Unless you have undergone a DCAA Accounting System audit under the criteria in DFARS 252.242-7006 (a.k.a. DFARS Accounting System Audit), you do not know what a comprehensive audit is. To start with there are eighteen criteria, some of which are as broad as “Accounting practices in accordance with standard promulgated by the Cost Accounting Standards Board, if applicable, otherwise, Generally Accepted Accounting Principles.” This leaves the door open to pretty much endless questions. But don’t worry, DCAA has narrowed it down to only 27 questions.
The Questions-Broken Down
For each of the 27 questions, you should provide a summary narrative, a description of the ERP and organizational structure, key process flows, key controls, key policies and procedures and key personnel. By the time the instructions are included and the format laid out, the questions cover 16 pages, broken down into the following five parts:
- Control Environment
- Labor Timekeeping, Distribution and Compensation
- Direct Contract Cost: Materials/Subcontracts/ODC
- Indirect Cost and Rates
- Billing System
Many of the questions (especially in parts 2 – 4) are repetitive. For example, each part wants to know how your company accounts for unallowable costs – specifically for labor, direct-non-labor costs and indirect-non-labor costs. Are these processes in your company really so different that you need to answer the question three times? Nevertheless, if you answer each question without referring to other parts of the document, you are going to end up with 75 to 100 pages of narrative. And by the way, please provide the written policies to support your narrative.
Timeline for DCAA Audit Responses
Our experience was that DCAA wanted all this information put together and system demonstrations be prepared within 3 months and then projected 9 months after that before audit completion. However, in the interim, DCAA was sending specific requests related to the control environment section that had turnarounds of about a week.
Audits-The Good News
There are 3 pieces of good news related to these types of audits:
- Only companies with CAS-covered Defense contracts are subject to these types of audits, so small companies need not worry.
- Because these audits are so massive, not very many of them are currently being accomplished. However, as DCAA starts having IPA’s perform incurred cost audits, it will free up more resources for these types of audits.
- Most medium and all large companies have all this information already documented. Just putting it together in the format DCAA requested is time consuming and frustrating.
How to Be Prepared for a DCAA Accounting System Audit
If your ACO or DCAA auditor starts talking about performing an accounting system audit to test compliance with the DFARS criteria, be prepared to dedicate the resource needed to this project because the consequences of not adequately supporting the audit could be disapproval of your accounting system and up to a 5 percent withholding on all contracts.
Redstone GCI Can Guide You Through the Audit Process
Redstone Government Contracting, Inc. is helping navigate through these audits by assisting in the preparation, documentation and responses to DCAA. From resources to training, Redstone provides multiple options for helping your team through the process. If we can help you through this beast of an audit, please let us know, as it’s a full-time job, in and of itself. Let our experts guide you with years of experience and insight!