Back to Knowledge HubFederal Audit Risk

Can DCAA Audit a Federal Subcontractor?

A subcontractor does not need to hold the prime contract to encounter Government audit requirements. Cost, pricing, incurred-cost, proposal, or other audit work can reach subcontractor records when the contract framework permits it.

DCAA is commonly associated with prime contractors, but federal subcontractors can also become part of an audit or assist when the Government evaluates subcontract costs, pricing, incurred costs, business systems, or claims.

There is no single rule that every federal subcontractor is automatically subject to every DCAA audit. The authority and scope depend on the contract, clause, pricing action, audit objective, and the records involved.

Start with the contract clause, not the agency name

FAR 52.215-2 provides examination and audit rights in specified circumstances and requires flowdown into certain qualifying subcontracts. Those rights can include records supporting claimed or anticipated costs, certified cost or pricing data, and required reports.

The clause is a better starting point than assuming DCAA either can or cannot audit a subcontractor based solely on tier.

Official source: FAR 52.215-2 — Audit and Records—Negotiation.

DCAA's current guidance is organized by audit objective

DCAA's current Contract Audit Manual includes guidance on contract audit, incurred costs, cost estimates and price proposals, business systems, claims, terminations, and other assignments. A subcontractor may become relevant to one of those audits when its costs or records affect the Government's evaluation of the prime contract.

The practical scope should still be tied back to the authority in the contract and the specific request.

Official source: DCAA — Contract Audit Manual.

Prepare before an audit request arrives

  • Identify flowed-down audit clauses and any prime-specific audit provisions.
  • Keep pricing support tied to the proposal and negotiation history.
  • Maintain timekeeping and cost records that support billed amounts where applicable.
  • Separate proprietary data that requires controlled disclosure from ordinary support records.
  • Designate who receives and responds to audit requests.
  • Escalate unusually broad or unclear requests to contracts leadership and qualified counsel.

Do not confuse cooperation with unlimited access

A subcontractor may have a legitimate duty to provide records, but that does not mean every internal document is automatically within scope. Review the request against the clause, the audit purpose, the time period, and the records actually connected to the pricing or performance issue.

The subcontract should also address how the prime handles proprietary information it receives while supporting a Government audit.