NYC MBE Certification: A Practical Guide to Winning City Agency Contracts
NYC spends $25B+ annually with vendors. MBE certification unlocks set-aside contracts, but the path from certificate to award takes deliberate steps.
The Gap Between Certification and Contract Award
A minority-owned IT firm earns its NYC MBE certificate, uploads it to PASSPort, and then waits. Six months later, zero awards. The certificate is not the contract. It is an eligibility credential, and eligibility alone does not move procurement officers to select your firm. What moves them is a combination of correct registration, targeted outreach, responsive proposals, and a demonstrated track record inside the city's vendor ecosystem. This guide covers each of those steps in operational terms.
What NYC MBE Certification Actually Gives You
The NYC Department of Small Business Services (SBS) administers the M/WBE certification program under Local Law 1 of 2013 (amending the City Charter) and its amendments. Certified firms gain access to:
- Set-aside contracts: Solicitations reserved exclusively for M/WBE firms, typically under $1 million but sometimes higher under agency discretion.
- Participation goals: Prime contractors on large city contracts must meet M/WBE subcontracting goals. Your certification makes you a subcontract target.
- Agency outreach events: SBS hosts quarterly M/WBE forums where agency procurement officers actively recruit vendors.
- PASSPort visibility: NYC's procurement platform flags certified firms in vendor searches, which procurement staff use when building competitive pools.
IT Custom Solution LLC holds NYC MBE certification (#MWCERT2022-353) and has navigated this process directly. The observations below reflect that operational experience, not theory.
Step 1: Get Your PASSPort Profile Right Before You Pitch Anything
PASSPort (Procurement and Sourcing Solutions Portal) is the city's primary procurement platform. An incomplete or miscategorized profile is the single most common reason certified firms get overlooked in vendor searches.
Specific actions to take:
- NIGP commodity codes: Select every code that accurately describes your services. For IT firms, this typically includes codes under 20900 (IT consulting), 20916 (network services), 20920 (software development), and 20958 (cybersecurity). Do not pad with irrelevant codes; procurement officers filter by code match and will dismiss firms that appear to be gaming the system.
- Business description: Write it in plain language that matches how agency staff describe their needs in solicitations. If you do cloud migration, say "cloud migration" not "digital transformation services."
- References and past performance: Upload at least three references with dollar values and agency or client names. City agencies weight past performance heavily, even on small set-aside awards.
- Insurance certificates: Many agencies will not even open a proposal from a vendor whose insurance is not pre-loaded in PASSPort. Upload general liability (minimum $1M per occurrence is standard), workers compensation, and professional liability if you carry it.
Step 2: Map the Agencies That Actually Buy What You Sell
NYC has 80+ mayoral agencies. Chasing all of them is a resource drain. Instead, pull the city's Checkbook NYC data (checkbooknyc.com) and filter by vendor category and agency. This shows you exactly which agencies spent money on IT services in the last fiscal year, how much, and with which vendors.
For IT services, the consistent buyers include:
- NYC Department of Information Technology and Telecommunications (DoITT, now NYC Office of Technology and Innovation)
- NYC Health + Hospitals (HHC)
- NYC Department of Education
- NYC Department of Finance
- NYC Administration for Children's Services
Once you have your target list, identify the agency's Chief Contracting Officer (CCO) and M/WBE liaison. Both names are publicly listed on agency websites under procurement contacts. Email the M/WBE liaison directly, attach your capability statement (one page, specific), and request a capability briefing. These briefings are informal 30-minute calls. They do not guarantee a contract, but they get your name into the procurement officer's memory before a solicitation drops.
Step 3: Write a Capability Statement That Works in Government Context
A capability statement for city agencies is not a marketing brochure. It is a structured document that answers four questions a procurement officer has before they read past the first paragraph:
- What specific services do you provide, and in what technical areas?
- What is your past performance evidence (client name, scope, dollar value, outcome)?
- What are your differentiators relative to other IT vendors?
- What is your business size and certification status?
Keep it to one page. Include your UEI number (required for any federal work and increasingly requested by city agencies that receive federal pass-through funding), CAGE code if applicable, and your MBE certificate number. For reference, IT Custom Solution's UEI is PR9KWJPM4JU9 and CAGE is 91CE1. Procurement staff use these identifiers to cross-reference SAM.gov and PASSPort simultaneously.
Step 4: Respond to Every Relevant RFQ and Small Purchase Solicitation
City agencies issue Request for Quotations (RFQs) for purchases under the small purchase threshold that often go to M/WBE set-asides. These are posted on PASSPort and the City Record Online (CROL). Set a daily alert on CROL filtered by your NIGP codes. Respond to every relevant one, even if the scope is smaller than your target contract size.
Why respond to small RFQs? Because city procurement officers build their approved vendor pools from firms they have already paid and evaluated. A $40,000 network assessment contract that you execute well becomes the reference that wins you a $400,000 managed services contract two years later. The city's vendor development model is incremental by design.
When writing your RFQ response:
- Mirror the language of the scope of work exactly. If the RFQ says "network vulnerability assessment," your response should use that phrase, not "cybersecurity audit."
- Provide a line-item price breakdown even if not required. It signals transparency and makes evaluation easier.
- Include a one-paragraph past performance summary specific to the scope described.
- Submit before the deadline by at least 24 hours. Late submissions are rejected without exception in city procurement.
Step 5: Use the Subcontracting Path to Build Prime Contractor Relationships
Large city IT contracts (above $1M) carry M/WBE subcontracting goals, typically 20 to 30 percent of contract value. Prime contractors are required to meet these goals or document good-faith efforts. This creates a direct demand for certified M/WBE subcontractors.
Identify the prime contractors that win large city IT awards by searching Checkbook NYC. Then contact their business development or supplier diversity teams directly. Offer a specific capability, not a general partnership pitch. "We provide tier-2 help desk staffing and can absorb overflow tickets under SLA" is actionable. "We are interested in partnering" is not.
Subcontract work builds your past performance record, generates city-recognizable references, and often leads to teaming arrangements on future bids where you move into a prime or co-prime role.
Step 6: Attend SBS M/WBE Events and Agency Procurement Fairs
SBS hosts M/WBE forums roughly quarterly, and individual agencies hold procurement fairs several times per year. These are not networking events in the generic sense. They are structured meetings where agency procurement officers describe upcoming needs and certified vendors present capabilities.
Come with printed capability statements, a specific ask ("We are looking for subcontracting opportunities on your upcoming network modernization work"), and a follow-up plan. Collect the procurement officer's direct email and send a follow-up within 48 hours referencing the specific conversation you had.
Practical Takeaway
NYC MBE certification opens a door. Winning contracts requires a complete PASSPort profile, targeted agency outreach, disciplined RFQ responses, and a subcontracting strategy that builds your reference base incrementally. The firms that convert their certification into consistent revenue treat procurement as a pipeline, not a lottery. Track every solicitation you respond to, every briefing you request, and every prime contractor you contact. Pipeline visibility is what separates firms that win occasionally from firms that win consistently.
If you are building or refining your government contracting approach, reach out for a brief consult with the IT Custom Solution team. We work with city agencies directly and can share what has worked operationally at the proposal and outreach level.
Tell us about the work.
IT Custom Solution delivers cybersecurity, cloud, managed IT, and custom software for federal, state, and local agencies.