2026 NDAA Threshold Changes: Key Impacts for Small Businesses
June 30, 2026 is not just another date on the procurement calendar.
For defense contractors, it is the line where several long-standing compliance thresholds change at once. The FY 2026 NDAA authorizes roughly $900 billion in defense and national security spending, but buried inside that massive policy bill are procurement changes that may matter more to your next proposal than the topline number itself.
The rules around certified cost or pricing data, Cost Accounting Standards, and even incumbent bid protests are being reshaped in ways that could alter pricing strategy, teaming decisions, subcontract negotiations, and protest risk for years to come.
For small and midsize businesses trying to grow in the defense market, this is not just a compliance update.
It is a competitive positioning moment.
The Big Changes Taking Effect After June 30, 2026
Several key acquisition thresholds are changing for defense contractors after June 30, 2026:
TINA threshold: increases from $2.5 million to $10 million
CAS full coverage threshold: increases from $50 million to $100 million
CAS per-contract applicability threshold: increases from $2.5 million to $35 million
There is also another major change in the pipeline: the so-called “loser pays” protest rule under Section 875, which could allow contracting officers to withhold up to 5% of payments from certain incumbent contractors who file GAO protests that are later found to lack a reasonable legal or factual basis.
Each of these changes matters on its own.
Together, they may change how small businesses price defense work, pursue larger opportunities, team with primes, and decide whether to challenge an award.
TINA: What It Is and Why the $10 Million Threshold Matters
Let’s start with TINA, because this is the change many contractors will feel first.
TINA is the old name most contractors still use for what is now called the Truthful Cost or Pricing Data Act. In plain English, it is the rule that can require a contractor to submit certified cost or pricing data when the government does not have enough competition or other reliable information to determine whether a negotiated price is fair and reasonable.
FAR 15.403-4 is the familiar place contractors look for the certified cost or pricing data threshold. The related clauses, including FAR 52.215-10, FAR 52.215-11, FAR 52.215-12, and FAR 52.215-13, are where the risk often shows up in actual contract administration.
What Certified Cost or Pricing Data Really Means
Certified cost or pricing data is not just “backup.”
It is a formal representation that the data submitted to the government is accurate, complete, and current as of the date of agreement on price. That certification can create defective pricing exposure if the government later determines that the contractor failed to disclose relevant cost or pricing information.
That is why TINA has always carried more weight than an ordinary pricing discussion.
A contractor might be able to explain a labor rate, vendor quote, material cost, indirect rate, or escalation assumption during negotiations. But once certified cost or pricing data is required, those details become part of a higher-risk compliance package.
What Changes After June 30, 2026
After June 30, 2026, the threshold for defense contracts and subcontracts moves to $10 million.
That is a major jump from the $2.5 million threshold contractors have been tracking since the October 2025 inflation adjustment. The new $10 million threshold applies to qualifying prime contracts and subcontracts entered into after June 30, 2026.
Practically, this means many negotiated defense opportunities in the $2.5 million to $10 million range may no longer require certified cost or pricing data, assuming no other rule or contract-specific requirement pulls the obligation back in.
That can reduce proposal burden, speed up negotiations, and make certain mid-sized opportunities more approachable for companies that do not have a deep pricing, finance, or DCAA-facing back office.
For many small businesses, this is the practical headline: more negotiated defense work may become reachable without triggering the full certified cost or pricing data process.
Less Certification Does Not Mean Less Pricing Discipline
Here is the part contractors should not miss: fewer certifications does not mean weaker pricing support.
Contracting officers still have to determine price reasonableness. Primes still have to justify subcontractor pricing. Agencies can still ask for data other than certified cost or pricing data. And if your pricing looks unsupported, inconsistent, or overly aggressive, the absence of a formal certification requirement will not save the deal.
The smart move is to treat this as a reduction in certification risk, not a permission slip to wing your pricing.
Contractors should still maintain clean support for:
- Basis-of-estimate files
- Labor rate assumptions
- Vendor quotes
- Indirect rate calculations
- Escalation logic
- Subcontractor pricing documentation
Commerciality and competition support, where applicable
The difference is that for many awards below $10 million, you may be able to negotiate without making the formal certification that creates defective pricing exposure.
