DCAA Compliance Checklist for Small Government Contractors (2026)

Q: When is an Incurred Cost Submission (ICS) due?

The Incurred Cost Submission is due within 6 months of the close of your fiscal year. For most firms (calendar-year fiscal year), this means June 30. The ICS reconciles your actual indirect rates for the year against the rates you billed on cost-plus contracts. If you overbilled, you owe the government a refund. If you underbilled, you can invoice for the difference — but only if you filed the ICS on time.

Q: What makes an accounting system 'adequate' for DCAA?

DCAA's pre-award accounting system adequacy checklist (SF 1408) has 18 criteria. The most commonly failed: (1) inability to segregate direct from indirect costs, (2) no cost pool structure separating Fringe, Overhead, and G&A, (3) no procedure for identifying and excluding unallowable costs under FAR 31.205, and (4) inability to reconcile labor charges to timesheet records. QuickBooks Online, used out-of-the-box, typically fails criteria 1, 2, and 4.

Q: What are the most common DCAA audit findings for small firms?

The most frequent findings at small GovCon firms: (1) after-the-fact timesheet corrections without an audit trail, (2) fringe benefits not allocated proportionally between direct and indirect labor, (3) unallowable costs included in indirect cost pools, (4) indirect rates applied inconsistently across contract types, and (5) no monthly comparison of actual rates to forward pricing rates. These findings can result in cost disallowances, billing adjustments, and in repeat cases, termination for default.

Q: Do small businesses need DCAA-compliant accounting for fixed-price contracts?

Fixed-price contracts do not require DCAA cost accounting compliance because the government pays a fixed amount regardless of your costs. DCAA compliance is mandatory for cost-type contracts (CPFF, CPAF, CPIF, T&M) where the government reimburses actual costs. However, many small firms pursue DCAA adequacy proactively because: (1) it's required before receiving any cost-type award, (2) it strengthens competitive proposals by demonstrating accounting maturity, and (3) it prevents the 3-6 month delay of a pre-award accounting system review when a cost-type opportunity arises.

Most small government contracting firms discover their accounting system isn't DCAA-compliant when it's already too late — a cost-type contract opportunity is on the table, a pre-award accounting system review is requested, and suddenly 6 months of accounting cleanup stands between you and a signed contract.

This checklist covers the seven areas DCAA auditors actually examine at small firms. It's not exhaustive — full compliance spans the SF 1408, FAR Part 31, and CAS requirements — but these are the items that generate the most findings, delay the most awards, and cost firms the most money when they're wrong.

⚠ Who This Applies To

DCAA cost accounting compliance is required for cost-type contracts (CPFF, CPAF, CPIF, T&M). Fixed-price-only firms aren't subject to DCAA cost accounting audits — but building a compliant system proactively eliminates the 3–6 month delay when a cost-type opportunity eventually comes up.

The 7-Item DCAA Compliance Checklist

Timekeeping System

Every employee must record time daily, assigned to specific contracts or indirect categories, and sign off on their own timesheet. Supervisors must countersign. The system must maintain an audit trail of all corrections — who changed what, when, and why. After-the-fact timesheet reconstruction (filling in a week at a time on Fridays) is a finding. So is any system where the supervisor can edit hours without an audit trail. Acceptable systems: Harvest, Unanet, Clockify with locking enabled, or a signed paper timesheet with version control.

Segregation of Direct and Indirect Costs

Your general ledger must separate direct costs (costs assigned to a specific contract) from indirect costs (costs that benefit multiple contracts) at the account level — not just in a spreadsheet. This means your chart of accounts must have separate accounts for Direct Labor, Direct Materials, and Direct Other Direct Costs on one side, and Indirect Labor, Fringe Benefits Pool, Overhead Pool, and G&A Pool on the other. Using a single "Labor Expense" account and splitting it in Excel is not an adequate accounting system. QuickBooks Online requires specific configuration to achieve this separation — see our guide on DCAA labor allocation in QuickBooks for the exact setup.

Indirect Cost Pool Structure

DCAA requires three distinct indirect cost pools: Fringe Benefits (payroll taxes, health insurance, 401k, PTO accrual), Overhead (indirect labor, facility costs, equipment allocated to projects), and G&A (executive salaries, accounting/legal fees, business development). Each pool has its own allocation base: fringe allocates over total direct + indirect labor; overhead allocates over direct labor; G&A allocates over total cost input. You cannot combine pools or allocate them all on the same base. Your accounting system must be able to report pool costs and allocation bases separately so indirect rates can be calculated and documented. For the math behind how these pools build your billing rate, see the wrap rate calculator guide.

Unallowable Cost Identification and Exclusion

Under FAR 31.205, certain costs are unallowable — they cannot be included in indirect cost pools charged to the government. The list includes executive entertainment, alcohol, lobbying, certain advertising, interest expense, and costs related to legal proceedings where the contractor is the defendant. Your accounting system must have a dedicated account or flag for unallowable costs so they are excluded from rate calculations automatically. If you have no mechanism for this, DCAA will pull a sample of overhead and G&A transactions and test for unallowable items — and will likely find some.

Consistent Rate Application Across Contracts

Your indirect rates must be applied consistently across all contracts using the same cost accounting methodology. You cannot use a lower overhead rate on competitive fixed-price bids and a higher rate on cost-plus contracts. You cannot apply fringe at 30% on one contract and 35% on another. DCAA's Disclosure Statement (required for contractors over $50M; voluntary below that) documents your cost accounting practices — consistent application is the standard whether or not you've filed one. Rate inconsistency is treated as a cost accounting deficiency and can result in contract cost adjustments across all active cost-type contracts.

