1. Home
  2. |Insights
  3. |Additional Business Systems Reviews Proposed

Additional Business Systems Reviews Proposed

Client Alert | less than 1 min read | 07.17.14

The government issued a proposed rule on Monday that would require contractors subject to withholdings under the Business Systems Rules to conduct annual internal reviews of their accounting, estimating, and material management and accounting business systems and engage an independent CPA firm to conduct audits every three years (or more frequently if directed by the contracting officer). The proposed rule if adopted as drafted would likely result in inefficiency and delay because it contemplates DCAA review and approval of the independent CPA work plan, audit, and workpapers and permits DCAA to challenge the findings of the independent CPAs.


Insights

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA....