Best bites: November government contracting lunch & learn highlights
- There are six systems covered in the DFARS 252.242-7005 “Contractor Business Systems” clause, each with its own complexities and nuances. Internal Audit should have a plan to know which systems are applicable to its organization and when, and take a proactive approach to compliance and oversight.
- Internal Audit needs to set up a framework to monitor the business systems that goes beyond routine internal controls and dives into the controls specific to each criterion of the business systems clause. Without appropriate oversight, contracts covered by the Cost Accounting Standards (CAS) are subject to payment withholds of 5% for one system and 10% for two or more systems with significant deficiencies.
- Don’t wait until the last moment to look at your systems. Internal Audit should test and monitor the systems and related controls routinely to ensure that they are working as intended. Each system requires annual internal review, policy review, and training.
- To ensure compliance with the business systems criteria, consider implementing a three-prong approach to include 1) updating policies to address specific system criteria, 2) listing procedures related to the criteria to document the overall process, and 3) specifically identifying the key controls both in the policies and in procedures.
- Internal Audit can also help ensure that strong controls exist and are being consistently applied in various aspects of subcontracting, including:
o Monitoring controls to ensure that subcontractors are meeting their contractual requirements, including those related to compliance with contract terms and federal regulations.
o Closeout controls that allow the prime contractor to close its subcontracts in a timely and compliant manner.
o Audit practices that recognize that the government expects the prime contractor to ensure that subcontract audits are performed, when necessary.
o Flowdown clause compliance controls that recognize that certain prime contract clauses must be flowed down to subcontractors, and that the company should have consistent practices with regards to inclusion of FAR clauses in subcontracts.
For more information about Internal Audit and controls, consult our 2019 GAUGE Report.
InsightWhat is defective pricing, and what does an auditor look for?Jeffrey WittHere’s what to know about defective pricing audits, which can carry financial, reputational, and criminal consequences for government contractors.
InsightBest Bites: December GovCon Lunch & Learn on CMMC, other security rulesBhavesh VadhaniCohnReznick’s December 2019 GovCon Lunch & Learn presented perspectives on DOD’s new Cybersecurity Maturity Model Certification. Click to learn more
InsightSBA increases small business ‘runway’ with formal rule changesJeff Shapiro, Thomas MagnaniThe Small Business Association is changing how it calculates average annual receipts for its receipts-based size standards. Learn how your status may be affected.