Incurred Cost Submission (ICS)

For every fiscal year in which you had cost-type contracts, you must file an Incurred Cost Submission within 6 months of fiscal year end (typically June 30 for calendar-year firms). The ICS reconciles your actual indirect rates against the provisional rates you billed throughout the year. It must include: schedule of direct costs by contract, schedule of indirect pools, rate calculations, supporting trial balance, and certifications. Missing the filing deadline triggers a government claim for the unresolved contract balances. The ICS is the document DCAA will audit — your accounting system's output must support every line in it.

Monthly Rate Monitoring and Variance Analysis

DCAA expects you to compare actual indirect rates to forward pricing rates monthly and document significant variances. If your actual fringe rate runs 5+ points above your forward pricing rate for three consecutive months, you should update your provisional billing rates — not wait to discover the variance at year-end ICS time. Monthly rate packages should include: current period actual rates by pool, cumulative year-to-date rates, comparison to forward pricing rates, and variance explanation for any pool where actuals differ from forward rates by more than 5%. Firms that do this monthly have dramatically fewer ICS adjustment issues.

What "Adequate" Actually Means (SF 1408)

DCAA's pre-award accounting system review uses the SF 1408 — an 18-question form that evaluates your system's ability to produce DCAA-required data. The questions most commonly failed by small firms:

Question 3: Can the system identify costs by contract in real time? (Failed when all labor posts to one account)
Question 6: Are indirect costs accumulated in separate cost pools? (Failed when fringe, overhead, and G&A are combined)
Question 9: Is there a process for identifying and excluding unallowable costs? (Failed when there's no dedicated unallowable account)
Question 12: Can labor charges be reconciled to payroll records and timesheets? (Failed when timesheet system and payroll are disconnected)

Failing any of these results in an "inadequate" determination. DCAA will not recommend contract award until the deficiencies are corrected and re-reviewed — a process that typically takes 3–6 months.

Key Dates

ICS Filing Deadline: 6 months after fiscal year end
Pre-Award Review Request: Can come with as little as 30 days' notice
Rate Monitoring: Monthly (document every period)

Calendar-year firm: ICS due June 30 each year. Fiscal-year firm: adjust 6 months from your year-end.

How GovieRates Automates DCAA Compliance

The hard part of DCAA compliance isn't understanding the requirements — it's maintaining a system that meets them every month without 40+ hours of manual accounting work. GovieRates connects to your QuickBooks Online account and automates the compliance-critical processes that are currently done by hand:

Direct/indirect labor splits — pulls timesheet data each pay period and creates the QBO journal entries that allocate payroll costs to the right cost pools automatically
Fringe allocation — distributes benefit costs proportionally based on actual labor ratios, not estimates — so your fringe pool base is always accurate and auditable
Unallowable cost flagging — reviews new transactions against FAR 31.205 criteria and flags potential unallowable costs before they enter your rate calculations
Monthly rate packages — generates a DCAA-format indirect rate schedule every month, with actual-vs.-forward-pricing comparison and trailing 12-month trend charts
ICS preparation support — produces the core schedules required for your Incurred Cost Submission in the format DCAA expects, reducing year-end preparation from weeks to days

GovieRates doesn't replace your accountant or your timekeeping system — it automates the bridge between them that currently requires manual journal entries, Excel spreadsheets, and monthly reconciliation work. The result is a compliance posture you can document instantly when DCAA requests a review, and indirect rates that are always current.

Starting at $79/month — a fraction of the accountant hours this currently costs you. See the full pricing breakdown or check the compliance FAQ for common questions about what GovieRates covers.

Frequently Asked Questions

What does DCAA compliance mean for small government contractors?

DCAA compliance means your accounting system, timekeeping practices, and cost reporting meet the standards required by the Defense Contract Audit Agency. For small GovCon firms, this primarily means: daily timekeeping signed by employees and supervisors, segregation of direct and indirect costs in your general ledger, consistent indirect rate calculation and application, and the ability to reconcile claimed costs to source documents. Non-compliance can result in contract award delays, billing suspensions, or cost disallowances.

When is an Incurred Cost Submission (ICS) due?

The ICS is due within 6 months of the close of your fiscal year. For calendar-year firms, that's June 30. The ICS reconciles your actual indirect rates against the provisional rates you billed on cost-plus contracts during the year. If you overbilled, you owe the government a refund. If you underbilled, you can invoice for the difference — but only if you filed on time.

What makes an accounting system "adequate" for DCAA?

DCAA's pre-award checklist (SF 1408) has 18 criteria. The most commonly failed: inability to segregate direct from indirect costs, no cost pool structure separating Fringe, Overhead, and G&A, no procedure for identifying and excluding unallowable costs under FAR 31.205, and inability to reconcile labor charges to timesheet records. QuickBooks Online out-of-the-box typically fails the cost segregation and cost pool criteria without specific configuration.

What are the most common DCAA audit findings for small firms?

The most frequent findings: after-the-fact timesheet corrections without an audit trail, fringe benefits not allocated proportionally between direct and indirect labor, unallowable costs included in indirect cost pools, indirect rates applied inconsistently across contract types, and no monthly comparison of actual rates to forward pricing rates. These findings can result in cost disallowances, billing adjustments, and in repeat cases, termination for default.

Do small businesses need DCAA-compliant accounting for fixed-price contracts?

Fixed-price contracts don't require DCAA cost accounting compliance — the government pays a fixed amount regardless of your costs. DCAA compliance is mandatory for cost-type contracts (CPFF, CPAF, CPIF, T&M). However, many small firms build a compliant system proactively because it's required before any cost-type award, and because getting compliant after a contract opportunity arrives typically takes 3–6 months.