TL;DR. DCAA audits your books. DCMA watches your work. Both send their findings to your contracting officer, and both can hold up your payments.
- New to this? DCAA checks that billed costs are allowable, allocable and reasonable. DCMA checks cost, schedule, quality and EVM.
- On cost-type contracts? Separate unallowable costs in your accounting and record time daily. DCAA runs floor checks that compare what people are working on with what they charge, so “I'll rebuild my timesheet Friday” is not a timekeeping system.
- On an EVM contract? Expect DCMA to review your reports and baseline. Its findings can feed your CPARS rating.
- Government PM? Build a relationship with your DCMA ACO, your eyes inside the contractor's facility.
If you're a defense contractor, two agencies will have more impact on your day-to-day operations than almost any other part of the government: DCAA and DCMA. They're often mentioned in the same breath. They're frequently confused. And they have the authority to delay payments, flag findings to your contracting officer, and in serious cases, put your contract at risk.
They also do entirely different things.
Understanding the distinction isn't just useful knowledge. It shapes how you set up your accounting system, how you prepare for reviews, and what you should do when either agency shows up. This guide covers both agencies, what triggers their involvement, and what contractors and program managers need to do to stay on the right side of each.
For the broader defense finance context (PPBE, color of money, and EVM), see our pillar guide: Defense Finance for Program Managers: The Complete Guide.
The Core Distinction in One Sentence
DCAA audits whether your costs are legitimate. DCMA ensures your performance is on track.
DCAA is an accounting and audit agency. Its job is to verify that what contractors are billing the government is allowable under the FAR/DFARS cost principles, allocable to the contract, and reasonable in amount.
DCMA is a contract administration agency. Its job is to ensure contractors are actually performing what the contract requires: on cost, on schedule, and at the required quality level.
Get the Acqlerate Acquisition Starter Kit (Free)
Key terms, ACAT levels, career roadmaps, and the 5 most common acquisition mistakes. Tailored to your role: USG, contractor, or career changer.
The Side-by-Side Comparison
| DCAA | DCMA | |
|---|---|---|
| Full Name | Defense Contract Audit Agency | Defense Contract Management Agency |
| Primary Mission | Audit contractor accounting systems, costs, and pricing to protect taxpayer dollars | Administer and monitor contract performance on behalf of buying commands |
| Authority Over | Contractor accounting practices, cost data, invoicing, and pricing proposals | Contract performance, quality, schedule, and EVM compliance |
| Key Triggers | Cost-reimbursable contracts; pricing proposals that need certified cost or pricing data (over $2.5M, or $10M for DoD contracts signed after 30 June 2026); incurred cost audits; accounting system deficiencies | All significant DoD contracts; EVM-required contracts; quality surveillance assignments; contracts with performance risk |
| Primary Output | Audit reports (findings, recommendations, questioned costs) | Surveillance reports, CPARs input, EVM reports, corrective action requests |
| Contractor Impact | Questioned costs returned to government; accounting system disapproval; payment holds | Performance findings affect CPARS ratings; EVM deficiencies can lead to payment holds; quality findings can trigger show-cause letters |
| Who They Report To | Advises the contracting officer (PCO or ACO), who makes the call. The agency sits under the Under Secretary of Defense (Comptroller) | Its ACOs are contracting officers themselves and work with the program manager and buying command. The agency sits under the Under Secretary of Defense for Acquisition and Sustainment |
DCAA Deep Dive: The Audit Agency
The Defense Contract Audit Agency was established in 1965 to provide a single, centralized audit function for DoD contract costs. DCAA operates under the Under Secretary of Defense (Comptroller) and has a few thousand employees, most of them auditors, working from field audit offices across the United States and overseas.
What DCAA Audits
DCAA conducts several distinct types of audits, each targeting a different aspect of contractor finance:
- Accounting System Audits: Before awarding a cost-reimbursement contract, the government must find that the contractor's accounting system is adequate for tracking contract costs (FAR 16.301-3), and the contracting officer can ask DCAA to review it. The review checks that the system can properly segregate contract costs, identify allowable vs. unallowable costs, and produce reliable billing data. An inadequate accounting system can keep a contractor out of cost-type contracts.
- Forward Pricing Rate Audits: When contractors negotiate Forward Pricing Rate Agreements (FPRAs) with the administrative contracting officer (FAR 42.1701), pre-negotiated rates for indirect costs like overhead and G&A, DCAA reviews the supporting data. These rates become the basis for cost estimates in future proposals.
- Proposal Audits: When a proposal requires certified cost or pricing data under the Truth in Negotiations Act (TINA), the contracting officer can ask DCAA to audit whether the proposed costs are realistic and compliant. The FAR threshold is $2.5 million, and section 1804 of the FY2026 NDAA raises it to $10 million for DoD contracts entered into after 30 June 2026.