That is a big deal.
How the TINA Change May Affect Pricing and Negotiations
The 'Timing Gotcha' for NDAA threshold changes means you should not assume the new threshold applies simply because a proposal is being discussed near the deadline. Instead, award date, negotiation date, subcontract agreement date, modification timing, and the exact clause language in the contract can matter. Older contracts and subcontracts may still contain older clause versions that do not automatically capture later threshold changes. Before assuming the $10 million number applies, review the clauses in the contract or subcontract. This is exactly where contractors get tripped up, assuming a new threshold applies everywhere only to discover an older clause, an existing IDIQ, or a specific subcontract flow-down tells a different story.
A small business that previously hesitated to chase a $5 million or $7 million negotiated defense award because of TINA burden may now see a more manageable path. A prime may also be more willing to bring in a capable small business subcontractor when the subcontract is below $10 million and does not trigger certified cost or pricing data.
That can make specialized small businesses more attractive in areas such as:
- Engineering support
- IT modernization
- Cybersecurity
- Logistics
- Professional services
- Maintenance and sustainment
- Training and technical support
For primes, the change may reduce the administrative drag associated with gathering, reviewing, and flowing certified data from subcontractors. For small businesses, it may remove one of the barriers that made negotiated defense work feel heavier than the contract value justified.
What is the Timing Gotcha for NDAA Threshold Changes?
Do not assume the new threshold applies simply because a proposal is being discussed near the deadline.
Award date, negotiation date, subcontract agreement date, modification timing, and the exact clause language in the contract can matter. Older contracts and subcontracts may still contain older clause versions that do not automatically capture later threshold changes.
Before assuming the $10 million number applies, review the clauses in the contract or subcontract.
That may sound basic, but this is exactly where contractors get tripped up. They read about a new threshold, assume it applies everywhere, and then discover that an older clause, an existing IDIQ, or a specific subcontract flow-down tells a different story.
CAS: The Other Major Threshold Shift
Cost Accounting Standards, or CAS, are a different animal.
TINA is about the data you submit to support a negotiated price. CAS is about the accounting rules you must follow once covered work enters your contract base.
CAS lives in 48 CFR Chapter 99, with CAS applicability rules in 48 CFR 9903.201-1. When CAS applies, it can affect how you estimate, accumulate, allocate, and report costs across contracts.
For companies used to commercial accounting or simpler government work, CAS can feel like crossing into a more mature and more expensive compliance environment.
What CAS Is Designed to Do
CAS is meant to promote consistency and uniformity in how contractors account for costs on covered government contracts.
That may sound harmless enough.
But in practice, CAS can affect major parts of your business, including:
- How indirect costs are allocated
- How home office expenses are treated
- How labor costs are accumulated
- How accounting changes are disclosed
- How cost impacts are calculated
- How audit risk is managed
For a growing contractor, CAS coverage can require more sophisticated accounting policies, stronger internal controls, and better documentation across the organization.
That is why these threshold changes matter.
The Two CAS Threshold Changes Contractors Need to Understand
The FY 2026 NDAA makes two major CAS threshold changes.
First, the full CAS coverage threshold increases from $50 million to $100 million.
Second, the contract-level CAS applicability threshold increases from $2.5 million to $35 million.
The Cost Accounting Standards Board has also proposed implementing changes to 48 CFR 9903.201-1, including decoupling the basic CAS threshold from the Truthful Cost or Pricing Data threshold and raising the basic CAS monetary threshold to $35 million.
Why the $35 Million Contract-Level Threshold Matters
For small businesses, the $35 million contract-level number may be the more immediate relief.
Under the old framework, a contractor could find itself dealing with CAS much earlier than expected, especially as it moved from smaller set-asides into larger negotiated defense work.
With the new $35 million contract-level threshold, a broader band of contracts may stay outside CAS coverage altogether.
That can lower accounting-system pressure and make larger defense opportunities less intimidating for companies growing out of the small-business stage.
