LT&A Compliance Scorecard
Self-assess compliance readiness for government contractors.
Respondent Information
Full Name
*
First Name
Middle Name
Last Name
Business Name
*
Email
*
example@example.com
FAR/DFARS Readiness
How well are FAR/DFARS requirements identified and tracked across contracts?
*
Not identified (0)
Partially identified (1)
Mostly identified and tracked (2)
Fully identified, regularly reviewed, and updated (3)
How effective are your FAR/DFARS compliance review and approval processes?
*
No formal process (0)
Ad hoc reviews only (1)
Defined process with occasional gaps (2)
Formal, consistently followed process (3)
How well are FAR/DFARS flowdowns communicated to subcontractors and monitored?
*
Not communicated (0)
Communicated inconsistently (1)
Communicated and monitored in some cases (2)
Communicated and monitored systematically (3)
CMMC 2.0 Readiness
Does your organization maintain and regularly update a documented cybersecurity policy aligned to applicable CMMC practices?
*
No documented policy (0)
Draft only, not maintained (1)
Documented and periodically reviewed (2)
Documented, reviewed, and fully aligned with CMMC practices (3)
Are security responsibilities assigned, communicated, and consistently followed across relevant personnel?
*
Not assigned (0)
Assigned to a few roles, inconsistently followed (1)
Assigned and communicated, but not consistently monitored (2)
Clearly assigned, communicated, and consistently followed (3)
How well are access control and authentication measures implemented for systems that store or process controlled information?
*
Little or no access control in place (0)
Basic access controls in place, gaps remain (1)
Access controls implemented with some monitoring (2)
Strong access controls implemented and routinely monitored (3)
CAS Exposure
Are any of your contracts subject to Cost Accounting Standards (CAS)?
*
No contracts subject to CAS (0)
Some contracts may be subject to CAS (1)
Several contracts are subject to CAS (2)
Most or all contracts are subject to CAS (3)
How mature are your CAS compliance processes and documentation?
*
No formal CAS process (0)
Ad hoc or partially documented (1)
Documented and periodically used (2)
Fully documented, trained, and consistently applied (3)
What is your level of exposure to CAS-related risk or noncompliance findings?
*
High risk with known gaps (0)
Moderate risk with some gaps (1)
Low risk with minor gaps (2)
Minimal risk with proactive controls (3)
Timekeeping & Accounting Systems
How are employee labor hours captured?
*
Manual paper timesheets (0)
Spreadsheet entries without approval workflow (1)
Electronic timesheets with supervisor approval (2)
Integrated digital timekeeping with audit trail (3)
How consistently are labor charges reconciled to project records?
*
Rarely reconciled (0)
Reconciled only at month-end (1)
Reconciled weekly with some exceptions (2)
Reconciled regularly with automated controls (3)
How mature is the accounting system for separating direct and indirect costs?
*
No formal separation (0)
Basic manual allocation (1)
Defined chart of accounts with periodic review (2)
Strong system controls with clear cost segregation (3)
I would like to receive email updates and communications from LT&A.
Submit
Should be Empty: