DCAA Audit Response Navigator for Small Federal Contractors

The situation

James has been a DoD contractor for 4 years after transitioning from a larger defense company.

In March 2026, DCAA conducted a billing system audit of PDA. In May 2026, PDA received a DCAA Draft Audit Report with 4 findings: (1) Indirect cost allocation, DCAA found that $24,600 in "business development" costs were improperly allocated to the Overhead pool rather than G&A; (2) Unallowable cost, DCAA identified $3,200 in restaurant meals as "entertainment" (unallowable under FAR 31.205-14) that PDA charged as "business development meals" (allowable under FAR 31.205-1 if properly documented); (3) Labor charging, 2 employees did not maintain contemporaneous timesheets for a 3-week period in Q3 2025; (4) Billing system internal control, no documented process for reviewing employee expense reports before billing to contracts. DCAA issued a DCAA Form 1 suspending $27,800 in pending billings pending management response. James has 45 days to respond.

(a) Finding (2) is legitimately disputable. The $3,200 in restaurant meals may qualify as "allowable client entertainment" under FAR 31.205-1 (public relations costs) rather than "unallowable entertainment" under FAR 31.205-14, if PDA has documentation that the meals were: (i) directly related to and necessary for the work under a specific contract, (ii) attended by both PDA employees and client/prospect representatives, (iii) of a reasonable amount given the business purpose. If James has restaurant receipts, calendar entries showing the meeting purpose, and the client's name, this finding is disputable with documentation.

(b) Finding (1) is largely a labeling issue. The FAR 31.2 distinction between G&A and Overhead depends on whether the costs benefit: (a) the business as a whole (G&A); or (b) specific contracts or contract segments (Overhead). Business development costs that benefit the entire company typically belong in G&A, not Overhead. DCAA is technically correct on the allocation, James should agree with the finding AND propose a prospective corrective action (reclassifying future BD costs to G&A pool going forward). This generates a lower final disallowed cost than if he disputes unsuccessfully.

(c) Findings (3) and (4) require straightforward corrective action commitments. The timekeeping finding: implement a policy requiring all employees to submit timesheets by end-of-day daily (or end-of-week at minimum) with supervisor review. The billing system finding: document the existing expense review process (James already reviews expense reports informally, he just needs to formalize it in writing). Both findings close with written policy commitments + implementation dates.

(d) A GovCon consultant quoted James $8,500 for a management comment letter. The letter itself requires: (a) understanding FAR 31.205-1 vs. 31.205-14; (b) knowing which DCAA audit criteria apply to each finding; (c) drafting factual rebuttals for disputed findings and corrective action plans for agreed findings. This is structured knowledge work that a self-serve tool with the right FAR framework can support.

DCAA conducted a labor floor check and found that Maria's company does not require employees to maintain contemporaneous timesheets, employees have been completing timesheets weekly (on Fridays) rather than daily. DCAA's audit report flags this as a "labor mischarging risk" and identifies a specific DCAA audit program criterion (CAM Section 5-900). Maria needs to respond within 30 days. She doesn't know that: (a) the CAM criterion requires "contemporaneous" recording, DCAA defines this as within the work day, not weekly; (b) this finding does NOT suspend payment, it's a system adequacy finding requiring corrective action; (c) the corrective action is simple: implement a daily timesheet policy effective immediately, provide written confirmation to DCAA.

Who receives this

Small federal contractors (under $10M in annual DoD contract revenue) on cost-reimbursement contracts who receive DCAA audit reports with management comment requests. Primary segments: (1) IT services, professional services, and engineering firms under $10M (the primary small DoD contractor segment that receives billing system and labor audits); (2) Defense subcontractors (flow-down requirements make subcontractors subject to DCAA audit even without direct DoD contracts). Geographic concentration: Huntsville AL, Northern Virginia, San Diego CA, Colorado Springs CO (DoD contractor clusters).

Why the agency will not advise you

DCAA cannot advise contractors on how to dispute its own audit findings. The DCAA Audit Manual (CAM) is publicly published, DCAA's criteria are transparent and known, but translating the CAM into a management comment letter requires understanding FAR Part 31 cost principles that most small contractors lack. GovCon consultants (Capital Edge, RKI Accounting, Sage Advisory) provide this expertise at $150-$300/hr, priced for large contractors. The DCAA accounting software market (Deltek, Unanet, JAMIS) sells compliance record-keeping tools with no post-audit response narrative capability.

Key facts, with sources

• The Defense Contract Audit Agency (DCAA) is the primary audit agency for the Department of Defense's approximately 4,800 active auditors. DCAA audits approximately 5,000-6,000 contractors annually across all audit types (billing system surveys, forward pricing, incurred cost audits, labor floor checks, accounting system surveys). Small contractors (under $10M in annual DoD contract revenue) represent the majority of DCAA audit subjects by count, though not by dollar volume. DCAA's Contract Audit Manual (CAM) is publicly published at dcaa.mil and contains detailed audit programs for each audit type, including the specific criteria DCAA uses to identify deficiencies. This means the audit criteria are transparent and known in advance, making the management comment letter a structured, documentable response to specific criteria rather than a subjective legal argument. DCAA audit findings directly affect contractor payment: DCAA Form 1 (Notice of Contract Costs Suspended and/or Disapproved) suspends payment for the challenged amounts pending contractor response and contracting officer determination. Source: DCAA Audit Process Overview — Information For Contractors · DCAA Directory of Audit Programs · DCAA Audits and DCMA Reviews — Capital Edge Consulting
• FAR 31.201 defines general cost principles (allowable, allocable, reasonable); FAR 31.205 defines specific unallowable costs (entertainment at 31.205-14, alcoholic beverages at 31.205-51, lobbying at 31.205-22, fines and penalties at 31.205-15). DCAA audit findings routinely cite specific FAR 31.2XX provisions, and the contractor's management comment letter must address the specific FAR citation. Small contractors who are unfamiliar with FAR cost principles, especially firms that have recently entered government contracting through subcontracting or Small Business Set-Aside contracts, often fail to write management comments that engage the specific FAR standard, resulting in DCAA's findings going uncontested. GovCon compliance consultants familiar with FAR Part 31 provide this service at $150-$300/hour (Capital Edge, RKI Accounting, Sage Advisory), the self-serve tool democratizes access to the same regulatory framework. Source: List of Best DCAA Approved Compliant Accounting Software — Eubanks Accounting · DCAA Compliance Consultants Offering DCAA Audit Support — RKI Accounting · DCAA Audits: Types You Need To Know and How to Prepare — Deltek
• The small government contractor market, firms with less than $10M in annual federal contract revenue, represents approximately 40,000-50,000 active small businesses (DoD's SAM.gov database, small business set-aside award data). These firms are disproportionately represented in DCAA audit subjects because they lack the internal accounting controls that large contractors build as a matter of course. DCAA's Small Business Resources page (dcaa.mil) acknowledges that small businesses face particular challenges with DCAA compliance. The total addressable market for DCAA audit response: if 5,000 small contractors receive DCAA audits/year and 50% receive findings requiring management comment = 2,500 responses/year. At $99-$299: $248k-$748k potential revenue. Source: DCAA Small Business Resources · DCAA Compliance Software Compared — WiseCost

When to bring in a professional

Self-serve responses fit routine cases: clear facts, amounts a business can absorb, and a deadline still ahead of you. Bring in a licensed professional when the amount at stake is large relative to their fee, the facts are genuinely disputed, criminal exposure is possible, or the deadline has already passed. A short paid consultation to sanity-check your plan is often worth it even when you handle the filing yourself.

All sources for this guide

1. DCAA Small Business Resources
2. DCAA Directory of Audit Programs
3. DCAA Audits and DCMA Reviews — Capital Edge Consulting
4. List of Best DCAA Approved Compliant Accounting Software — Eubanks Accounting
5. DCAA Compliance Consultants Offering DCAA Audit Support — RKI Accounting
6. DCAA Audits: Types You Need To Know and How to Prepare — Deltek
7. DCAA Compliance Software Compared — WiseCost