It is our military, civilians, and contractor employees that most acutely feel the impact of contract waste, fraud, and abuse. SPECIAL REPORT ON CONTRACTOR BUSINESS SYSTEMS Defense agencies must improve their oversight of contractor business systems to reduce waste, fraud, and abuse ExEcutivE Summary Contractor business systems and internal controls are the Qrst line of defense against waste, fraud, and abuse. Weak control systems 4such as those for estimating, billing, purchasing, labor, and compensation, among other activities 4increase the risk of unallowable and unreasonable costs on government contracts, especially in contingency environments like Iraq and Afghanistan.
The potential increased cost attributable to weak systems is exacerbated by the government 9s increased reliance on service-support contractors in the high-risk environment of contingency contracting and on an oversight process that has proven ineffective for the task. On August 11, 2009, the Commission on Wartime Contracting in Iraq and Afghanistan conducted a hearing to obtain testimony from government ofQcials and contractors on the adequacy of contractor business systems. The Commission learned that unreliable data from business systems produced billions of dollars in contingency-contract costs that government auditors often could not verify.
The government 9s ability to detect contract cost errors and material misstatements is seriously ... more. less.
impeded by contractors 9 inadequate internal controls over their business systems. Further, the two primary government agencies involved, the Defense Contract Management Agency (DCMA) and the Defense Contract Audit Agency (DCAA), are not effectively working together to protect government interests. The Commission found Qve systemic problems with current oversight of contractor business systems and makes Qve recommendations to correct them: CWC Special Report 1 September 21, 2009 FindingsRecommendations 1 DCMA 9s and DCAA 9s divergent and often contradictory behaviors send mixed messages to contractors.<br><br> Department of Defense (DoD) needs to ensure that government speaks with one voice to contractors. 2 Separate government reporting lines of authority complicate issue resolution. DoD needs to improve government accountability by rapidly resolving agency conRicts on business systems.<br><br> 3 Audit reports are not informative enough to help contracting ofQcers make effective decisions. DCAA needs to expand its audit reports to go beyond rendering a pass/fail opinion. 4 DCMA is not aggressive in motivating contractors to improve business systems.<br><br> DCMA needs to develop an effective process that includes aggressive compliance enforcement. 5 Agencies are under-resourced to respond effectively to wartime needs. DCAA and DCMA need to request additional resources and prioritize contingency-contractor oversight workload.<br><br> Commission on Wartime ContraCting in iraq and afghanistan 2 Effective oversight of contractor business systems and internal controls is important and needs immediate attention. Every dollar wasted is a dollar not available for training, equipment maintenance, life-support services, and ultimately for accomplishing the mission. The Congress and taxpayers have a large stake in this issue, but our military, civilians, and contractor employees on the front line are the ones who most acutely feel the impact of contract waste, fraud, and abuse.<br><br> This Qscal hemorrhaging must stop. Background Contractor business systems and internal controls are the Qrst line of defense against waste, fraud, and abuse. Weak control systems increase the risk of unallowable and unreasonable costs on government contracts.<br><br> Financial risks are greatly heightened in a contingency environment where business operations include new and unfamiliar business markets, foreign practices which often sanction graft, and poor communications that complicate home-ofQce oversight. The Defense Contract Management Agency is charged with managing the government oversight process with audit and Qnancial advisory services provided by the Defense Contract Audit Agency. The Federal Acquisition Regulation (FAR) gives contracting ofQcers wide latitude in exercising business judgment to make Qnal decisions regarding the adequacy of contractor business systems.<br><br> A key factor in applying this judgment is the DCAA input from its audits of the following 10 key business systems: Control Environment and Overall Accounting System Controls " Purchasing (subcontracting) Controls " Indirect and Other Direct Cost Controls " Compensation System Controls " Billing System Controls " Budget and Planning System Controls " Estimating System Controls " Material Management and Accounting System Controls " Labor System Controls " IT General System Controls " Contracting ofQcers must balance concerns for accomplishing the mission with the risk associated with poor or inadequate business systems. In addition to supporting the DCMA 9s contracting-ofQcer assessment of contractors 9 internal-control compliance, auditing standards generally require that the auditor obtain an understanding of the contractors 9 systems of internal controls in order to plan the nature, timing, and extent of auditing procedures 4that is, substantive tests. In other words, the government auditor does not look at every Qnancial transaction of every contract to determine the reasonableness and reliability of the charges.