This does not make accounting maturity optional. It does make the jump into CAS coverage less immediate for many contractors.
Why the $100 Million Full Coverage Threshold Matters
The full coverage increase to $100 million matters for a different group: successful mid-tier contractors that have started stacking up CAS-covered work and were approaching the old $50 million line.
For those companies, the change may delay the jump into full CAS coverage and the added disclosure, consistency, and administrative burdens that come with it.
This is not just paperwork relief.
CAS compliance can influence how a company builds its indirect rate structure, how it allocates home office expenses, how it treats uncompensated overtime, how it handles changes in accounting practice, and how it supports costs during audit.
Avoiding unnecessary CAS coverage can preserve flexibility at a critical growth stage.
CAS Relief Does Not Mean CAS Can Be Ignored
Do not read these changes as “CAS no longer matters.”
If you are already performing CAS-covered contracts, you need to know how the new rules affect existing coverage, future awards, and disclosure obligations.
If you are bidding as a subcontractor under a large defense prime, the prime may still impose accounting and documentation requirements that feel CAS-like, even when CAS technically does not apply to your subcontract.
And if you are moving toward larger cost-reimbursement, incentive, or negotiated defense work, your accounting maturity still matters.
This is where experienced contractors can gain an edge.
A company that understands when CAS applies, when it does not, and how to explain its accounting structure clearly can move faster in negotiations. A company that simply says, “We are under the threshold, so we are fine,” may still get slowed down by a contracting officer, a prime contractor, or an audit request.
The “Loser Pays” Protest Rule: A New Risk for Incumbents
The most controversial change in the pipeline may be Section 875, the so-called “loser pays” protest rule.
Section 875 directs DoD to revise the DFARS so contracting officers may withhold up to 5% of payments from certain incumbent contractors that file GAO protests involving follow-on defense work.
If GAO determines the protest lacks any reasonable legal or factual basis, the withheld amount may be forfeited.
The rule is not aimed at every protester. It is focused on incumbent DoD contractors protesting at GAO, and implementation depends on DFARS rulemaking.
What the Rule Is Intended to Do
The intent is easy to understand.
Congress and DoD have long been frustrated with protests viewed as tactical delay tools, especially when an incumbent receives a bridge or extension while the protest is pending.
Section 875 is designed to discourage weak protests that preserve incumbent revenue without a serious legal or factual basis.
That is the policy argument behind it.
But the practical effect could be much broader.
How This Could Chill Legitimate Protests
Incumbents are often the companies best positioned to spot evaluation problems.
They know the requirement. They know the operational realities. They may recognize when an agency misunderstood staffing, transition risk, technical approach, past performance, or pricing assumptions.
If those companies become reluctant to file because a protest could put 5% of payments at risk, legitimate procurement errors may go unchallenged.
For small businesses, the cash-flow issue is real.
A large defense contractor may be able to absorb a temporary withholding while a protest runs its course. A small incumbent performing a services contract may not have that cushion.
Payroll, subcontractor payments, insurance, and working capital do not pause because a protest is pending.
Losing a Protest Is Not the Same as Filing a Baseless Protest
The key phrase will be “lacks any reasonable legal or factual basis.”
That is not the same as losing a protest.
Contractors lose protests all the time even when the protest was serious, well-supported, and reasonable. The danger is uncertainty: until DFARS rulemaking clarifies the mechanics, incumbents will have to think carefully about how GAO dismissal standards, payment withholding, bridge performance, and forfeiture risk interact.
The practical advice is simple: protest strategy needs to become more disciplined.
Before filing, incumbents should pressure-test the protest grounds.
Ask:
- Is there a clear evaluation error?
- Is there record support?
- Was there unequal treatment?
- Did the agency ignore the solicitation’s stated evaluation criteria?
- Was the price realism or technical evaluation unreasonable?
- Is the protest based on procurement law and facts, or mostly frustration that the agency picked someone else?
That distinction has always mattered.
Under Section 875, it may matter financially.
