DCAA Audits: What Government Contractors Must Know

The Defense Contract Audit Agency (DCAA) operates as the primary audit arm for federal defense contracts, reviewing contractor financial systems, incurred costs, and pricing proposals to protect the integrity of government spending. Audit findings carry direct financial consequences — from cost disallowances and billing suspensions to referrals under the False Claims Act. This page covers the structure, mechanics, and practical implications of DCAA audits for contractors operating across cost-reimbursement, time-and-materials, and fixed-price contract vehicles.

• Definition and scope
• Core mechanics or structure
• Causal relationships or drivers
• Classification boundaries
• Tradeoffs and tensions
• Common misconceptions
• Checklist or steps (non-advisory)
• Reference table or matrix

Definition and scope

The DCAA is a Department of Defense (DoD) field activity established under 10 U.S.C. § 240, charged with performing contract audits and providing accounting and financial advisory services to DoD components and other federal agencies that request assistance. As of fiscal year 2023, the DCAA workforce comprised approximately 4,800 auditors operating from field audit offices distributed across the United States and internationally (DCAA Annual Report to Congress FY2023).

Scope is defined primarily by contract type. DCAA authority extends to:

• Cost-reimbursement contracts — where the government reimburses allowable, allocable, and reasonable costs plus an agreed fee
• Time-and-materials (T&M) contracts — where labor hours are billed at fixed composite rates and materials at cost
• Fixed-price contracts with audit clauses — a subset where the contracting officer has specifically invoked audit access rights under FAR 52.215-2

Fixed-price contracts without such clauses fall largely outside DCAA's direct audit reach, though pre-award pricing audits may still apply when the proposed contract value exceeds established thresholds. The standard audit access clause is incorporated by reference at contract formation; its absence does not eliminate all audit risk but substantially narrows DCAA's post-award access rights.

The Defense Contract Audit Agency functions as the evaluator of contractor accounting systems, estimating systems, and billing practices — all of which feed into the broader framework of cost accounting standards compliance and allowable costs under government contracts.

Core mechanics or structure

DCAA audits follow a structured lifecycle anchored in Generally Accepted Government Auditing Standards (GAGAS), published by the Government Accountability Office (GAO) in the Yellow Book. The agency's own Contract Audit Manual (CAM), available at dcaa.mil, governs specific procedures.

Pre-award audits evaluate the reasonableness of a contractor's cost or pricing proposal before contract award. These are triggered when a negotiated contract, subcontract, or modification is expected to exceed $2 million (the threshold below which TINA — Truth in Negotiations Act — certificate requirements and mandatory cost or pricing data typically apply, codified at 10 U.S.C. § 3702).

Post-award audits span the contract period and include:

1. Accounting system audits — assess whether the contractor's accounting system can segregate direct from indirect costs, accumulate costs by contract, and produce accurate billing data
2. Billing system audits — verify that interim vouchers and public vouchers match incurred and allowable costs
3. Incurred cost audits — examine the incurred cost submission (ICS) that cost-type contractors must file within 6 months after each fiscal year end per FAR 52.216-7
4. Forward pricing rate audits — review proposed forward pricing rate agreements (FPRAs) for reasonableness before the government negotiates rates used in future contracts
5. Labor floor checks — unannounced visits to verify that labor charged to contracts matches timekeeping records for employees present at the facility

Causal relationships or drivers

Several interconnected factors determine when and how intensively DCAA audits a contractor.

Contract type is the dominant driver. Cost-reimbursement contracts, by definition, require the government to validate that claimed costs are allowable under FAR Part 31 and allocable to the contract. The government bears cost risk on these vehicles, creating a structural demand for ongoing audit activity that fixed-price contracts do not generate.

Dollar thresholds shape audit priority. The DCAA's incurred cost audit backlog has historically been large; in response, the agency began applying a risk-based sampling approach and raised the low-risk threshold. As of DCAA guidance updates in 2020, contracts with cumulative costs under $250,000 may receive a low-risk determination and be closed without full audit, though higher-risk indicators override this default (DCAA CAM 6-1008).

Accounting system adequacy is a causal multiplier. A contractor whose accounting system receives an "inadequate" rating from DCAA becomes subject to direct billing restrictions — the contracting officer may withhold up to 10% of interim payments pending corrective action (DFARS 252.242-7006). System inadequacy findings also trigger increased audit frequency across all active contracts.

Prior audit findings compound scrutiny. A pattern of questioned costs or persistent timekeeping deficiencies elevates a contractor's risk profile in DCAA's internal scoring, generating more frequent floor checks and billing reviews.

Classification boundaries

Not all financial reviews performed on government contracts are DCAA audits. Understanding the boundaries prevents confusion about rights and obligations.

DCAA vs. DCMA surveillance: The Defense Contract Management Agency (DCMA) performs contract administration and oversight — including property management reviews, earned value management system (EVMS) reviews, and purchasing system reviews. DCMA and DCAA coordinate but have distinct authorities. DCMA cannot substitute for a DCAA accounting system audit; DCAA cannot perform contract administration functions.

DCAA vs. agency Inspector General audits: Agency IGs (e.g., DoD IG, NASA OIG) may audit contractor activities under their own statutory authority when fraud, waste, or abuse is alleged. These are investigative rather than financial statement audits and operate under separate standards.