<br><br> This would be highly inefQcient. Rather the auditor relies on contractor internal controls to limit substantive testing and gives more attention to areas of greatest audit risk. Theoretically, decisions by DCMA contracting ofQcers are supported and strengthened by professionally sound DCAA business-system audits.<br><br> When all the pieces in the process work, the government should be able to rely on contractor business systems to substantially reduce risk of waste, fraud, and abuse 4especially when signiQcant amounts of taxpayer dollars Row quickly to contingency contractors. 3 FindingS DCMA 9s and DCAA 9s divergent and often contradictory behaviors send mixed messages to contractors A key difference between the roles of DCMA and DCAA must be emphasized: only DCMA contracting ofQcials have the responsibility and authority to enforce contract terms and conditions. In contrast, DCAA 9s role is advisory.<br><br> DCMA, as the administrative contracting ofQce, has authority to accept or reject DCAA 9s advice regarding the adequacy of business systems. While DCAA acts only in an advisory role, its auditors are recognized experts on accounting matters, internal controls, and business systems. Contracting ofQcers are not typically trained in these complex audit and accounting procedures and sometimes make questionable decisions, seemingly ignoring DCAA recommendations.<br><br> 1 If contracting ofQcials consistently override reasoned audit opinions without proper consideration and DCAA coordination, the result is likely to be continued system deQciencies and increased contract costs. 2 This is a longstanding issue that remains unresolved. 3 Through research and hearings, the Commission learned that many contractor business systems cannot be relied upon to ensure that proposed and incurred contract costs are reasonable.<br><br> Many deQciencies identiQed by the DCAA have remained uncorrected for years because the government failed to insist that the contractor make the necessary corrections. DCAA conducts audits and offers recommendations, but the power to accept audit recommendations, compel action, and impose consequences rests with the DCMA. For example, the Commission reviewed records that show DCMA contracting ofQcials generally contradicted DCAA 9s negative audit Qndings of Kellogg Brown & Root International, Inc.<br><br> (KBR) business systems. As reRected in the Qgure 1 below, in every case, DCMA found KBR 9s systems adequate, overruling DCAA 9s professional audit opinion. 1.<br><br> DoD Inspector General Oversight Review Report No. D-2009-6-004, Defense Contract Management Agency Actions on Audits of Cost Accounting Standards and Internal Control Systems at DoD Contractors Involved in Iraq Reconstruction Activities , April 8, 2009, 8-13. 2.<br><br> Testimony of April Stephenson, Director, Defense Contract Audit Agency, before the Commission on Wartime Contracting in Iraq and Afghanistan, c. . .<br><br> [KBR] could not support . . .<br><br> $1.5 billion [in LOGCAP III contract costs], d May 4, 2009, 5, http://www.wartimecontracting.gov/images/download/documents/ hearings/20090504/Stephenson_DCAA_testimony_5-4-09.pdf. 3. http://www.dodig.mil/Audit/reports/fyod/03-6-001.pdf.<br><br> Yellow or red bars indicate a negative DCAA audit Qnding; green bars indicate areas where DCMA determined otherwise. Source: Data provided to the Commission by DCAA and DCMA in July 2009. Figure 1.<br><br> KBR Business Systems - DCAA fndings and DCMA resolution 4 There seems to be a signiQcant disparity between the importance DCAA and DCMA assign to business systems and internal-control deQciencies. This disparity is exempliQed in KBR-related data in Figure 1; however, similar results occur to varying degrees with many of the contingency-contractor business- system audits the Commission examined for logistics support-service contracts in Iraq and Afghanistan. For example, DCAA and DCMA reviewed the same KBR purchase orders and subcontracts issued against the Army logistics civil augmentation program (LOGCAP III) contract from the period January 1 through December 31, 2007, and identiQed the same deQciencies, but came to different conclusions on the adequacy of KBR 9s purchasing system.<br><br> Despite the DCAA inadequacy recommendation, DCMA approved the system. Consistent assessment and reliability of contractors 9 purchasing systems are especially important because subcontractors provide more than 70 percent of the LOGCAP III services in theater. 