to turn customers into contracting officers. The job is to give the CO enough facts to pick the right path on the first try, ask the right questions, and not lose three weeks reverse-engineering what you wanted.

One thing to set up before the rest of this makes sense: contracting can buy almost anything. A $1.27 box of paper clips. A trillion-dollar fighter program. The Federal Acquisition Regulation governs both, but the specific rules, paperwork, approvals, and oversight scale enormously with complexity. A paper-clip buy invokes almost no documentation. A weapons program invokes a regulatory ecosystem with its own milestone reviews and congressional reporting. Your package is somewhere on that spectrum, and "what should be in my package" depends entirely on where.

01How big is your package?

Federal contracting buys things on a scale most outsiders never see. A $25 office-supply micro-purchase and a $400-billion weapons system both fall under the FAR umbrella, but the specific FAR sections invoked, the documentation required, the approvals needed, and the oversight imposed are wildly different at each end. Almost everything scales — and it scales hard.

Where your buy lands on that scale tells you what should be in your package. Don't show up with an F-35 binder for a printer buy. Don't show up with a sentence for a $50M services contract. Build to your tier.

Tier 1 · Up to $15K

Micro-purchase

A description, a justification, a fund cite, and someone with a Government Purchase Card. Hours of effort, not weeks. A CO often never touches it.

Tier 2 · $15K – $350K

Simplified Acquisition

Add a rough IGCE, light market research, basic specs or a short PWS, a real need date, and clear POCs. Days of work supported by your CO.

Tier 3 · $350K – $9M

Above the SAT

Commercial actions may still use FAR Part 12 simplified procedures up to $9M; non-commercial actions usually need a different acquisition strategy (FAR 14, 15, or 16 territory). Either way, expect a real requirement document, documented IGCE, market research memo, evaluation inputs, COR nomination, surveillance plan, and any restriction justifications. Most service, IT, and equipment buys live here.

Tier 4 · $9M – $25M+

Major procurement

Acquisition plan, formal source selection plan, OCI analysis, technical evaluation factors, life-cycle thinking, often EVMS reporting. Months of customer effort, multiple offices coordinating.

Tier 5 · MDAP territory

Major Defense Acquisition Program

These programs get their own dedicated program office and a portfolio of documents — capability requirements, test plans, sustainment plans, milestone decision packages, congressional notifications, and more. The "package" becomes a library. The F-35 has had hundreds of people working on requirements documentation for two decades.

Most customer-built packages live in Tier 2 or Tier 3. The rest of this guide is calibrated to those, with notes when something only kicks in higher up.

02Why the package matters

Contracting cannot buy an idea. They buy a defined requirement, with funds attached, on a real schedule, with a way to know it worked. If those pieces aren't in the file, the CO has three options: stop the package, rebuild it with you, or guess. The first costs the CO weeks. The second costs you weeks of your own time. The third is how you end up with a contract you can't administer and a vendor you can't terminate cleanly.

A good package does three things at once. It gives industry a clear target so they can price the work. It gives the CO a defensible file when GAO, the IG, or your own leadership asks questions later. And it gives you, the customer, a contract you can actually manage after award. If your package only says "buy software" or "continue the support contract," it doesn't do any of those things yet.

The package is ready when a stranger can read it and understand what you need, why it matters, how to price it, and how success will be measured.

03The five questions contracting has to answer

When your package lands with the CO, the first review is the CO working through five practical questions. Every section of your package exists to help answer one of them.

Question 1

What are we buying?

Specific enough that industry can price it. "Software for analytics" is not specific. "Web-based dashboard for 85 users with three weekly reports" is.

Question 2

Why do we need it?

The mission problem, not the preferred answer. "Vendor X knows our systems" is not a need. "We have a quarterly reporting deadline that requires this capability" is.

Question 3

Can the market provide it?

Prior buys, known vendors, commercial availability, small business sources. The CO needs to see the shape of the market before picking a strategy.

Question 4

Can we fund and time it?

Funding year, need date, period of performance, approval timing — all of those have to line up. Wishing they did doesn't make them.

Question 5

How will we know it worked?

Acceptance criteria, deliverables, COR duties, surveillance plan. If you can't tell when the contractor is done, neither can the contractor.

If your package answers those five, the CO can help. If it doesn't, the CO has to play detective before they can play buyer.

04Who owns what

A requirements package gets built by a team. A first-time customer who shows up trying to do everything alone usually ends up doing none of it well. Here's the unspoken org chart.

Role Owns
You (program office / requiring activity) The need, the mission rationale, the technical facts, acceptance criteria, and the points of contact.
Resource advisor / financial manager Fund type, fiscal year, amount, and current funding status.
Technical SME Technical accuracy, minimum requirements, and inspection logic.
Contracting officer Acquisition strategy, solicitation, award, file defensibility, and contract authority.
COR / acceptance owner Surveillance and inspection after award.
IT, security, safety, legal Specialty reviews when the requirement triggers them.

