What Is DCAA and Why It Matters for Small Contractors
The Defense Contract Audit Agency (DCAA) is a U.S. government agency that audits contractors doing business with the Department of Defense and other federal agencies. Its job is to verify that the costs you're charging the government are allowable, allocable, and reasonable — and that your accounting systems are set up to prove it.
For small government contractors, DCAA matters the moment you win a cost-reimbursable contract, a time-and-materials (T&M) contract, or a cost-plus-fixed-fee (CPFF) agreement. Fixed-price contracts give you more flexibility, but once you're billing against actual incurred costs, you're in DCAA territory.
The stakes are real: a failed DCAA audit can delay contract awards, trigger withheld payments, require repayment of billed costs, and in serious cases, lead to suspension or debarment. Small contractors are particularly vulnerable because they often lack the dedicated compliance infrastructure that larger firms have built up over years of audits.
The 5 Key Areas DCAA Auditors Examine
DCAA audits cover a lot of ground, but the issues almost always trace back to the same five areas. Here's what auditors look for in each — and a checklist to assess your readiness.
Timekeeping
Timekeeping is typically the first thing DCAA examines and the most common source of findings. The standard is straightforward: employees must record their time daily, to the correct cost objective (contract number), and supervisors must review and approve timesheets. Corrections must be explained and initialed — not silently overwritten.
- ✓ Employees record time daily (not reconstructed from memory at week end)
- ✓ Time is charged directly to the correct contract number or indirect cost pool
- ✓ Supervisors review and approve timesheets at least weekly
- ✓ Corrections are documented with explanation and original value visible
- ✓ Employees working on multiple contracts can distinguish and document time per contract
- ✓ A written timekeeping policy exists and employees have been trained on it
- ✓ Timekeeping records are retained for at least 3 years (FAR 4.703)
Accounting System
DCAA requires an "adequate" accounting system before awarding cost-type contracts. Adequacy means your system can separately accumulate and identify direct and indirect costs by contract, produce reports for billing, and exclude unallowable costs. This doesn't require specialized GovCon software, but it does require structured processes and an audit trail.
- ✓ Direct costs (labor, materials, subcontracts) tracked separately per contract
- ✓ Indirect costs (overhead, G&A, fringe) tracked in separate pools and not charged directly to contracts
- ✓ Unallowable costs (entertainment, advertising, certain legal fees) identified and excluded from billings
- ✓ Chart of accounts separates direct and indirect cost categories clearly
- ✓ System can produce Contract Status Reports showing cumulative costs vs. funded amounts
- ✓ Subcontractor costs tracked separately per prime contract
- ✓ An audit trail links every posted cost back to source documentation
Indirect Cost Rates
Indirect cost rates — fringe benefits, overhead, and G&A — are how you recover the costs of running your business beyond direct project work. DCAA auditors examine whether your rates are consistently calculated, supported by actual costs, and applied correctly to contracts. Provisional (estimated) rates are used during the year; actual final rates must be settled annually via an Incurred Cost Submission (ICS).
- ✓ Fringe, overhead, and G&A rates are defined and documented in a written rate structure
- ✓ Rates are calculated consistently (same methodology period to period)
- ✓ Incurred Cost Submission (ICS) filed with DCAA within 6 months of fiscal year end (for cost-reimbursable contracts)
- ✓ Provisional billing rates are established or submitted to the cognizant ACO
- ✓ Significant variances between provisional and final rates are explainable
- ✓ Rate base (direct labor dollars, total direct costs, etc.) applied consistently
Billing Procedures
Billing procedures govern how you invoice the government for costs incurred. DCAA looks for invoices that match supporting documentation, are submitted on time, do not include unallowable or unsupported costs, and reflect current provisional rates. Overbilling — even accidental — is one of the most serious DCAA findings.
- ✓ Invoices supported by timesheets, expense reports, and subcontractor invoices
- ✓ Invoiced amounts reconcile to the accounting system
- ✓ Costs billed are within funded amounts on the contract
- ✓ Unallowable costs are excluded before billing (entertainment, unrelated travel, etc.)
- ✓ Invoices are submitted timely per contract terms
- ✓ A billing review process exists to check invoices before submission
- ✓ Quick-closeout or final vouchers submitted within 6 months of contract completion (FAR 52.216-7)
Contract Closeout
Contract closeout is the final reconciliation of all costs charged to a contract. DCAA often finds issues at this stage because teams have moved on and documentation is harder to locate. Closeout delays create risk: provisional rates may not have been finalized, final vouchers may not have been submitted, and disallowed costs may sit in open contracts indefinitely.