4 Contractors have noticed 4and openly discussed 4the disagreements and inconsistent approaches between DCAA and DCMA.<br><br> These two agencies and the contractors have often spent years arguing over whether corrective actions must be accomplished or have been satisfactorily completed in speciQc cases under dispute. This creates an environment in which contractors can exploit the agencies 9 mixed messages and game the system to their advantage. Separate government reporting lines of authority complicate issue resolution There is no common line of authority or arbiter to resolve signiQcant differences between DCAA and DCMA, the primary participants in overseeing contingency-contracting business systems.<br><br> The DCAA reports to the Under Secretary of Defense (Comptroller), while DCMA reports to Under Secretary of Defense (Acquisition, Technology, and Logistics). Their common point of resolution is the OfQce of the Secretary of Defense 4a level too high in the organization structure to effectively resolve differences that continually occur. The Commission is not aware of any instance in which a dispute between the two agencies has risen to the Secretarial level 4possibly a sign that disputes may go unresolved because parties are reluctant to push them up the chain of command.<br><br> These separate lines of authority contribute to a lack of interagency cooperation and collaboration, and make it difQcult for the oversight process to work as well as it should. Audit reports are not informative enough to help contracting of 9cers make effective decisions In December 2008, DCAA changed its policy, eliminating cinadequate-in-part d opinions and csuggested management improvements. d Now, all deQciencies reported by DCAA will render the contractor 9s system cinadequate, d resulting in many more adverse audit opinions. But this does not improve matters.<br><br> Rather than giving system deQciencies more importance, it seems to have the opposite effect 4undermining the signiQcance of the audit Qndings and weakening their effectiveness. Use of a binary system involving a pass/fail rating does not adequately depict relative degrees of impact. Without any reasonable provision for more accurately describing systems that are less than perfect, contractors and contracting ofQcers Qnd the cadequate/inadequate d options 4.<br><br> Ibid., 27. Consistent assessment and reliability of contractors 9 purchasing systems are especially important because subcontractors provide more than 70 percent of the LOGCAP III services in theater. 5 too restrictive.<br><br> Moreover, since only signiQcant deQciencies are now reported, there is no provision to report and track recommendations for other desirable improvements. Contracting ofQcers need audit opinions with clear and quantiQable risk information. They need DCAA 9s expert opinion about the relative impact or dollar value (or even an estimated range of risk) of the deQciency in order to consider making a contract award or a contract-incentive determination in the face of an cinadequate d audit opinion.<br><br> Further, cost-impact information provided by DCAA could help the contracting ofQcer determine withhold amounts when necessary. Although DCAA has increased the number of its recommendations to withhold payment, it does not always estimate a cost impact for the deQciencies it has identiQed. This is of utmost importance to the contracting ofQcer who must make a decision that balances the cost risk against the importance of the mission 4that is, making a critical award in the face of an inadequate opinion.<br><br> When contracting ofQcers making decisions about contract actions are presented with multiple and potentially differing opinions, their ability to make an overall assessment of system acceptability is severely limited. Apart from contractor systems speciQcally addressed in the FAR (e.g. the accounting system), there is no regulatory requirement for DCAA to render an overall opinion regarding the adequacy of many of the 10 business systems audited by DCAA.<br><br> In fact, with respect to audit resolution procedures, DoD FAR Supplement (DFARS) 242.7502 instructs the contracting ofQcer to consider signifcant defciencies as opposed to an overall opinion regarding adequacy. DCMA is not aggressive in motivating contractors to improve business systems When confronted with signiQcant audit Qndings, contractors generally promise to improve their business systems by providing corrective-action plans to contracting ofQcers. These plans, as opposed to completed corrective actions, are often accepted by contracting ofQcers, thus effectively rendering a system adequate.<br><br> 5 Subsequently, there is no basis to pursue any suspension of percentage-of-progress payments, withhold reimbursement of costs, or use other incentives to ensure that contractors implement thorough and effective improvements. The Director of DCAA testiQed that contract withholds have a proven capacity to cause contractors to remedy inadequate business systems. 