If your name isn't next to a row, that doesn't mean you're not part of the package — it means you're providing inputs, not making the call. The customer side of the package needs all of those people to play their position. Bring them in early.

05What goes in your package

This is the comprehensive view: everything that could be in a requirements package, organized by when it kicks in. Almost no buy needs all of it. Every buy needs the first list. Use this as a menu, not a checklist — pick what your acquisition actually pulls in.

Always — every package, no exceptions

If you're sending it to contracting at all, any one of these missing means the package isn't ready. (A pure GPC micro-purchase often doesn't go through contracting and may not need a formal package — but if a CO is involved, these are the floor.)

  • Requirement description. What you're buying, in plain language.
  • Justification of need. Why this requirement exists. The mission tie.
  • Estimated dollar value. Even a rough order of magnitude is fine at intake.
  • Need date. A real one, backed by a mission event, deadline, or schedule constraint.
  • Funding identification. Fund type, fiscal year, and source. Even card buys come from a budget line.
  • Customer points of contact. A program owner, a technical SME, and someone who can answer fund questions.
  • Acquisition vehicle preference, if any. Or "no preference, CO's call." Both are valid.

Add as complexity grows (Tiers 2 and up)

Most service, IT, and equipment buys add some or all of these. Pull what applies to your buy.

  • Period of performance. Start date, end date, and any option years.
  • Place of performance. Government site, contractor site, or mixed.
  • Quantity, unit of issue, delivery schedule. For supplies and recurring services.
  • Independent Government Cost Estimate (IGCE). The government's own price estimate. Required above SAT.
  • Market research memo. Sources checked, vendors identified, capabilities, and price references.
  • Requirement document. PWS for services, SOW for task-based work, SOO for outcomes-based work, specifications and drawings for supplies and construction, or a purchase description for commercial supplies.
  • Salient characteristics. The minimum capabilities required. Critical for brand-name-or-equal buys.
  • Acceptance criteria. The bar for "done."
  • Deliverables list. What gets handed over, when, and to whom (CDRLs in DoD).
  • Evaluation factor input. What matters when picking among offers, beyond minimum acceptability.
  • Past performance considerations. What kind of relevant prior experience matters.
  • COR nomination. Name and qualifications of the person who will watch the contract after award.
  • Quality Assurance Surveillance Plan (QASP). How performance will be measured.
  • Inspection and acceptance plan. Who signs off, where, and against what standards.
  • Funding document. PR, MIPR, 9-Form — whatever your shop uses to formalize the funds.
  • Bona fide need analysis. Does the need year match the appropriation year?
  • Need date justification. Why this date is real and not just preferred.

Triggers — only when conditions apply

These show up only when something specific about the buy pulls them in. If the trigger fits, the document is required or strongly expected. If the trigger doesn't fit, ignore the line.

Restricted competition
  • Brand-name justification
  • Sole-source J&A (Justification and Approval)
  • Limited Sources Justification (LSJ) for FSS orders
  • Fair-opportunity exception for IDIQ task orders
  • Unusual and compelling urgency justification
Commercial
  • Written commercial product or commercial service determination — required for DoD above SAT under DFARS 212.102
  • Reference to prior commercial determinations, if reusing
  • Commerciality-supporting market research (catalogs, schedules, established prices)
Services-specific
  • Performance standards and metrics
  • Personal services analysis (FAR 37.104)
  • Service Contract Labor Standards (formerly SCA) wage determinations
  • Severability analysis for services that cross fiscal years on annual money
  • Phase-in / phase-out plan for recompetes
Construction
  • Specifications, drawings, and geotechnical reports
  • Site survey and environmental review (NEPA)
  • Performance bond and payment bond requirements
  • Construction Wage Rate Requirements (Davis-Bacon) wage determination
  • Permits and approvals
  • Phasing plan and notice-to-proceed conditions
IT and cyber
  • Section 508 accessibility requirements
  • Authority to Operate (ATO) status / RMF package
  • FedRAMP authorization for cloud services
  • Cybersecurity requirements (NIST 800-171, CMMC)
  • Data rights and license terms
  • Software Bill of Materials (SBOM) requirement
Government-furnished anything
  • Government-Furnished Property (GFP) list
  • Government-Furnished Information (GFI) list
  • Government-Furnished Equipment (GFE) accountability plan
Risk and oversight
  • Organizational Conflict of Interest (OCI) analysis
  • Security clearance and information protection requirements
  • Public-sensitivity / political-sensitivity flag
  • Risk management plan
  • Earned Value Management (EVM) reporting requirements
  • Should-cost analysis
Major procurements (Tier 4 and up)
  • Acquisition strategy and acquisition plan
  • Source selection plan
  • Capability Development Document (CDD)
  • Test & Evaluation Master Plan (TEMP)
  • Life Cycle Sustainment Plan (LCSP)
  • Cost Analysis Requirements Description (CARD)
  • Acquisition Decision Memorandum (ADM)
  • Milestone review packages
Recompetes and follow-ons
  • Prior contract number and award history
  • Incumbent transition risks
  • Phase-in / phase-out plan
  • Lessons learned from the prior contract
Customer move

You are not expected to know which of these apply. Your CO does. Your job is to bring the facts that determine which trigger fires — the dollar value, the requirement type, whether it's commercial, who furnishes what, and what could make it controversial. The earlier you bring those facts (even rough), the less rework happens later.