- ✓ Completed contracts are identified promptly and formal closeout initiated
- ✓ Final voucher or completion invoice submitted within 120 days of contract completion (or per contract terms)
- ✓ All outstanding subcontractor invoices resolved before final close
- ✓ Over/under billing amounts identified and resolved
- ✓ Records retained for required period (3–6 years depending on contract type)
- ✓ Final indirect cost rate settlement documented for the contract period
Common Mistakes Small Contractors Make
These are the findings DCAA consistently identifies in small contractor audits. Most aren't intentional — they're the result of growing faster than your compliance infrastructure, or inheriting practices that worked for commercial work but not for federal contracts.
- ⚠Reconstructed timesheets. Employees fill out timesheets at the end of the week (or month) from memory. DCAA requires contemporaneous recording — meaning time is entered on the day it's worked. Anything else is a finding.
- ⚠Direct-charging indirect costs. Charging overhead expenses (office supplies, utilities, general IT) directly to a contract inflates direct costs and distorts indirect rates. These costs belong in indirect pools.
- ⚠No written policies. DCAA expects to see written timekeeping policies, an accounting policies document, and documented billing procedures. "We all know how to do it" is not a policy.
- ⚠Missing or late Incurred Cost Submissions. Contractors with cost-type contracts must file an ICS within 6 months of fiscal year end. Many small contractors don't know this is required until DCAA asks for it years late.
- ⚠Commingling direct and indirect labor. A project manager who splits time between direct contract work and business development must track both. Charging all their time to a single contract — the convenient option — is unallowable.
- ⚠Unsupported costs billed to contracts. Every dollar billed to the government must be supported by documentation — timesheets, receipts, subcontractor invoices. Billing without documentation is the fastest path to a disallowance.
- ⚠Billing over funded amounts. Continuing to work and invoice after a contract has reached its funded ceiling without a contract modification is a compliance violation. Track funded amounts against cumulative costs and flag the limit early.
How Se7en Solutions Helps
DCAA compliance is ultimately a documentation and process problem. The question is whether your systems can produce the records auditors need — or whether you'll be scrambling to reconstruct them from email threads and spreadsheets.
Se7en Solutions is a contract lifecycle management tool built for small GovCon teams. It's not a replacement for your accounting system, but it addresses the contract management and tracking gaps that create compliance risk:
- Contract tracking with funded amounts: See cumulative costs vs. funded ceilings at a glance. Get flagged before you hit limits.
- Deliverable management: Track CDRLs and deliverable deadlines per contract so nothing falls through the cracks during audit prep.
- Burn rate monitoring: Monitor spend rate per contract to catch overbilling risk early.
- Audit trail: Full change history on every contract record, ready for auditor review.
- Labor hour export: Export time-tracking data in CSV and PDF formats for billing and voucher support.
If you're managing multiple cost-reimbursable contracts and still tracking them in spreadsheets, that's a compliance risk in itself — not because spreadsheets are forbidden, but because the manual process creates the kinds of errors that become DCAA findings.
Compare how Se7en handles this against legacy tools: Se7en vs Costpoint, Se7en vs Unanet.
Ready to Clean Up Your Contract Tracking?
Se7en is built for GovCon teams under 50 people. $199/mo flat, live in 15 minutes.
Start Free Trial →No credit card required · Month-to-month · Cancel anytime
Frequently Asked Questions
What does DCAA stand for?
DCAA stands for Defense Contract Audit Agency — a U.S. government agency that performs audits and financial advisory services for the Department of Defense and other federal agencies. Their job is to ensure government contract costs are allowable, allocable, and reasonable.
What triggers a DCAA audit?
DCAA audits are triggered by new cost-reimbursable or T&M contract awards, contract modifications, incurred cost submissions, forward pricing proposals, or random selection. First-time government contractors are often audited shortly after their first cost-reimbursable award.
What is an adequate accounting system for DCAA?
DCAA considers an accounting system adequate when it can segregate direct and indirect costs, accumulate costs by contract, produce required reports, maintain an audit trail, and identify and exclude unallowable costs. The system does not need to be specialized GovCon software — it must be properly configured and consistently used.
What are indirect cost rates?
Indirect cost rates (fringe, overhead, G&A) are percentages used to allocate indirect costs to government contracts. They're calculated by dividing total indirect costs by a base such as direct labor dollars. These rates must be supported by your accounting records and settled annually via an Incurred Cost Submission.
How long does a DCAA audit take?
A pre-award accounting system audit typically takes 1–3 months. An incurred cost audit may take 6–18 months for complex contracts. Being well-prepared, responsive, and organized with documentation significantly reduces audit duration.
Do small businesses need to worry about DCAA?
Yes. Small businesses with cost-reimbursable, T&M, or labor-hour contracts are subject to DCAA oversight. Small contractors with less administrative infrastructure are often more vulnerable to findings than larger firms. DCAA compliance is not a large-business problem — it's a requirement for any contractor billing costs to the government.