6 For example, a cwithhold d was placed on Titan Corporation 9s in-theater linguist contract as a result of DCAA 9s cinadequate d opinion on its labor system.<br><br> As much 5. Testimony of David Ricci, Executive Director, Contracts, Defense Contract Management Agency, before the Commission on Wartime Contracting in Iraq and Afghanistan, August 11, 2009, 25, http:// wartimecontracting.gov/images/download/documents/hearings/20090811/Transcript%20-%20 August%2011%202009%20Business%20Systems%20Hearing.pdf. 6.<br><br> Testimony of April Stephenson, August 11, 2009, 36. Federal regulations instruct the contracting of 0cer to consider signifcant defciencies as distinct from giving an overall opinion on adequacy. DCMA has felt ca kind of almost direction to work with your industry counterparts, d an agency of 0cial testi 0ed.<br><br> 6 as $40 million was withheld, with portions returned to the contractor as each system deQciency was corrected. 7 This approach motivated the contractor to Qx the deQciency as quickly as possible while mitigating the government 9s risk during the process. Each of the contractors at the Commission 9s August 11 hearing agreed that contract withholds serve as a motivator to correct reported deQciencies.<br><br> 8 The CEO of DynCorp said it does not take a big withhold to catch a contractor 9s attention. 9 Nevertheless, the contract withhold remedy is rarely used even though the DFARS 242.7502 clearly instructs contracting ofQcers to cconsider whether it is appropriate d to suspend some payments until contractors submit a plan and correct deQciencies. Despite this regulatory coverage, DCMA 9s Executive Director, Contracts, testiQed that he does not believe that DCMA has the authority to conduct withholds under cost-reimbursement or incentive-type contracts without an implementing clause or without showing a clogical nexus or causality between the speciQc system deQciency and the cost. d 10 DCAA does not always provide this nexus, but DCMA has also been very conservative in its application of the available DFARS option.<br><br> The DCMA 9s Executive Director, Contracts, testiQed at the Commission 9s August 11 hearing about ca kind of almost direction to work with your industry counterparts & to the extent that DCMA perhaps has not taken the strongest action that maybe it could have. d 11 This conservative approach results in little, if any, motivation for contractors to improve their business systems, and ultimately has a direct impact on the warQghting mission. Agencies are under-resourced to respond effectively to wartime needs Poor alignment of personnel to meet wartime needs has resulted in a spiraling down of business-system oversight in contingency contracting. There have been too few experts to conduct reviews and too few personnel to validate that contractor correctiveaction was properly implemented.<br><br> As a result of personnel shortfalls, DCAA system reviews and follow-ups are not always timely; therefore, the real-time status of contractor business systems cannot always be determined. As noted in our Interim Report to Congress, DCAA has not performed timely reviews of many contractor business systems. For example, the last full billing and estimating system reviews of KBR were completed in 2004; current reviews are scheduled for completion in late 2009 or early 2010.<br><br> 7. Ibid., 17. 8.<br><br> Testimony of Mssrs. Methot, Ballhaus, and Walters, representing Fluor, DynCorp, and KBR, August 11, 2009, 106. 9.<br><br> Ibid. 10. Testimony by David Ricci, 26 and 36.<br><br> 11. Ibid., 62. Top: 8/11 CWC Panel 1, l-r: Jeff Parsons, Army; April Stephenson, DCAA; David Ricci, DCMA.<br><br> Bottom: 8/11 CWC Panel 2, l-r: David Methot, Fluor; William Ballhaus, DynCorp; William Walter, KBR. The CEO of DynCorp said that it doesn 9t take a big withhold to catch a contractor 9s attention. 7 Corrective actions taken by contractors sometimes remain unvalidated for extended periods of time.<br><br> Consequently, contracting ofQcers may not have current and accurate information to determine if the corrective actions that were implemented actually resolved system deQciencies. This may also give contractors the impression that the government does not consider business system reviews to be important. DCAA 9s practice is to conduct follow-up assessments on contractors 9 corrective actions within 6 to 12 months.<br><br> 12 In some cases, however, these assessments take more than a year to complete. For instance, DCAA 9s April 2009 report on KBR 9s purchasing system was the culmination of a review that started in January 2008. 13 Another indication of personnel shortages is the small number of DCMA personnel devoted to contractor purchasing system reviews (CPSR).