How These Changes May Shift Competitive Positioning
The real risk areas and pitfalls contractors should watch include: the effective date of contracts, outdated clause versions, conservative flow-down requirements from primes, the distinction between 'not certified' and 'not supported' pricing data, complex CAS edge cases, and the financial implications of protest cash flow. The biggest mistake contractors can make is treating these changes as a blanket exemption from discipline. They are not. For example, contracts entered into on or before June 30, 2026 may be treated differently than contracts entered into after that date, and older FAR and DFARS clause versions may not automatically update threshold treatment. Primes may also continue using conservative subcontract templates, and the government can still ask for data other than certified cost or pricing data. Furthermore, IDIQ structures and mixed contract types can create CAS applicability questions, and incumbent contractors considering a GAO protest on a DoD follow-on procurement now need a financial risk discussion, not just a legal merits discussion.
The $10 million TINA threshold could make negotiated defense work below that line more attractive. The $35 million CAS threshold could allow more companies to pursue meaningful defense contracts without immediately stepping into CAS coverage. The $100 million full CAS threshold may give growing firms more runway before the next compliance tier.
It is important to watch the contract date for NDAA changes because contracts entered into on or before June 30, 2026 may be treated differently than contracts entered into after that date. Subcontracts and modifications can also have their own timing questions. Therefore, do not rely on the headline date alone; instead, look at the actual agreement, clause language, and effective timing to ensure correct application of the new thresholds.
Primes may have more flexibility to structure subcontract packages below the TINA and CAS trigger points. Small businesses may become more attractive teammates where they can bring specialized capability without creating unnecessary pricing or accounting burden.
On the other side, small businesses bidding as primes may be able to compete more confidently for larger set-aside or sole-source defense opportunities if the compliance load is lighter than it would have been under the old thresholds.
Where Small Businesses May See Opportunity
It is important to watch contract clauses for NDAA changes because older FAR and DFARS clause versions may not automatically update threshold treatment the way you expect. While clause review is not glamorous, it is crucial as it can prevent a pricing fight later by ensuring you understand the exact terms and conditions applicable to your contracts.
- Larger small business set-aside pursuits
- Negotiated defense work below $10 million
- Subcontract packages structured below key compliance thresholds
- Prime-sub teaming arrangements with less pricing friction
- Growth-stage defense work below the new CAS applicability line
- Incumbent recompete strategy, especially where protest risk must be weighed carefully
But strategy matters.
It is important to watch subcontract flow-downs because primes may continue using conservative subcontract templates until their legal and contracts teams update internal policies. Therefore, do not assume a prime’s first draft is correct. If a subcontract requires certified cost or pricing data when the threshold does not appear to require it, ask why. Similarly, if CAS-like obligations appear in a subcontract below the applicability threshold, understand whether the prime is imposing them as a business requirement, not a regulatory one, to avoid unnecessary compliance burdens.
If you are a small business trying to break into defense work, you still need a clear NAICS and PSC strategy, strong SAM and Small Business Search visibility, a credible capability statement, relevant past performance, and a plan for finding buyers, primes, and recompetes before the solicitation drops.
Threshold relief helps most when you are already positioned to be found and taken seriously.
Teaming and Subcontracting Dynamics Will Matter More
The difference between 'not certified' and 'not supported' pricing data is crucial: while 'not certified' means formal certification is not required, 'not supported' implies a lack of adequate documentation, which the government can still request. The government can still ask for data other than certified cost or pricing data, and your pricing file still needs to make sense. Therefore, no certification does not mean no documentation; robust support for your pricing remains essential.
A subcontract below $10 million may not require certified cost or pricing data, but the prime may still need enough support to defend the overall price. A subcontract below CAS thresholds may still carry cost, billing, cybersecurity, quality, and performance reporting obligations.
That means small businesses should get specific early.
CAS edge cases are complex scenarios where IDIQ structures, task order values, contract ceilings, exemptions, and mixed contract types can create applicability questions that are not obvious from the headline threshold. Contractors should watch them because if you are pursuing larger defense work, it is crucial not to wait until award to think about CAS, as these nuances can significantly impact compliance and strategy.
