New Professional Practice Guide (PPG) for Performing Incurred Cost Audits

Section 809 of the 2016 NDAA (National Defense Authorization Act) established the Section 809 Panel to research and recommend improvements to the acquisition process. Section 803 of the 2018 NDAA required the Defense Department to adopt commercially accepted standards of risk and materiality in the performance of incurred cost audits. The Section 809 Panel, with the help of DCAA (Defense Contract Audit Agency) and others, drafted a Professional Practice Guide (PPG) to develop a risk assessment framework intended to 'manage' DoD's risk and materiality approaches to incurred cost audits.

DCAA has now uploaded part of the the PPG to its public website. The Agency included only Chapters 1 and 2 plus Appendix A. It did not include Chapter 3 which deals with internal controls. The PPG has been publicly available for many months but has been buried in the Section 809's 600-page volume 3 final report. DCAA intends to adopt the new risk-based sampling framework for sampling incurred cost proposals and to adopt the materiality standards for performing the incurred costs audits found in the PPG. The first materiality criteria involves the selection of contractors to audit. Once the selection has been made, the second materiality criteria involves what cost elements withing the incurred cost proposal should be audited.

The Professional Practice Guide can be found under the Guidance tab at dcaa.mil. Or, go directly there by clicking here.

DoD Professional Practice Guide (Audit) - Part 2

This is the second in our series of unpacking the draft Professional Practice Guide (PPG) published by the Section 809 Panel to assist Government and commercial auditors in conducting audits of Government contracts. If you missed Part 1, click here. Yesterday's post discussed the risk assessment phase. Today we will look at the concept of 'materiality', and specifically, materiality as it relates to audits of incurred cost.

Contractors with flexibly priced contracts are required to submit annual incurred cost proposals (see FAR 52.216-7). The risk to the Government is that amounts are materially misstated due to contractors' noncompliance with contract terms or federal regulations (e.g. the Cost Principles in FAR Part 31).

The concept of materiality in the context of incurred cost audits expressly acknowledge that some degree of imperfection is acceptable to the users of financial information. There is an acceptable level of imprecision when determining or settling fair and reasonable contract prices.  This concept is often foreign to DCAA auditors who feel that no level of imprecision is acceptable - they want to audit everything and try to achieve absolute assurance.

One significant concept that auditors will need to comprehend is 'quantified materiality'. This is the numeric representation of materiality that is calculated based on the total audit subject matter. It is used in planning to identify significant cost elements. So, for example, what is the threshold over which a misstatement will effect economic decisions. On a $100,000 contract, five percent ($5,000) will unlikely influence economic decisions whereas the same percentage on a $1 billion contract ($50 million) such a misstatement would likely influence economic decisions of users.

Tomorrow we will look at how 'quantified materiality' affects the scope of audit.

DoD Professional Practice Guide (Audit) - Part 1

Back in January when the Section 809 Panel issued its third and final report, we briefly touched on their recommendation to develop a PPG (Professional Practice Guide) to guide Government auditors and commercial audit firms in conducting audits of Government contractors. This week we will dig deeper into the new guidance to see what it may portend for Government contractors. The guide itself is included in Vol 3 of the Section 809 Panel's report.

The PPG is intended to supplement existing guidance for auditors involved in DoD Procurement contract auditing. It provides additional information regarding how to interpret and apply specific auditing concepts for Government contract audits to assist auditors, contracting officers, and other stakeholders involved in the audit process.

Eventually, the PPG will address seven areas although the current draft version contains just coverage of the first three. Due to its limited statutory term, the Panel did not have time to address them all.

1. Risk assessment
2. Materiality
3. Audits of Internal Controls
4. Independence
5. Objectivity
6. Sufficient evidence
7. Reliance on the work of others

Risk Assessment

The risk assessment framework provides incentives for contractors to achieve and maintain compliant cost accounting and internal controls over Government contract compliance. It also provides disincentives for those contractors who have not.

The framework provides for three levels of risk: low, medium, and high risk strata based on a contractor's ADV (auditable dollar volume). ADV is the total costs charged to flexibly priced (i.e. CPFF, CPIF, FPI, T&M, etc) each year. For contractors with ADV of $1 billion or more, an annual incurred cost audit is mandatory. At the other end of the spectrum, contractors with ADV of less than $5 million, get dumped into a sampling pool if there were no significant questioned costs in the last completed incurred cost audit and there are no "concerns" expressed by someone in the Government acquisition community concerning the particular submission. Contractors with ADV between $5 and $100 million are also in the low-risk sampling pool if they have approved accounting systems. Contractors who don't make it to the "sampling pool" are audited.

Medium risk strata include contractors with ADV between $100 million and $500 million. To make it to the sampling pool, the contractors must meed the three criteria previously discussed  plus not have any business system deficiencies on the books, nor have had any accounting practice or organization changes. Contractors in this strata, even if they make it to the sampling pool, must be audited every four or five years.

The high risk strata includes contractors with ADV between $500 million and $1 billion. It uses the same criteria as the previous strata to determine whether it makes it to the sampling pool. The only difference is that contractors in this strata must be audited at least every other year.

Tomorrow we will discuss the PPG concept of materiality.