The Business Systems Rule, found in the Defense Federal Acquisition Regulation Supplement (DFARS), establishes mandatory requirements for the internal control systems of contractors doing business with the Department of Defense (DoD). This rule is designed to ensure that contractors have adequate, compliant, and auditable systems that support contract performance, cost control, billing accuracy, and overall financial integrity.
The rule applies to large defense contractors with cost-reimbursement, incentive-type, time-and-materials, or other contract types where the risk to the government is higher. It gives the DoD oversight over six core business systems and links system deficiencies directly to financial consequences.
Purpose of the DFARS Business Systems Rule
The primary objectives of the rule are to:
- Improve accountability and reduce fraud, waste, and abuse in DoD contracting
- Promote consistency and accuracy in contractor cost and billing data
- Ensure transparency and traceability in business operations
- Provide contracting officers with assurance that contractor systems support proper contract execution
- Allow the government to act quickly when systemic issues are identified
The rule is intended to prevent performance and payment problems before they occur by establishing clear, auditable standards for critical internal processes.
Origin and Regulatory Basis
The Business Systems Rule was first published as an interim DFARS rule in 2011 and later finalized. It is codified in DFARS 252.242-7005 and associated clauses under DFARS Subpart 242.70, which detail the requirements and oversight mechanisms.
The regulatory authority for the rule comes from both federal acquisition statutes and DoD-specific internal controls policies, including the National Defense Authorization Act (NDAA) and the DoD Financial Management Regulation (FMR).
The Six Covered Business Systems
The DFARS Business Systems Rule defines six internal systems that must meet DoD standards:
1. Accounting System
Tracks costs, allocates indirect expenses, and provides real-time visibility into contract-level financials.
2. Estimating System
Ensures that cost estimates submitted for pricing or proposal purposes are reliable, supported, and based on documented methods.
3. Earned Value Management System (EVMS)
Applies to large-scale, schedule-driven programs. It integrates cost, schedule, and technical performance for effective program control.
4. Material Management and Accounting System (MMAS)
Controls material use, ordering, and inventory within manufacturing or production operations.
5. Property Management System
Tracks and safeguards government-furnished and contractor-acquired property used in contract performance.
6. Purchasing System
Manages subcontracting, competitive sourcing, and supplier responsibility, ensuring compliance with FAR Part 44 and DFARS standards.
Each system has its own DFARS clause and performance criteria that the contractor must meet.
Compliance Requirements
Contractors subject to the Business Systems Rule must:
- Implement and maintain each business system in accordance with applicable DFARS clauses
- Undergo audits or reviews conducted by the Defense Contract Management Agency (DCMA) or Defense Contract Audit Agency (DCAA)
- Correct identified deficiencies within an agreed-upon timeline
- Provide documentation, system access, and staff cooperation during reviews
Systems must operate effectively and consistently across the entire organization and be tailored to support the unique requirements of DoD contracts.
Consequences of Noncompliance
If a contractor’s business system is found to be inadequate, the government may:
- Issue a formal notice of deficiency
- Require a corrective action plan
- Withhold a percentage of payments (typically 5 percent per deficient system, up to a total of 10 percent)
- Delay contract awards or modifications
- Refer the issue for further investigation or enforcement action
Payment withholds are lifted once the contractor resolves the deficiencies and the system is approved as adequate.
Role of DCMA and DCAA
The Defense Contract Management Agency (DCMA) is primarily responsible for evaluating most systems, including purchasing and property systems. The Defense Contract Audit Agency (DCAA) generally handles audits of the accounting and estimating systems.
Both agencies:
- Conduct initial and follow-up reviews
- Use established audit checklists and criteria
- Document findings in official reports
- Coordinate with contracting officers on enforcement and corrective action
These reviews are rigorous and can take several weeks to complete, depending on the size and complexity of the contractor’s operations.
Preparing for a Business Systems Audit
To successfully comply with the Business Systems Rule, contractors should:
- Conduct internal self-assessments and mock audits
- Establish written policies and procedures for each system
- Train staff on system functionality and compliance expectations
- Maintain documentation and audit trails for all transactions
- Respond quickly to government requests for data or clarification
- Correct weaknesses proactively before formal review
Many contractors also work with outside consultants or internal compliance teams to strengthen system integrity.
Strategic Implications for Contractors
Compliance with the Business Systems Rule is more than just an administrative task. It can affect:
- Eligibility for certain contract types
- Award decisions in source selection
- Reputation with DoD agencies
- Audit frequency and oversight level
In contrast, failure to comply can lead to delays, lost revenue, and reputational damage. A well-maintained and compliant system portfolio can serve as a competitive advantage in DoD contracting.
Integration with Other Compliance Requirements
Business systems compliance often overlaps with other regulatory and contractual obligations, including:
- Cost Accounting Standards (CAS)
- Truthful Cost or Pricing Data Act (formerly TINA)
- Federal Acquisition Regulation (FAR) Part 31
- Cybersecurity Maturity Model Certification (CMMC) for IT-related systems
Contractors must coordinate across multiple departments — finance, legal, IT, contracts, supply chain — to ensure full alignment with all applicable rules.
Conclusion
The DFARS Business Systems Rule plays a central role in ensuring financial and operational integrity in DoD contracting. By setting clear expectations for accounting, estimating, property, purchasing, and related systems, the rule provides the DoD with confidence that contractors can manage complex programs reliably and transparently.
For contractors, compliance is not optional. It is a prerequisite for sustained success in the defense market. Organizations that invest in system quality, oversight, and continuous improvement are better positioned to win and retain DoD business while avoiding costly penalties and delays.