<br><br> The number of personnel assigned to perform CPSR reviews has decreased from 102 in 1994 to 70 in 2002, to 14 in 2009. Contract transactions, on the other hand, have increased by 328 percent since Qscal year 2000. 14 This steep decline in personnel, combined with the exponential increase in contracting activity, demonstrates a diminishing level of DCMA critical analysis of contractor purchasing systems.<br><br> The Commission believes that many of the untimely reviews are due to the failure of both DCAA and DCMA to prioritize their business-system workload in a wartime environment. DCAA does review outputs generated by contractor business systems, such as proposals that reRect contractors 9 estimating systems. In fact, the DCAA Director testiQed that the agency found $6.1 billion in unsupported estimating costs in Iraq and Afghanistan.<br><br> 15 But DCAA is under-resourced for comprehensively reviewing all contingency contractors 9 business systems on a timely basis. The Commission recognizes that both DCAA and DCMA have recently requested additional resources to effectively accomplish their full missions. Nevertheless, the wars in Iraq and Afghanistan have been going on for many years and the Commission is at a loss to understand why leadership has not aggressively pursued additional stafQng until recently.<br><br> In addition, it is the job of DCMA and DCAA leadership to reallocate existing, albeit limited resources in accordance with mission priorities. Timely oversight of contingency contractors 9 business systems should be a priority for both agencies during wartime. 12.<br><br> Testimony of April Stephenson, August 11, 2009, 50. 13. Information provided to the Commission by DCAA in July 2009.<br><br> 14. Information provided to the Commission by DCMA on August 4, 2009. 15.<br><br> Testimony by April Stephenson, May 4, 2009, 4. The number of DCMA personnel assigned to review purchasing systems decreased from 102 personnel in 1994 to 70 in 2002, to 14 in 2009. 8 FindingS Summary Opinions rendered and actions taken on contingency-contractor business systems have not received the attention necessary to monitor the billions of dollars of costs that Row through these systems.<br><br> The Qve Qndings of this report indicate that the oversight process, as well as the communication between agencies must improve if we are to effectively mitigate the risk of waste, fraud, and abuse. These Qndings would be important in peacetime; in wartime they are critical. Because the United States relies on contractors as a primary source of in-theater support, it is imperative that the government correct the Raws in this process.<br><br> The Commission offers the following recommendations for improvement. Commissioners pose questions to witnesses at August 11, 2009, hearing on Capitol Hill. 9 rEcommEndationS For improvEmEnt DoD needs to ensure that government speaks with one voice to contractors DCMA and DCAA must work closely together to protect the government 9s interests.<br><br> The Commission believes it is possible to achieve this while maintaining the auditing independence desired by DCAA and respecting the decision-making authority of the contracting ofQcer. Audits and assessments that are conducted using a well-deQned evaluation methodology will provide a consistent government position that is clear to the contractor. DCAA and DCMA must work together to develop agreed-upon standards and processes that communicate the same message to both the individual contractor and the contracting community and help contractors achieve cadequate d systems.<br><br> Ideally, the process should be deQned in the FAR (in a way similar to the material-management and accounting- system standards called out in the DFARS 252.242.7004) so they are visible to all stakeholders. DoD needs to improve government accountability by rapidly resolving agency con aicts on business systems The Department of Defense needs to re-establish control of the oversight process to the government by developing better internal-resolution processes. The DoD process should ensure that disagreements between DCAA and DCMA are rapidly resolved, with consideration for DCAA 9s independent audit expertise as well as for the DCMA contracting ofQcerís decision-making authority and the operational mission.<br><br> DCAA needs to expand its audit reports beyond rendering a pass/fail opinion DCAA should revisit its policy with respect to its binary cadequate/inadequate d opinions for business-system reports and provide a mechanism for reporting any deQciency that warrants formal notiQcation and tracking. Also, whenever possible, audit reports should include an assessment of audit risk and cost impact associated with reported deQciencies. Further, DCAA should re-examine the need to express opinions on the overall adequacy of business system audits beyond those explicitly required by the FAR.