If you’re asking how much general liability insurance does a government contractor need, the common market answer is $1M/$2M, but that number only tells part of the story. Many government contractors buy a $1M/$2M general liability policy and assume they’re covered. The real problem isn’t the limits. It’s that many contractors never verify whether their policy language actually matches what the contract requires. The gap between what you have and what your contracting officer expects can cost you a proposal, a task order, or worse, a Notice of Cure.
The team at Risk Reconnaissance LLC, an Atlanta-based brokerage that works exclusively with government and defense contractors, frequently encounters this mismatch. Contractors come in with a policy that looks right on the surface, but the endorsements are wrong, the certificate holder name is slightly off, or the aggregate limit falls short of what the solicitation specifies. This guide breaks down what the FAR actually requires, what agencies demand above that floor, and how to verify your coverage is compliant before you submit.
What FAR Subpart 28.3 Actually Requires for General Liability
FAR 28.307-2(b) sets a minimum of $500,000 per occurrence for bodily injury under general liability when a contracting officer invokes insurance requirements. Property damage liability has no universal FAR-wide dollar minimum. It’s required only in special circumstances at the agency’s discretion. Many contractors assume the federal government mandates the same baseline as a commercial prime. It doesn’t, and understanding that distinction matters.
Contracting officers have authority to require higher limits when the nature of the work or site conditions warrant it. FAR 52.228-5, Insurance, Work on a Government Installation, makes the contract schedule the governing document. Limits stated in your specific solicitation override the general FAR baseline. Always read the contract schedule first, not just the clause reference.
For defense contracts, DFARS supplements the FAR and can impose additional insurance requirements depending on contract type, theater of operations, or sensitivity of the work. The DFARS doesn’t lower FAR minimums; it adds to them. Defense contractors, especially those working on installations or deploying personnel overseas, need to account for both layers simultaneously. See the DFARS Subpart 228.3 for details contractors commonly reference when evaluating DoD-specific requirements.
How Much General Liability Insurance Does a Government Contractor Need: FAR Floors vs. Real-World Standards
The FAR floor of $500,000 is a legal minimum, not a market expectation. In practice, many federal solicitations specify $1 million per occurrence and $2 million aggregate as the minimum commercial general liability threshold, particularly for service-based and vendor contracts. Many civilian agencies mirror this standard even without an explicit FAR requirement written into the solicitation. The statutory reference in FAR 28.307-2(b) is the regulatory basis for that floor.
Higher-risk contracts push limits further. Construction on federal facilities, work involving hazardous materials, and contracts with high public exposure can require $5 million or more per occurrence, a threshold seen in DoD construction and high-exposure civilian agency work. Some DoD primes and civilian agencies set their own insurance minimums in prime contractor flow-down requirements that exceed what the solicitation itself states. If you’re a subcontractor, the prime’s insurance clause governs your requirements, not just the base contract.
For reference, state and local government procurement most commonly defaults to $1 million per occurrence and $2 million aggregate, sometimes $1 million and $3 million aggregate for higher-risk work. This benchmark helps calibrate expectations when a federal solicitation is silent on limits, since contracting officers may reference common procurement benchmarks when setting requirements.
Two Contractor Scenarios: Where the Numbers Actually Land
A small 8(a) firm providing IT support services to a civilian agency on a $2.5 million contract will typically face a requirement for $1M/$2M general liability, workers’ compensation at statutory limits, and employers’ liability at the FAR minimum of $100,000. Their exposure is relatively contained: office-based work, no hazardous materials, no construction. A $1M/$2M GL policy in that situation commonly runs in the range of $500 to $1,500 annually for low-risk IT or professional services firms, though the final premium depends on revenue, location, claims history, and the specific insurer’s classification of the work.
A mid-size defense contractor managing a logistics support contract on a military installation faces a different picture. The solicitation may specify $2M/$4M or higher for GL, the prime may impose additional insured requirements with primary/noncontributory language, and DBA insurance may be required if personnel deploy overseas. Their annual GL premium for $1M/$2M limits can run $5,000 to $12,000 depending on trade class and revenue, and that figure doesn’t include the specialized coverages DoD contracts typically layer on top.
The difference between these two scenarios isn’t just in limits. It’s in the endorsements, the policy language, and whether your insurer is willing to add the specific wording the contract requires. A generalist policy that satisfies a commercial prime doesn’t automatically satisfy a DoD contracting officer who wants ISO-form endorsements and a certificate holder listed exactly as stated in the contract.