- Who owns each part of the technical solution
- How workshare will be divided
- Who is responsible for pricing support
- Which clauses will flow down
- Whether cost or pricing data will still be requested
- Whether accounting-system expectations exceed the formal CAS requirement
- How audit support will be handled
- How protest, transition, and recompete decisions will be managed
The companies that handle these conversations early will look more mature to primes and contracting officers.
Contractors should watch protest cash flow under the new rule because if you are an incumbent considering a GAO protest on a DoD follow-on procurement, the protest decision now needs a financial risk discussion, not just a legal merits discussion. This means that while legitimate protests should not disappear, they should be more carefully documented, more strategically evaluated, and more clearly tied to facts and procurement law to mitigate financial exposure.
Real Risk Areas and Gotchas Contractors Should Watch
The biggest mistake contractors can make is treating these changes as a blanket exemption from discipline.
They are not.
Why is it Important to Watch the Contract Date for NDAA Changes?
Contracts entered into on or before June 30, 2026 may be treated differently than contracts entered into after that date.
Contractors who move early will have an advantage with NDAA changes because they will proactively update their bid/no-bid criteria, revisit pricing templates, review subcontract language, and engage confidently with contracting officers and primes. This proactive approach allows them to look at opportunities between $2.5 million and $10 million differently, and opportunities below $35 million differently, treating protest decisions with more rigor than emotion. The 2026 NDAA moves some of the lines, creating new room for small businesses to compete. By positioning your company for defense contracts, identifying the right teaming partners, or finding subcontracting opportunities before others, you can capitalize on this competitive positioning moment.
Do not rely on the headline date alone. Look at the actual agreement, clause language, and effective timing.
Why is it Important to Watch Contract Clauses for NDAA Changes?
Older FAR and DFARS clause versions may not automatically update threshold treatment the way you expect.
Clause review is not glamorous, but it can prevent a pricing fight later.
Why is it Important to Watch Subcontract Flow-Downs?
Primes may continue using conservative subcontract templates until their legal and contracts teams update internal policies.
Do not assume a prime’s first draft is correct.
If a subcontract requires certified cost or pricing data when the threshold does not appear to require it, ask why. If CAS-like obligations appear in a subcontract below the applicability threshold, understand whether the prime is imposing them as a business requirement, not a regulatory one.
Watch the Difference Between “Not Certified” and “Not Supported”
The government can still ask for data other than certified cost or pricing data.
Your pricing file still needs to make sense.
No certification does not mean no documentation.
What are CAS Edge Cases and Why Should Contractors Watch Them?
IDIQ structures, task order values, contract ceilings, exemptions, and mixed contract types can create applicability questions that are not obvious from the headline threshold.
If you are pursuing larger defense work, do not wait until award to think about CAS.
Why Should Contractors Watch Protest Cash Flow Under the New Rule?
If you are an incumbent considering a GAO protest on a DoD follow-on procurement, the protest decision now needs a financial risk discussion, not just a legal merits discussion.
That does not mean legitimate protests should disappear.
It does mean they should be more carefully documented, more strategically evaluated, and more clearly tied to facts and procurement law.
The Contractors Who Move Early Will Have the Advantage
The best contractors will not wait for every agency, prime, and contracting office to catch up.
They will update their bid/no-bid criteria.
They will revisit pricing templates.
They will review subcontract language.
They will talk to contracting officers and primes with confidence.
They will look at opportunities between $2.5 million and $10 million differently.
They will look at opportunities below $35 million differently.
And they will treat protest decisions with more rigor than emotion.
That is where the opportunity sits.
The 2026 NDAA does not remove complexity from defense contracting. Nothing ever really does. But it does move some of the lines.
For small businesses, moved lines can mean new room to compete.
If you are trying to position your company for defense contracts, identify the right teaming partners, or find subcontracting opportunities before everyone else is chasing the same solicitation, this is the time to get serious about your market strategy.
FedBiz Access has helped thousands of businesses find the right opportunities over more than 25 years in government contracting. If defense work is part of your growth plan, call us now: 844-628-8914 or book a call so we can help you find where you fit, who you should be talking to, and which opportunities are actually worth pursuing.
