Redstone Government Consulting Blog | Lynne Nalley, CPA (4)

CMMC was put on hold until recently – but is rolling forward again at a high speed. DOD held a CMMC Day Conference in May 2022 stating its goal of submitting a proposed rule in July 2022 ( no proposed rule to date) and issuing two interim final rules by March 2023. If DoD is able to stay on track (which does not appear to be the case) and issue the final interim rule by March 2023, contractors could start seeing CMMC requirements in solicitations soon after.

Contractor compliance with National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171 is back in the news. The Principal Director, Defense Pricing and Contracting (DPC), issued a memorandum dated June 16, 2022, to the Department of Defense Departments, Subject: Contractual Remedies to Ensure Contractor Compliance with Defense Federal Acquisition Regulation Supplement Clause 252.204-7012, for contracts and orders not subject to Clause 252.204-7020; and Additional Considerations Regarding National Institute of Standards and Technology Special Publication 800-171 Department of Defense Assessments.

The Department of Justice (DOJ) announced in October 2021 that they are following through on the launch of the DOJ’s Civil Cyber-Fraud Initiative. This initiative is being used to pursue cybersecurity related fraud when Government contractors and subcontractors knowingly fail to comply with cybersecurity requirements, through the use of the False Claims Act (FCA). The DOJ is asking individuals (yes that means your employees) to focus their attention on potential cyber security noncompliance under the False Claims Act. It only takes one upset employee to report that you are not complying with your reported cybersecurity practices or have an unreported cyber-attack affecting covered defense information. Contractor employees who file a qui tam suit can receive a government payment incentive of 15 to 30 percent of the recovery. There has already been one reported contractor settlement resolving a qui tam suit for a company failing to meet federal cybersecurity standards.

The FAR Council published a final rule on March 7, 2022, implementing revisions to the Buy American Act. The final rule strengthens the impact of Federal procurement preferences for products and construction materials domestically manufactured from substantially all domestic content and is effective October 25, 2022.

What is a CPSR Review?

A CPSR Review is a Contractor Purchasing System Review. This review is performed by the Government on a contractor, in order to:

• assess the overall health of the purchasing organization,
• evaluate the efficiency and effectiveness of the contractor’s practices in expending Government funds,
• perform an independent review of the contractor’s system to optimize its effectiveness in compliance with Government policy, and
• identify risk to provide the Administrative Contracting Officer (ACO) a basis for approving or disapproving the purchasing system.

Does the Total of All Proposed Subcontract Costs Exceed 70% of the Total Contract Costs?

Is your company submitting a proposal to the government/prime contractor that includes a total of all subcontract costs exceeding 70 percent of the total costs proposed? If so, you must identify “added value” in your proposal so the government/auditor does not classify the indirect cost applied to the total subcontract cost as “excessive pass-through charges.”  The government considers indirect costs and profit/fee that a contractor applies to subcontract costs that exceed 70 percent of the contract to be “pass through costs.” This applies to lower tier subcontract costs also. If there is no negligible value added by the contractor, the government or auditor will question the indirect costs and profit/fee applied to the subcontract costs as unallowable excessive pass through under FAR 31.203(i).

Due to the recent Russian invasion in Ukraine, there has been a significant increase in cyber-attacks reported across the world. While the U.S. Government has concerns related to attacks on U.S. companies including banks, power companies, fuel suppliers, they are also concerned with defense contractors. President Biden has issued multiple warnings to companies including defense contractors about looming cyber-attacks.

What is the Commercial Item Group (CIG)?

So, what is the DCMA CIG? They are the “cadre of experts” established under DCMA as a result of Section 831 of the FY 2013 National Defense Authorization Act (NDAA). The purpose of the CIG is to assist DoD contracting officers in making commercial item determinations. There are several DCMA ACO’s that have warrants specific to making commercial item determinations on contractor assertions or higher-tier contractor determinations of its supplier’s assertions at the request of a buying command. DCMA CIG has price analysts and engineers that perform market research, evaluate the commercial submission, determine whether pricing is fair and reasonable as well as provide negotiation support.

This is the third blog in a three-part series on progress payments for Government contractors. In this blog we will discuss the estimate to complete, and the adjustments needed when there is a projected loss on a contract.

This is the second blog in a three-part series on progress payments. This blog addresses Line 5, Contract Price and Line 11, Total eligible costs on the SF1443 Contractor’s Request for Progress Payment Form.