<br><br> DCMA needs to develop an effective process that includes aggressive compliance enforcement DCMA, with DCAA advice, should develop a reliable and aggressive process for reaching consistent decisions on business systems and any corrective action needed. The process should recognize the contracting ofQcer as the Qnal authority but also acknowledge DCAA auditors as the business-system experts chartered to advise government contracting organizations, as noted in the DCAA mission statement. 16 Disagreements with audit recommendations should be discussed at appropriate leadership levels within DCMA and DCAA and documented accordingly.<br><br> As part of their decision process, DCMA contracting ofQcers should also consider any risk analysis provided by DCAA and thoroughly address it in documenting their decisions. Finally, DCMA should ensure timely follow-up on contractor corrective-action plans and validate that the contractor actions actually correct the deQcient business system. If not, the contracting ofQcer should pursue such contractual remedies as withholds, and DCMA leadership should ensure that this occurs.<br><br> If DCMA leaders believe there is ambiguity about their ability to impose withholds, they should seek clariQcation and resolution from the Undersecretary of Defense for Acquisition, Technology, and Logistics. DCAA and DCMA need to request additional resources and prioritize contingency-contractor oversight workload The Commission believes that much of the delay in delivering audit opinions and enforcing corrective action is caused by the failure of both DCAA and DCMA to obtain enough resources and to effectively prioritize the wartime workload. These agencies need to give contractor business systems the appropriate priority and allocate resources accordingly.<br><br> Both DCAA and DCMA have requested increases to their workforce in order to fulQll their assigned missions. The Commission strongly encourages each organization to aggressively pursue additional staff, but also to immediately prioritize its current workload to meet government oversight needs in the contingency-contracting arena. This is imperative to address the risks of waste, fraud, and abuse.<br><br> 16. .See cThe DCAA Organization, d http://www.dcaa.mil. 10 concluSion At the August 11, 2009 hearing, the Commissioners asked DCMA and DCAA to work together to improve the state of affairs outlined in this Special Report.<br><br> A resolution is necessary sooner rather than later, and both agencies have been invited back to testify on their progress. The Commission hopes to learn that they have indeed made signiQcant progress in developing an effective oversight program that capitalizes on the strengths of each organization. The Commission hopes to hear the agencies propose a plan that positively addresses each of the above Qndings and recommendations and we recommend that this plan subsequently be fully coordinated within the Department of Defense.<br><br> Both agency directors have made a commitment to implementing improvements. DCMA Director Charlie Williams sent a post-hearing letter for the record to the Commission committing to identify opportunities for improvement and to implement solutions. DCAA Director April Stephenson gave a similar commitment during her testimony.<br><br> Making sure that contractor business systems are reliable will have far-reaching consequences for all contracts executed to support contingency operations. Government regulations need to ensure that audit follow-up and resolution is effective and timely for all government contracts. In the coming months, the Commission intends to expand its research to contractor business systems supporting Department of State and U.S.<br><br> Agency for International Development contingency contracts. The Commission 9s Final Report to Congress will reRect the results of all Commission work in this area. It will include lessons learned and recommendations for permanent improvement of oversight of wartime-contractor business systems.<br><br> Despite the difQculty of providing critical support for U.S. contingency operations in Iraq and Afghanistan, DCAA and DCMA military personnel, civilian employees, and private contractors have performed diligently and at the cost of great personal sacriQce. The Commission 9s recognition of opportunities for improvement and suggestions for reform in no way diminish their contributions.<br><br> The Commission on Wartime Contracting is an independent, bipartisan legislative commission established in Section 841 of the National Defense Authorization Act for Fiscal Year 2008 (Public Law 110-181) to study federal agency contracting for reconstruc tion, logistical support, and security functions in Iraq and Afghanistan. COMMISSIONERS Michael J. Thibault, Co-Chair; Christopher H.<br><br> Shays, Co-Chair Clark Kent Ervin, Grant S. Green, Linda J. Gustitus, Robert J.<br><br> Henke, Charles Tiefer, Dov S. Zakheim 1401 Wilson Boulevard, Suite 300 Arlington, VA 22209 703-696-9362 www.wartimecontracting.gov