The Complete Guide to DCAA-Compliant Accounting Systems for Government Contractors

If you're pursuing cost-type government contracts, your accounting system will be evaluated before you're awarded a dime. The Defense Contract Audit Agency (DCAA) uses a specific checklist — the Standard Form 1408 — to determine whether your system is adequate. Pass, and you're eligible for the contract. Fail, and you're not.

This guide breaks down every criterion on that checklist, explains what auditors actually look for, and gives you the information you need to build a system that passes — regardless of what software you use.

What we've seen in practice

"What contractors get wrong is thinking that QuickBooks alone can do what's needed to get them through a DCAA audit. The deeper issue is they don't know what cost accounting is — what job costing is. That's probably the number-one thing a new government contractor doesn't know."

— Brian Wendroff, CPA — CFO & Co-founder, WiseCost · Founder, Wendroff & Associates

What Is the SF-1408?

The Standard Form 1408, titled "Preaward Survey of Prospective Contractor Accounting System," is a two-page government form. Section I captures the auditor's recommendation (yes, yes with conditions, or no). Section II is the evaluation checklist — 14 criteria your system must satisfy.

The form evaluates five broad areas: compliance with Generally Accepted Accounting Principles, cost segregation and accumulation, timekeeping and labor distribution, interim cost determination, and financial data reliability.

Understanding each criterion — not just what it says, but what auditors actually test — is the key to passing.

Sarah Sun, CPA Manager focused on accounting system setup at Wendroff & Associates, describes how the conversation usually starts:

"When a client wins their first cost-type contract, the first thing we do is review their existing accounting system. Two things matter most: a chart of accounts that separates expenses into proper pools, and a project or class system set up to allocate costs to specific contracts."

— Sarah Sun, CPA — Wendroff & Associates

The 14 Criteria Explained

1. Generally Accepted Accounting Principles (GAAP)

Your system must follow GAAP: accrual-basis accounting, double-entry bookkeeping, a general ledger, and the ability to generate standard financial reports (balance sheet, income statement, trial balance).

Most commercial accounting software satisfies this by default. QuickBooks Online, Xero, Sage — they're all accrual-basis, double-entry systems. The key is making sure you're actually running on accrual basis (not cash basis, which some small businesses default to) and that your financial statements are current.

Compliance with GAAP also requires the controls that surround your books. Sarah Sun frames it this way:

"Audit readiness isn't just software — it's process. Every government-related purchase needs a documented trail: request, approval, selection, purchase. Same for timesheets — submission, review, approval, all logged. The software supports the process; it doesn't replace it."

— Sarah Sun, CPA — Wendroff & Associates

2a. Segregation of Direct and Indirect Costs

Your system must prevent direct costs from being charged indirectly, and vice versa. Direct costs benefit a specific contract (labor on Contract A, materials for Contract B). Indirect costs benefit the organization broadly (rent, utilities, executive salaries).

In practice, this means your chart of accounts clearly separates direct cost accounts from indirect cost pools (Fringe, Overhead, G&A). It also means your processes prevent misclassification — an employee can't accidentally charge rent to a contract.

This is one of the most common areas where small contractors have gaps. Many start with a flat chart of accounts that doesn't distinguish between direct and indirect costs. Restructuring it for government contracting should happen before you need the SF-1408, not during the survey.

2b. Direct Costs by Contract

Every direct cost must be traceable to a specific contract. You need a subsidiary job cost ledger — essentially a detailed breakdown of costs by contract that ties back to your general ledger.

In most accounting software, this is implemented through classes, projects, or job codes. Each contract gets its own identifier, and every direct cost is tagged with it. The result: you can run a report showing exactly what Contract A cost this month, broken down by labor, materials, travel, and subcontracts.

2c. Allocation of Indirect Costs

Indirect costs must be accumulated in logical groupings (pools) and allocated to cost objectives using a method that reflects the benefits each contract receives.

The standard structure for most small contractors is three pools: Fringe (employee benefits, payroll taxes — allocated on direct labor), Overhead (operating costs for technical staff — allocated on direct labor or hours), and G&A (general business costs — allocated on total cost input).

Whatever allocation method you choose, it must be documented and applied consistently. Auditors will compare your methodology document to your actual practice. If they don't match, that's a finding.

