Small businesses applying to the SBA Mentor-Protege Program should expect closer scrutiny of one document that was missing from every file the inspectors sampled: the protege's business plan. The Small Business Administration's Office of Inspector General reopened one of its 2019 recommendations on the program after a follow-up review, published as SBA OIG Report 26-16 and dated September 24, 2026, found that SBA had not finished the corrective work it promised. According to a review of the report by the government contracts law firm behind SmallGovCon, the central gap was that the application files the inspectors examined did not contain the protege business plans SBA's own procedures require.
The report is a verification inspection, a narrower exercise than a full audit. The OIG went back to four recommendations from its September 17, 2019 Evaluation of SBA's All Small Mentor-Protege Program (Report 19-17) and checked whether the fixes SBA reported were real and still operating. The OIG summary closes two of those items, reopens one and declines to reopen another, which means one recommendation on the program's application-review controls remains under formal audit follow-up seven years after the original findings.
Which 2019 Mentor-Protege Recommendations Did SBA Fix?
The 2019 evaluation asked two questions, and the 2026 inspection asked them again: whether SBA had effective controls to ensure it conducted initial application reviews and annual evaluations in line with the program regulations, and whether it measured program success. The OIG gave a split verdict on the four recommendations.
"We determined that Recommendations 1 and 4 were fully implemented; however, SBA management has not fully implemented Recommendations 2 and 3," the OIG wrote in Report 26-16.
SmallGovCon's account of the full report credits SBA with progress on the mentor side. The firm quotes the OIG as finding that SBA "established processes to ensure that mentors are qualified for the MPP during both initial application reviews and annual evaluations" and that analysts "performed procedures to verify the mentors' qualifications and eligibility for the MPP." The firm also quotes the OIG as finding that SBA "implemented procedures to ensure that certify.sba.gov has the necessary functionality for program officials to conduct application reviews and evaluations."
For the two unfinished items, the OIG chose different paths. It will reopen Recommendation 2, track management's implementation, and work with the agency to set a target date for completing corrective actions through the audit follow-up process. It will not reopen Recommendation 3. "We will not reopen Recommendation 3, as management resumed conducting annual evaluations, which we confirmed during our review," the OIG wrote. SmallGovCon, quoting the full report, says SBA told inspectors on July 27, 2026 that it "had just restarted reviewing and completing annual evaluations in July 2026."
SBA management agreed with reopening Recommendation 2, and the OIG found the agency's comments responsive to the recommendation.
Why the Missing Protege Business Plans Matter
The OIG summary page does not spell out the business-plan finding, but SmallGovCon, quoting the full report, describes it as the inspectors' main concern. SBA "procedures require that business plans be included in the initial application package," the OIG wrote, according to the firm, yet "the 12 application files we reviewed lacked the required business plan for the protege."
The OIG explained why that gap undermines the review itself. In the passage SmallGovCon quotes, the inspectors wrote that "[r]eviewing and maintaining the protege's business plan is required during application reviews for the analyst to ensure the mentor-protege agreement aligns with the MPP and the goals outlined in the protege's business plan." Without the plan, an SBA analyst has nothing to measure the mentor-protege agreement against. The analyst can confirm that the mentor qualifies, but cannot confirm that the assistance the mentor promises matches what the protege needs to grow.
SmallGovCon reports that the OIG grounded the requirement in the Standard Operating Procedures of the Office of Business Development, SOP 80 05 8, and that the reopened recommendation reads: "Develop and implement procedures to ensure quality and consistency in application reviews and annual evaluations, including maintaining adequate documentation to support completion of each step in the application review and annual evaluation process."
The firm's reading of which numbered recommendation covered which issue does not line up neatly with the OIG summary in every respect; SmallGovCon describes the original Recommendation 3 in terms of staffing, while the OIG summary ties the decision not to reopen it to the resumption of annual evaluations. The summary itself confirms only that Recommendation 2 is reopened and Recommendation 3 is not.
A Business Plan Requirement the Regulation Does Not Mention
The finding lands on a document that the program's governing regulation does not name. SmallGovCon points out that 13 C.F.R. § 125.9, the rule for the SBA Mentor-Protege Program, does not mention a business plan, while SBA's mentor-protege agreement template does refer to one in multiple places.
The firm adds that the SOP the OIG cited appears to trace back to SBA's former public procedures for the 8(a) Business Development Program, which may suggest SBA wants something resembling the business plan 8(a) participants prepare. SmallGovCon cautions that "the specific form or substance of the protege's business plan is not clear from the OIG report."
SmallGovCon places the report within what it calls a trend of the program "implementing or emphasizing additional requirements outside the regulations on applicants and participants," citing the firm's earlier coverage of SBA expectations on agreement formatting and hours. That characterization is the law firm's analysis, not an OIG finding.
What It Means for Contractors
Prospective proteges should prepare a written business plan and submit it with the mentor-protege agreement package, even though the regulation does not list one. SmallGovCon's takeaway is that "contractors can now expect that the SBA may require business plans to be submitted with the MPA when applying to the program and likely check to make sure the business plan aligns with the assistance in the MPA." The firm also notes that "SBA does not always follow every OIG recommendation down to the letter."
Drafting the agreement and the business plan together reduces the risk of a mismatch. If the agreement promises help with, for example, past performance in a particular market, the business plan should identify that market as a goal. Current participants should keep their business plans on file and up to date, since SmallGovCon notes the issue could also arise during annual evaluations, which SBA has now resumed.
Mentors should treat the protege's plan as part of their own application record. The OIG credited SBA with establishing mentor-qualification processes, so the weaker link in a joint application is more likely to be missing protege documentation than mentor eligibility.
Because the OIG is tracking Recommendation 2 through audit follow-up, any procedure SBA adopts to close it could surface as new application checklist items or requests for information. Applicants with pending packages should check whether a protege business plan is in the file.