06Weak package vs. ready package

The difference is rarely length. It's specificity. A two-page package with real facts beats a twenty-page package full of vague language. Every time.

Weak

"Need contractor support for data analytics. Must be experienced. Need award by end of month. Vendor X is preferred because they know our mission."

  • No measurable outcome
  • No deliverables or acceptance criteria
  • No market research beyond a preferred vendor
  • No funding, users, volume, or performance period
  • No explanation of why the timeline is real

Ready

"Need a web-based analytics dashboard for 85 users to ingest weekly CSV exports, apply five defined business rules, and generate three standard reports by 0800 each Monday for one base year and two option years."

  • Defines users, outputs, timing, and period
  • Identifies measurable reports and review points
  • Can support market research and pricing
  • Leaves room for more than one vendor solution
  • Gives the CO something to turn into a solicitation

The "ready" version isn't perfect. It still needs funding, market research, security review, evaluation inputs, and a real PWS. But it gives the acquisition team a starting point that doesn't require a guessing game.

07When not to send it yet

You can absolutely send an early draft to ask for help. That's good. What you should not do is send a half-built package as if it's ready for solicitation. The list below is the difference.

Stop and fix before calling it ready

The requirement is just a brand or vendor name. If "we need Vendor X" is the whole story, the file needs the minimum need and the facts supporting any restriction.

The need date is urgent but unexplained. If the schedule is the whole justification, the file needs facts, not just stress.

No one can describe acceptance. If the customer can't tell when the contractor is done, the contractor can't either.

Funding is unknown or mismatched. The CO can talk strategy, but award planning depends on a real funding story.

The customer team is not identified. If contracting has no technical POC, no fund POC, and no decision-maker, the package will sit.

08The 30-minute customer huddle

Before the package goes to contracting, gather the program owner, the technical SME, the resource advisor, the potential COR, and anyone who can veto the requirement later. In thirty minutes, answer these questions out loud.

1 What are we actually buying? One sentence. If the room can't agree on the sentence, the package is not ready.
2 What problem does this solve? Tie the requirement to the mission outcome, not the preferred vendor or favorite product.
3 What are the minimum needs? Separate must-haves from nice-to-haves before the CO has to do it for you.
4 What market facts do we already have? Prior buys, known vendors, quotes, catalogs, schedules, constraints, incumbent history.
5 What date matters and why? Delivery date, award date, funding expiration, mission event, deployment, inspection, outage window.
6 Who will inspect performance? Name the COR or acceptance owner before award planning begins.
7 What could make this fail? Security, IT approval, access, data rights, GFP/GFI, labor standards, personal services, schedule pressure, public sensitivity.

This meeting is not bureaucracy. It's the cheapest possible place to find the problem. Finding it after solicitation is expensive. Finding it after award is pain with letterhead.

09What happens after you submit

"Sent to contracting" does not mean "ordered." Submitting the package starts an acquisition process. A simplified flow:

  1. Intake review. The CO reads the package and decides whether it's complete enough to plan an acquisition. Gaps come back to you here.
  2. Acquisition planning. Funding check, market research review, strategy decisions, contract type selection, set-aside analysis, and any required justifications. The CO may ask you for additional facts.
  3. Solicitation or RFQ. The CO publishes the requirement to industry — through SAM.gov, an existing vehicle, or a quote request. Industry asks questions; you help answer the technical ones.
  4. Evaluation. Industry responds. The CO and your technical evaluators score proposals or compare quotes. You participate as a non-voting evaluator or technical lead, depending on the action.
  5. Award. The CO signs the contract. The vendor is now legally obligated to perform.
  6. Administration. The COR inspects performance, you accept deliverables, invoices get paid, and any modifications run through the CO.

Where in this flow does the customer expect to be involved? Steps 1, 2, 4, and 6, mostly. The CO drives 3 and 5, but you're still the technical authority they call when industry asks "what does the requirement actually mean?"

How long does this take? It depends on the buy. A simplified action might be 30 days from package submission to award. An above-SAT competitive negotiated procurement might be 6 to 12 months. A major program is measured in years. The PALT Builder can give you a realistic timeline once the strategy is set.

10What to do next

Once you have a working package draft, run it through Preflight. Preflight reads the same questions a CO would ask on intake and tells you which pieces are present, which are missing, and which look risky. It's the cheapest second opinion you can get on a package, and it runs in your browser without uploading anything.

If you're still shaping the requirement, start with the Requirements Builder. It walks you through the requirement document, market research notes, evaluation thinking, and funding story without forcing you to sit down with a blank Word template.