Brian Wendroff, CPA, sees the foundational mistake repeatedly:

"Indirect rate calculation depends entirely on having proper job costing first. Most small contractors don't know how the two connect — they try to calculate indirect rates without the foundation underneath, and the numbers don't tie."

— Brian Wendroff, CPA — CFO & Co-founder, WiseCost

2d. Accumulation Under General Ledger Control

Your job cost detail (contract-level costs) must reconcile to your general ledger control accounts. If the G/L shows $80,000 in direct labor this month, the sum of all direct labor across all contracts must equal $80,000.

This sounds obvious, but many contractors run side spreadsheets for job costing that don't tie back to their books. That disconnect is exactly what this criterion is designed to catch.

2e. Timekeeping System

This is one of DCAA's highest-priority criteria. Your timekeeping system must identify employees' labor by cost objective — every hour charged to either a specific contract or an indirect pool.

The requirements are specific: employees must prepare their own timesheets (no one else can fill them in), time must be recorded daily (not retroactively at week's end), timesheets must be certified by the employee and approved by a supervisor with direct knowledge of the work, and every modification must be documented in an audit trail.

DCAA conducts unannounced floor checks to verify these practices. They compare what's on the timesheet to what the employee is actually doing that day.

2f. Labor Distribution System

Your labor distribution system takes approved hours and converts them to dollar amounts charged to cost objectives. The records must be reconcilable to both payroll records and the general ledger.

The mechanics: hours worked per contract × hourly rate = direct labor charge. The hourly rate is typically the employee's salary for the period divided by total hours worked. The sum of all charges across all contracts and indirect pools must equal total payroll for the period — to the penny.

What we've seen in practice

"Labor distribution is where most small contractors fall short. Direct labor charged to a contract has to be separated from paid leave — PTO, holiday, sick leave. Those can't sit in the same bucket if you want the numbers to hold up under review."

— Sarah Sun, CPA — Wendroff & Associates

2g. Interim Cost Determination

Costs must be posted to your books at least monthly. Running labor distribution, posting journal entries, and updating your financials can't be a year-end exercise. DCAA expects routine, periodic posting — and monthly is the minimum.

2h. Exclusion of Unallowable Costs

Certain costs aren't allowable on government contracts under FAR Part 31: entertainment, alcohol, fines, lobbying, and certain executive compensation above established thresholds. Your system must identify and exclude these from billing and from indirect rate calculations applied to government contracts.

In practice, this means unallowable costs have their own accounts in your chart of accounts, segregated from the indirect pools that get allocated to contracts.

2i–2j. Contract Line Items and Preproduction Costs

Criterion 2i requires cost tracking by contract line item (CLIN) if the contract requires it. Not all contracts do, but your system should be capable. Criterion 2j requires segregation of preproduction from production costs, primarily relevant to manufacturing contracts.

3a. Limitation of Cost Information

Your system must calculate interim indirect rates from the books and monitor them routinely. On cost-type contracts, you need this data for the Limitation of Cost/Funds reporting required by FAR 52.232-20 and FAR 52.216-16.

3b. Billing Support

Billings to the government must be reconcilable to your cost accounts — both current-period and cumulative. If you bill $150,000 this month, your books must show exactly $150,000 in allowable costs.

4. Adequate, Reliable Data for Follow-On Pricing

The overall system must produce cost data detailed enough to price future contracts. This is the cumulative test — if your system properly tracks costs by contract, by cost element, with correct indirect rates, you'll satisfy this criterion.

5. System in Operation

Your system must be in operation — or at minimum set up and ready to operate. You can't pass the survey by describing a system you plan to build. If it's not implemented yet, the auditor will note that the assessment couldn't be completed.

What Auditors Actually Do During the Survey

Understanding the auditor's process helps you prepare. According to the DCAA Master Audit Program (Activity Code 17740), the pre-award survey evaluates design effectiveness — whether your system is designed to meet the criteria. They're not auditing every transaction in your history.

Auditors use a combination of inquiry (asking you to explain your processes), observation (watching you demonstrate the system), and inspection (reviewing policies, procedures, and sample outputs). A documented walkthrough is typically sufficient.