- Incurred Cost Audits: Every year, within six months after the end of its fiscal year, a contractor with cost-type contracts submits an Incurred Cost Submission (ICS) (FAR 52.216-7). DCAA audits the actual costs claimed to verify allowability and allocability. This can happen years after the work was performed.
- Floor Checks: Spot checks where an auditor asks employees what they're working on and compares the answer with what they're charging, to confirm timekeeping matches what's being billed.
The Allowability-Allocability-Reasonableness Framework
Every dollar a contractor bills the government must pass three tests under FAR Part 31:
- Allowable: The cost type must not be explicitly prohibited by FAR (entertainment, lobbying, and certain advertising costs are classic examples of unallowable costs).
- Allocable: The cost must be reasonably assignable to the contract. You can't charge personal travel to a government contract.
- Reasonable: The amount must be what a prudent businessperson would pay in similar circumstances. Paying $10,000 for a chair that's commercially available for $500 is not reasonable, regardless of whether it's technically allocable.
Watch for this: Unallowable costs buried in overhead pools. If a contractor includes prohibited costs (like compensation above the statutory cap, or country club memberships) in indirect cost pools that are then applied to government contracts, DCAA will question those costs. The government doesn't owe them, and the contractor may have to return money already paid.
What Triggers a DCAA Audit
DCAA prioritizes its audit work based on risk. Higher-risk situations that typically trigger DCAA attention include:
- New contractor seeking to perform cost-reimbursable work (pre-award accounting system audit)
- Pricing proposals that require certified cost or pricing data (over $2.5 million, or $10 million on DoD contracts signed after 30 June 2026)
- Annual Incurred Cost Submissions (ICS): all cost-type contractors must submit these
- Prior audit findings with unresolved questioned costs
- Anomalous billing patterns flagged by DFAS or the contracting officer
- Contracting officer request (COs can request a DCAA audit at any time)
DCAA Compliance: What Contractors Must Do
Staying DCAA-compliant is not just about having the right software. The key requirements are:
- Adequate accounting system: The system must meet the 18 criteria in DFARS 252.242-7006. This includes proper segregation of direct vs. indirect costs, accurate timekeeping, and the ability to produce reliable contract-level cost data.
- Timekeeping discipline: Every employee who charges time to government contracts must record their time accurately and daily (or at least contemporaneously). After-the-fact reconstruction of timesheets is a serious deficiency.
- Unallowable cost identification: The accounting system must separately identify and exclude unallowable costs from billings. Commingling allowable and unallowable costs in the same accounts is a finding.
- Incurred Cost Submission deadlines: ICS must be submitted no later than 6 months after fiscal year-end. Final indirect rates, and so the closeout of your cost-type contracts, are settled from these submissions (FAR 42.705), so a late one delays everything downstream.
DCMA Deep Dive: The Contract Administration Agency
The Defense Contract Management Agency became an independent agency in 2000. It grew out of the Defense Contract Management Command, set up inside the Defense Logistics Agency in 1990 to pull together contract administration that had been spread across the military services. DCMA has more than 10,000 employees, mostly civilians, and provides contract administration services to DoD and other federal agencies.
What DCMA Does
- Contract surveillance: DCMA assigns a Contract Management Office (CMO) and an Administrative Contracting Officer (ACO) to significant defense contracts. The ACO acts on behalf of the Procuring Contracting Officer (PCO) for day-to-day contract administration.
- Quality assurance: DCMA quality assurance representatives (QARs) conduct surveillance of contractor manufacturing and quality management systems, verifying that products meet contract requirements before acceptance.
- EVM surveillance: On EVM-required contracts, DCMA analysts review the contractor's monthly EVM data (now delivered as the IPMDAR, which replaced the older Contract Performance Report and IPMR formats), take part in Integrated Baseline Reviews (IBRs), and flag performance concerns to program managers. (See our companion guide: EVM Decoded: Your Program's Vital Signs (CPI & SPI).)
- Property administration: DCMA tracks government property in the custody of contractors, a big job given how much government-owned equipment and material sits in contractor facilities.
- CPARS input: DCMA is often the source of performance input for Contractor Performance Assessment Reporting System (CPARS) ratings, the official record that follows contractors into future source selections.
What Triggers DCMA Involvement
Most significant DoD contracts are delegated to DCMA for administration after award, though a buying office can keep some or all of that work. Specific triggers for heightened DCMA attention include:
- EVM-required contracts (cost or incentive contracts of $50 million or more under the DFARS deviation DoD has used since 1 February 2026; DCMA determines EVMS compliance when DoD is the cognizant agency)
- Cost-type contracts requiring property administration
- Contracts with quality control requirements (manufacturing, testing)
- Programs with cost or schedule performance concerns flagged by the program office
- Contracts where the buying command has delegated specific ACO functions to DCMA
DCMA Findings and Their Impact on Programs
DCMA findings carry real consequences for both programs and contractors:
- EVM corrective actions: If DCMA determines that a contractor's EVMS is not compliant or that the contractor is manipulating EV data, they can issue corrective action requests. Unresolved significant deficiencies can lead the contracting officer to disapprove the EVMS, which triggers a 5% payment withhold under DFARS 252.242-7005 and can hurt the contractor on future EVM-required contracts.
