There are many facets to this lawsuit but the underlying complaint is that DCAA was negligent in performing its audit work and did not follow a number of Generally Accepted Government Auditing Standards (GAGAS). Which standards? Oh, some of the basic ones including qualifications, independence, planning, risk assessment, written audit program, briefing the contract, field work, supervision, and sufficient evidence to support conclusions.
Take the lack of "independence" for example. The complaint uses harsh language in alleging that DCAA was more concerned about how they would look before Congress than in gathering and understanding the facts:
... in an act intended to pander to an investigating Congressional committee, and at the behest of a similarly-minded PCO, DCAA took steps to enable the Army to recapture costs incurred by KBR ...
...amid persistent political pressure from Congress, DCAA issued an audit report in which it concluded that KBR had billed approximately $99.6 million in allegedly "unallowable" costs ... But the conclusions in the audit report were demonstrably false, and it is now clear DCAA performed this audit in a negligent manner...The contract, known as LOGCAP III required KBR to perform a wide variety of functions, including construction and operation of military dining facilities, laundry, welfare and recreation services, facilities maintenance, power generation and distribution, waste management, water supply, vector control, fire protection, billeting, and equipment maintenance.
The contract included a clause that required the Army to provide "force protection" to KBR and its subcontractors commensurate with that provided to DoD civilians. By 2003, however, KBR was performing work in a hostile environment where insurgent attacks were frequent. In fact, KBR and its subcontractors lost 75 employees as a result of hostile actions and almost 500 more injured. As a result of the hostilities and the Government's failure to provide force protection, KRB hired some private security contractors and charged those costs to the Government.
DCAA decided that since the contract provided for Army protection, the cost of the private security contractors was not allowable and disallowed an estimate of those costs. Ultimately, KBR appealed this action before the ASBCA (Armed Services Board of Contract Appeals) and won. The ASBCA ruled that the private security costs were indeed allowable under the contract. Simultaneously, the Government filed a false claims act violation against KBR for violations of the civil False Claims Act for billing costs associated with the use of armed private security. A short time later, the Government voluntarily dismissed the FCA case. In both cases, according to the current complaint, the Government's case was jeopardized by DCAA's defective auditing.
Keep in mind that this complaint presents only one side of the story. Ultimately KBR is going to have to prove its case in court. But, its going to be interesting to watch and the outcome, if favorable to KBR, may embarrass DCAA. It is important to note however, that many of the criticisms levied at DCAA in this lawsuit have already been addressed and rectified by that Agency. The latest peer quality review conducted by one of its loudest critics, the DoD Office of Inspector General, was rated a "pass".
If you would like to read the full complaint, you can download a copy here.