DCAA Price Proposal Audit Program Update - What it means for Auditors & Contractors.
- Lynne Moritz
- 9 minutes ago
- 2 min read
The latest update to the Activity Code 21000 Price Proposal Audit Program (v5.5, Mar 2026) marks an important shift in how DCAA price proposal audits are planned and executed.
This isn’t just a procedural refresh,
it’s a move toward modern, risk-based auditing.
What Changed?
Version 5.5 replaces a largely checklist-driven approach with a judgment-driven, risk-based framework:
Consolidated multiple audit paths into single, flexible audit workflows
Introduced early materiality assessments to focus effort where it matters most
Requires independent validation of FPRA/FPRR reliance (no more default reliance)
Formalizes risk identification using EPIC (DCAA’s Management Information System that consolidates data from multiple audit programs and processes. In the context of proposal audits), fraud indicators, and structured inquiries
Streamlines procedures to eliminate redundancy and improve efficiency
Impact on Contractors
Contractors should expect:
Greater scrutiny of cost assumptions. Auditors are now required to independently assess market data, historical support, and rate derivations—not just accept existing agreements.
More focused audits—but deeper where it counts. Low-risk areas may see less attention, but material cost elements will be examined more rigorously.
Increased emphasis on documentation quality. Clear, supportable bases of estimate (BOEs), pricing support, and internal analyses will be critical to withstand review.
More questions on prior findings and internal audits. Historical issues and internal control effectiveness will play a larger role in shaping audit scope.
Impact on Auditors
Auditors will need to:
Exercise greater professional judgment. The program provides flexibility—but requires clear reasoning and strong documentation.
Perform deeper validation of FPRA/FPRR agreements. Reliance must now be justified through evaluation of ACO methodologies and supporting data.
Focus on risk and materiality up front. Audit scope is no longer “one-size-fits-all”—planning decisions drive execution.
Document the “why,” not just the “what”. Expect stronger expectations around explaining conclusions and decisions.
Bottom Line
Version 5.2 = procedural execution
Version 5.5 = risk-based, evidence-driven auditing
This update improves efficiency, audit quality, and defensibility, but also raises the bar for both auditors and contractors.
Curious how this will affect your next proposal audit or FPRA strategy? Let’s connect and discuss.