Federal vs. non-federal scope: DCAA services other agencies — NASA, Department of Energy, and others — by interagency agreement. A contractor working exclusively on civilian agency contracts may still receive DCAA audit support if that agency has requested it. The Federal Acquisition Regulation overview describes the cross-agency regulatory framework within which DCAA operates.

Cost-type subcontractors: Prime contractors on cost-type contracts must flow down audit access rights to subcontractors under FAR 52.215-2. A subcontractor receiving cost-reimbursement funding through a prime is therefore subject to DCAA audit even without a direct government contract.

Tradeoffs and tensions

Audit lag vs. contract closeout: DCAA's incurred cost audit backlog has delayed contract closeout for years on large cost-type programs. Delayed closeout freezes funds in unliquidated obligations (ULOs), distorting agency budget execution. The risk-based low-risk closure policy reduces backlog but shifts some audit risk to the government.

Contractor burden vs. government risk: Rigorous accounting system requirements impose compliance infrastructure costs — dedicated cost accounting personnel, compliant timekeeping software, and segregated cost pools — that smaller contractors may find disproportionate relative to contract value. However, relaxing these requirements increases the government's exposure to unallowable cost recovery.

Materiality thresholds and questioning costs: DCAA auditors question costs that appear unallowable, allocable incorrectly, or unreasonable. Questioned costs become disallowed only after contracting officer determination. Contractors may appeal disallowed costs through the disputes process under the Contract Disputes Act, codified at 41 U.S.C. § 7101 et seq.. This creates a structural tension: DCAA auditors operate under GAGAS independence requirements and cannot advocate for contractors, but their questioned costs are not final determinations. Misunderstanding this distinction leads to premature disputes or concessions.

Estimating vs. actual cost consistency: DCAA evaluates whether proposed rates in forward pricing align with historical actuals. Contractors who win contracts based on aggressive rate estimates may face post-award audits that challenge whether actuals match what was proposed — a dynamic that affects government contract profit and fee structures.

Common misconceptions

Misconception 1: DCAA approval of an accounting system means permanent compliance.
DCAA accounting system adequacy determinations are not permanent certifications. A system found adequate in one audit can be rated inadequate in a subsequent review if the contractor's practices, personnel, or systems change. Contractors must maintain continuous compliance, not achieve a one-time passing grade.

Misconception 2: Only large defense contractors face DCAA audits.
DCAA audits small businesses on cost-type contracts with the same regulatory authority applied to large contractors. Small business size does not exempt a contractor from audit access clauses, timekeeping requirements, or incurred cost submission obligations. The small business set-asides program affects contract access — not audit obligations.

Misconception 3: A DCAA auditor can approve or reject a contract award.
DCAA auditors issue audit reports with findings and recommendations. Contracting officers — not DCAA — make contract award decisions, cost determinations, and disallowance rulings. The contracting officer's role is legally distinct from the audit function.

Misconception 4: Indirect cost rates can be estimated freely without supporting methodology.
Forward pricing rates and incurred cost submissions must be supported by cost accounting practices that are consistent, disclosed (where required under Cost Accounting Standards), and compliant with FAR Part 31. Unsupported estimates are a primary source of questioned costs in pre-award audits.

Misconception 5: Subcontractors on fixed-price primes are immune from audit.
If the prime contract is cost-type and the subcontract is also cost-type, audit access flows down regardless of what type of prime vehicle is present. Subcontractors should review their flow-down clauses before assuming audit access does not apply.

Checklist or steps (non-advisory)

The following items represent the standard sequence of DCAA pre-award and post-award audit touchpoints for a cost-reimbursement contractor:

Pre-Award Phase
- [ ] Proposal prepared using disclosed cost accounting practices consistent with CAS requirements (48 CFR Part 9903)
- [ ] Cost or pricing data certified under TINA when proposal exceeds $2 million threshold
- [ ] Estimating system documented and capable of producing traceable cost projections
- [ ] Indirect cost rate pools and bases defined and consistent with prior submissions
- [ ] DCAA audit request received and acknowledged; point of contact designated

Post-Award Accounting System Phase
- [ ] Accounting system segregates direct costs from indirect costs by contract number
- [ ] Timekeeping system captures hours at the employee level, by project, daily
- [ ] Labor distribution system allocates recorded hours to correct cost objectives
- [ ] Subcontractor costs are tracked separately and supported by invoices
- [ ] Unallowable costs (entertainment, lobbying, certain legal fees per FAR 31.205) are identified and excluded from billing pools

Annual Incurred Cost Submission Phase
- [ ] ICS filed within 6 months of contractor fiscal year end per FAR 52.216-7
- [ ] Schedule of direct costs, indirect expense pools, and rate calculations completed
- [ ] Schedule of unallowable costs prepared separately and identified
- [ ] Supporting documentation retained per contract records retention requirements (FAR 4.703: generally 3 years after final payment)
- [ ] Prior-year audit findings tracked and corrective actions documented

Reference table or matrix

The government contractor resource index provides orientation to the full regulatory ecosystem within which these audit requirements operate, including the interconnection between DCAA processes, DFARS compliance, and the False Claims Act exposure that can follow from audit findings involving knowing misrepresentation of costs.