- Quality nonconformances: DCMA can reject nonconforming products. On fixed-price work, the contractor pays to fix them. On cost-type work, the fix is generally reimbursed as cost but earns no fee (FAR 52.246-3).
- CPARS ratings: DCMA surveillance data feeds into CPARS assessments. A pattern of DCMA findings translates into lower past performance ratings that affect future competitive bids.
- Show-cause and cure notices: For serious performance failures, the contracting officer (often the ACO) can issue a show-cause letter (asking why the contract shouldn't be terminated for default) or a cure notice (demanding correction of a specific deficiency within a defined period).
For program managers: DCMA is your representative in the contractor's facility. Build a relationship with your DCMA ACO. If they're seeing problems you don't know about, that's a process failure, not just a contractor problem. Regular communication with your DCMA team is a sign of a well-run program office.
How DCAA and DCMA Interact
DCAA and DCMA are separate agencies with distinct missions, but they interact on a regular basis:
- Both report findings to the cognizant contracting officer (often the DCMA ACO for ongoing contracts).
- DCMA ACOs rely on DCAA's audits when they decide whether to approve a contractor's accounting system, and they invite DCAA to help set the government's position when negotiating forward pricing rate agreements.
- DCMA ACOs can request DCAA audits when they identify billing irregularities or cost concerns during contract administration.
- Both agencies' findings can affect payment: DCAA can suspend questionable costs on interim vouchers (FAR 42.803), and contracting officers withhold payments when a business system such as accounting or EVM is disapproved.
For contractors, the practical lesson is that DCAA and DCMA are both present in your program, and a finding by either agency will reach your contracting officer. Managing both relationships proactively is essential.
Module CTA
Understand What's Watching Your Program
Acqlerate's Defense Finance & Budgeting module (Module 2) covers DCAA compliance requirements, DCMA surveillance processes, and EVM oversight, with practice questions in every lesson. Know the rules before the auditors do.
Explore Module 2: Defense Finance & Budgeting →Email Capture
Get the DCAA Compliance Checklist
An 18-point checklist of the DFARS 252.242-7006 accounting system criteria, the exact standards DCAA uses to evaluate your system. Know where you stand before the auditors do.
Frequently Asked Questions
What is the main difference between DCAA and DCMA?
DCAA (Defense Contract Audit Agency) is an audit organization that reviews contractor accounting systems, cost proposals, incurred costs, and billing practices. DCMA (Defense Contract Management Agency) is a contract administration organization that monitors contractor performance: cost, schedule, quality, and EVM compliance. DCAA audits your books; DCMA watches your work.
Does every defense contractor deal with DCAA?
Not every contractor, but any contractor performing cost-reimbursable (cost-plus) work or submitting pricing proposals that require certified cost or pricing data (over $2.5 million, or $10 million for DoD contracts entered into after 30 June 2026) is likely to encounter DCAA. All cost-type contractors must submit annual Incurred Cost Submissions (ICS) that are subject to DCAA audit. Contractors who exclusively perform firm-fixed-price commercial work generally have less DCAA exposure, though they may still be subject to accounting system reviews if they pursue cost-type contracts.
What happens if DCAA questions my costs?
DCAA issues an audit report with "questioned costs": amounts the auditor believes are not allowable, allocable, or reasonable. The contracting officer (not DCAA) makes the final determination on whether to disallow the costs. If costs are disallowed, the contractor must either repay amounts already paid or accept reduced final billings. Repeated or significant questioned costs can also affect the contractor's ability to win future contracts.
What does DCMA do during an Integrated Baseline Review (IBR)?
An IBR is a joint government-contractor review of the Performance Measurement Baseline (PMB) on an EVM-required contract, held as early as practicable after award if one wasn't held before award (FAR 52.234-4). The government program team runs it jointly with the contractor, and DCMA can take part as part of the government team, reviewing whether the baseline accurately represents the contracted scope, is technically achievable, and is properly resourced. IBR findings that the baseline is unrealistic are an early warning of future cost or schedule problems.
Can DCMA hold up payments?
Yes. DCMA Administrative Contracting Officers have authority over certain contract administration decisions that affect payment, including acceptance of deliverables, property accounting, and (on cost-type contracts) certain aspects of voucher approval. DCMA quality nonconformances can delay product acceptance and therefore delay final payment. On EVM-required contracts, if significant deficiencies lead the contracting officer to disapprove the EVMS, 5% of certain payments is withheld under DFARS 252.242-7005 (it can drop to 2% once an acceptable corrective action plan is in place) until the problems are fixed.