During the walkthrough, the auditor will trace a sample transaction through the complete cycle: an employee records time → the timesheet is approved → labor distribution calculates costs → journal entries post to the general ledger → costs accumulate by contract. If you can demonstrate that flow cleanly, you're in good shape.

Key things they look for: Can you show the complete trail from time entry to G/L? Are timesheets approved by the right people? Is there an audit trail for changes? Can you calculate an interim indirect rate? Are unallowable costs excluded?

Software Options for DCAA Compliance

There's no single "correct" software solution. The SF-1408 doesn't name specific products — it evaluates capabilities. Here's how the common approaches stack up.

Enterprise ERPs (Deltek Costpoint, Unanet): Purpose-built for government contractors. They handle everything — timekeeping, cost accounting, billing, reporting — in one integrated system. The trade-off is cost ($500–2,000+/user/month), implementation time (3–6 months), and complexity. Best suited for contractors with 50+ employees and multiple active cost-type contracts.

Commercial accounting software alone (QuickBooks, Xero, Sage): These satisfy GAAP, general ledger, and basic financial reporting requirements. They don't satisfy timekeeping, labor distribution, or audit trail requirements on their own. If you only do firm-fixed-price work, they may be sufficient. For cost-type contracts, you need additional tools.

Commercial accounting software + compliance add-on: This approach keeps your existing accounting system and adds specialized tools for the gaps — primarily timekeeping and labor distribution. Products like WiseCost or Hour Timesheet work alongside QBO or other accounting software to provide the compliance layer. Cost is typically $100–300/month, and setup is measured in hours, not months.

Manual/spreadsheet approach: Some very small contractors (2–3 people) manage timekeeping and labor distribution in Excel. This can work if your processes are meticulous, but it lacks automated audit trails and is inherently more risky during audits. Most CPAs advise moving to a system-based approach as soon as you have — or are pursuing — cost-type contracts.

Preparing for Your Pre-Award Survey

When you learn that DCAA will conduct a survey, preparation is straightforward if your system is already set up correctly.

Review your chart of accounts. Verify that direct and indirect costs are clearly segregated, unallowable costs have their own accounts, and classes/projects map to individual contracts.

Document your policies. Have written policies for timekeeping (daily recording, corrections, approvals), indirect rate methodology (pools, bases, allocation methods), and unallowable cost identification. These don't need to be lengthy — 2–3 pages each — but they must reflect your actual practices.

Run a self-walkthrough. Take one employee's time entry for one day and trace it through the entire system — time entry → approved timesheet → labor distribution → journal entry → general ledger. If you hit a gap, fix it before the auditor finds it.

Calculate interim indirect rates. Pull rates from your books and verify they're reasonable. A G&A rate of 150% when your industry average is 15–25% probably indicates a classification error.

Ensure the system is operating. At minimum, you should have recorded time for at least one pay period, run labor distribution, and posted journal entries. The auditor needs to see outputs, not just configuration.

Common Reasons Contractors Fail

The most frequent failures in pre-award surveys center on timekeeping (no daily recording, no audit trail, no supervisor approval), labor distribution (done manually in spreadsheets that don't reconcile to the G/L), cost segregation (no clear separation of direct, indirect, and unallowable costs), and documentation (no written policies, or policies that don't match practice).

Every one of these is fixable — and cheaper to fix before the survey than after.

Starting Compliant vs. Retrofitting

The single most important takeaway from this guide: set up your system correctly before you need the survey, not in response to it. Restructuring a chart of accounts, implementing timekeeping processes, and training employees on new policies while a contracting officer is waiting for the survey results is stressful, risky, and expensive.

Starting with a compliant system from day one — even if your first contracts are firm-fixed-price — means that when the cost-type opportunity arrives, you're ready. The incremental cost of running a compliant system is minimal compared to the cost of retrofitting one under pressure.

Compliance also pays back beyond the audit itself. The same structure that satisfies DCAA gives you visibility you didn't have before.

"Compliance generates business intelligence as a side effect: the profit-and-loss-by-contract report tells you which contracts are actually making money and which aren't. That visibility changes how you bid the next one — and whether you renew the current ones."

— Sarah Sun, CPA — Wendroff & Associates

Reviewed by Sarah Sun, CPA, Manager at Wendroff & Associates, focused on accounting system setup for government contractors.