This isn’t a rhetorical question as programs like FedRamp exist to help startups have those good answers for responsible governments. While a brand new startup will not meet criteria, relatively new companies are able to meet requirements and earn business.

At the high level (ten figure contracts) startups have no chance vs Amazon and Microsoft, but there are many agencies and purchasing available to pursue.