The Other Coverages Your Contract Probably Also Requires
Workers’ compensation is required at statutory limits under federal and state law. The FAR sets a minimum of $100,000 for employers’ liability. For contractors with personnel deployed overseas on federal contracts, Defense Base Act (DBA) insurance replaces domestic workers’ comp entirely. Many generalist brokers are unfamiliar with DBA placement. It’s a specialty coverage that requires an underwriter experienced in overseas contractor risk, and it’s among the most frequently missed requirements on DoD contracts.
Commercial auto liability is also an explicit FAR requirement for vehicles used in contract performance. U.S. minimums sit at $200,000 per person, $500,000 per occurrence for bodily injury, and $20,000 per occurrence for property damage. These are floors, not recommendations. Contracts involving fleet vehicles or frequent site travel often require higher limits stated directly in the solicitation.
Service-based contracts commonly require professional liability at $1 million per claim, sometimes higher for IT, engineering, or advisory roles. Cyber liability is increasingly mandatory when contractors handle sensitive government data, with required limits ranging from $1 million to $3 million depending on data classification and CUI handling obligations. Neither has a universal FAR minimum. Limits are set by the individual solicitation or agency policy, which means you need to read each contract rather than assume carryover from a prior award.
What Contracting Officers Actually Look for on Your COI
A certificate of insurance is a summary document, not proof of coverage. What actually matters to a contracting officer are the endorsements behind it: additional insured status, waiver of subrogation, and primary/noncontributory language. Each requires a policy endorsement, not just a checked box on the ACORD 25. The ISO forms most commonly referenced are CG 20 10 for ongoing operations and CG 20 37 for completed operations when additional insured status is required. For a clear primer on what contracting officers expect to see on a COI, review this certificate of insurance basics.
The certificate holder must match the contracting entity’s full legal name exactly as it appears in the contract and the agency’s SAM.gov registration. A name mismatch between your COI and your contract is a common reason proposals get kicked back. It seems minor until it delays your award or triggers a deficiency notice during evaluation.
Contracting officers are not insurance experts, but they do read the certificate against the contract language. If the contract requires waiver of subrogation and the COI doesn’t reference it, expect a cure notice or a delay in contract execution. In competitive procurement, a COI deficiency can eliminate you from consideration entirely. Getting the endorsement language right is not a formality. It’s part of proposal compliance.
Auditing Your General Liability Coverage Before the Proposal Deadline
Many contractors renew their GL policy once a year and assume it still meets requirements. The problem is that contract requirements evolve. A new task order under an existing IDIQ may carry different limits. A subcontract flow-down may impose endorsements your base policy doesn’t support. Coverage gaps are often discovered close to deadlines, when there’s little time to fix them.
Risk Reconnaissance LLC offers a direct service built around this gap: auditing existing coverage against the actual contract language before proposal submission. The team reads the insurance clauses, compares them against the current policy, identifies any shortfalls in limits or endorsements, and coordinates with underwriters to resolve deficiencies before they become proposal problems. This matters most for contractors entering new NAICS codes, pursuing larger contracts, or teaming as a sub where the prime’s requirements differ from what the base contract demands. Learn more about our approach at Insurance for Government Contractors, Risk Reconnaissance.
A disqualified proposal represents not just lost revenue but the time and cost of pursuing the opportunity. More critically, performing a contract without the correct coverage in place, especially if a claim arises, leaves a contractor exposed without the protection they assumed they had. The pre-proposal audit isn’t a bureaucratic formality. It’s a revenue protection step that pays for itself the first time it catches a gap.
Getting Your General Liability Coverage Right Before It Matters
When deciding how much general liability insurance a government contractor needs, the answer depends on more than a single number. The FAR sets a floor of $500,000 per occurrence, but many solicitations require $1M/$2M at minimum, and contract-specific language often pushes limits higher or adds endorsements a standard commercial policy doesn’t automatically include. For the official regulatory framework see FAR Subpart 28.3.
The variables, agency, contract type, installation work, overseas performance, subcontractor flow-downs, mean that the right GL limit for your specific contract depends on what the contract actually says, not what your policy renewal reflects. Read the insurance clauses in every solicitation. Verify the endorsement language. Confirm the certificate holder name matches the contract exactly.
Before your next proposal goes out, verify that your coverage matches the contract language. Risk Reconnaissance LLC is built for exactly this kind of review: a broker that reads GovCon contracts, understands what contracting officers look for, and closes coverage gaps before they cost you an award. For a detailed overview, see Government contractor insurance requirements decoded, Risk Reconnaissance. Reach out before the deadline: Have Questions?, Risk Reconnaissance