Best bites: November government contracting lunch & learn highlights
- There are six systems covered in the DFARS 252.242-7005 “Contractor Business Systems” clause, each with its own complexities and nuances. Internal Audit should have a plan to know which systems are applicable to its organization and when, and take a proactive approach to compliance and oversight.
- Internal Audit needs to set up a framework to monitor the business systems that goes beyond routine internal controls and dives into the controls specific to each criterion of the business systems clause. Without appropriate oversight, contracts covered by the Cost Accounting Standards (CAS) are subject to payment withholds of 5% for one system and 10% for two or more systems with significant deficiencies.
- Don’t wait until the last moment to look at your systems. Internal Audit should test and monitor the systems and related controls routinely to ensure that they are working as intended. Each system requires annual internal review, policy review, and training.
- To ensure compliance with the business systems criteria, consider implementing a three-prong approach to include 1) updating policies to address specific system criteria, 2) listing procedures related to the criteria to document the overall process, and 3) specifically identifying the key controls both in the policies and in procedures.
- Internal Audit can also help ensure that strong controls exist and are being consistently applied in various aspects of subcontracting, including:
o Monitoring controls to ensure that subcontractors are meeting their contractual requirements, including those related to compliance with contract terms and federal regulations.
o Closeout controls that allow the prime contractor to close its subcontracts in a timely and compliant manner.
o Audit practices that recognize that the government expects the prime contractor to ensure that subcontract audits are performed, when necessary.
o Flowdown clause compliance controls that recognize that certain prime contract clauses must be flowed down to subcontractors, and that the company should have consistent practices with regards to inclusion of FAR clauses in subcontracts.
For more information about Internal Audit and controls, consult our 2019 GAUGE Report.
InsightTaking the first steps toward CMMC complianceBhavesh Vadhani, Kristen Soles, Ali KhraibaniLearn the basics of the practice and process requirements for each level of the Department of Defense’s Cybersecurity Maturity Model Certification (CMMC).
InsightCONSTRUCTION: 5 factors construction companies should consider before pursuing federal contractsJeffrey WittBefore seeking federal contracts, construction companies should be aware of regulatory and systems requirements, strategy considerations, and other factors.
InsightHow to use the Cost Accounting Standards (CAS) preambles for extra insights and guidanceJeff Shapiro, Robert GutierrezWhat do the Cost Accounting Standards (CAS) preambles contain? What’s the best way to find the guidance you need? Here’s what government contractors should know.