1. Home
  2. |Insights
  3. |ASBCA Finds Stock Option Costs Based on Black-Scholes Model Unallowable

ASBCA Finds Stock Option Costs Based on Black-Scholes Model Unallowable

Client Alert | 1 min read | 01.22.18

In Luna Innovations, Inc. (ASBCA No. 60086), the Board determined that Luna’s stock option costs were unallowable (but not expressly unallowable) pursuant to FAR 31.205-6(i), because such costs “constitute[d] compensation that [were] determined by changes in stock prices.”  Specifically, the Board concluded that Luna’s stock option costs were unallowable because they were “valued using the Black-Scholes model,” which relies upon five inputs, including the stock price variance.  According to the Board, the Black-Scholes model not only “values” a stock option, but “the value is ‘based on’ share price volatility.”  Indeed, the Board found that “the volatility measure is one of the most important, if not the most important, inputs into [such model], such that the compensation is ‘based on’ on [sic] asset volatility.”  Though the Board concluded that such costs were unallowable, it did not agree with the Government that they were expressly unallowable.  In this respect, the Board recognized “significant differences” existed between the Black-Scholes model that Luna used and “the TSR equation at issue in Raytheon and Exelis,” namely that the latter “determined the number of shares to be awarded based explicitly on the change in share prices during the evaluation period.”  The Board also pointed out that “the use of the Black-Scholes model [was] a question of firm impression” and “there [were] legitimate differences of opinion regarding the allowability of the costs at issue in this appeal.”

Insights

Client Alert | 13 min read | 06.12.26

EU Cyber Resilience Act Countdown: 11 September 2026 Incident/Vulnerability Reporting Deadline Less Than 100 Days Away

The EU Cyber Resilience Act (CRA) is an EU product cybersecurity law for connected products (formally, “products with digital elements” under the CRA) commercialized in the EU; it entered into force on 10 December 2024, with direct application across the EU. Full application begins 11 December 2027, but one of its most operationally demanding provisions takes effect in just under 100 days, on 11 September 2026: the mandatory vulnerability and incident reporting under Article 14 CRA....