dodilligence.io

PE & M&A workstream guide

Government Contracting Due Diligence: Backlog, FAR/DFARS & Recompete Risk

Underwrite public-sector revenue the way a GovCon operator does: funded backlog quality, agency and program concentration, contract-type mix, recompete calendar, past performance, set-aside eligibility, cyber/clearance capacity, and rate/compliance posture — not a generic “government customer” label on a commercial CIM.

6
GovCon pillars
50
Checklist items
$49
First-pass pack

Many CIMs present “sticky government revenue,” “multi-year backlog,” or “incumbent positions” without proving funded remaining work, option exercise realism, recompete exposure, or set-aside dependency. Government contracting due diligence (also called federal contracting, GovCon, or public-sector contracting diligence) underwrites how the company wins, performs, bills, and retains federal (and often state/local) work under FAR/DFARS-style regimes. It tests backlog quality, customer and program concentration, contract-type economics, past performance, small-business or socioeconomic status risk, cyber and clearance capacity, subcontracting stack, protest history, and whether accounting/rate systems can survive audit. It is not the same as commercial contract diligence (private MSAs, CoC, assignment), compliance-program diligence (internal controls and training programs), regulatory diligence (licenses and permits inventory), CFIUS / foreign-investment diligence (national-security investment review), legal entity diligence, or generic commercial demand diligence. GovCon work underwrites whether the public-sector contract engine produces durable, billable, novatable revenue through the hold period.

GovCon vs commercial contracts vs compliance vs CFIUS

WorkstreamPrimary questionTypical output
GovCon / federal contracting DDIs public-sector revenue durable, funded, and performable?Backlog bridge, recompete map, set-aside & clearance risk
Commercial contract / MSA DDAre private customer terms assignable and protective?CoC, TFC, MFC, term sheets
Compliance program DDDo internal programs detect and prevent violations?Program maturity, monitoring, culture
Regulatory / license DDWhich permits/licenses allow the business to operate?License inventory, enforcement exposure
CFIUS / foreign investment DDDoes foreign ownership trigger national-security review?Jurisdiction, mitigation, divest risk

Six pillars of government contracting diligence

1. Backlog quality: funded, options, ceilings & burn

Bridge total “backlog” into funded remaining value, unfunded options, IDIQ ceilings, expected task orders, and period of performance. Map burn rate vs staffing capacity. Flag double-counting across vehicles and optimistic option exercise. Separate booked funded work from capture fantasy. Align with financial diligence, quality of earnings, and working-capital diligence (billing cycles, retainage, unbilled AR).

2. Customer, agency & program concentration

Revenue and contribution by agency, buying command, program office, and prime vs sub position. Single-program or single-agency dependence can look like sticky revenue until a budget cut, recompete loss, or organizational realignment. Test whether relationships are institutional or key-person mediated. Connect to customer quality diligence and management diligence.

3. Contract-type mix & economic risk

Mix of firm-fixed-price, T&M/labor-hour, cost-plus (CPFF/CPIF/CPAF), and hybrid vehicles; fixed-price risk on labor inflation and scope creep; cost-type risk on fee structure and allowable cost; IDIQ/multiple-award competition dynamics. Model margin by contract type, not only company average. Hand formal QoE bridges to QoE and leverage capacity to LBO diligence.

4. Recompete calendar, win rates & past performance

Recompete and option decision dates for material contracts; historical win rates on new vs recompete; CPARS/past-performance package quality; protest history (as protester or subject); bridge vs cliff revenue cases. Incumbency is not a free cash-flow guarantee. Align with GTM / capture diligence for pipeline quality and competitive diligence for rival set.

5. Set-asides, size standards & ownership eligibility

Map which revenue and pipeline opportunities require small-business, 8(a), SDVOSB, WOSB, HUBZone, or similar status; size-standard exposure after growth or affiliation with the buyer; graduation timelines; mentor-protege and joint-venture structures; novation and change-of-control effects. This is often the hidden deal-killer in lower-middle-market GovCon. Align with legal diligence and deal structure counsel — not a pure ops checkbox.

6. Compliance capacity: cyber, clearances, rates & supply chain

CMMC / DFARS cyber posture, facility clearances, cleared labor bench, ITAR/export touchpoints, DCAA-cognizant rates and accounting system adequacy, CAS exposure where relevant, OCI (organizational conflict of interest) flags, flow-downs to subs, and supply-chain security. Gaps block performance and capture, not just “compliance scores.” Connect to cyber diligence, compliance program, export-control diligence where aliased, supply-chain diligence, and people diligence for cleared headcount.

Cost reality: specialist GovCon modules — full contract abstracts, rate and DCAA history, data-rights analysis, capture strategy, and clearance/cyber remediation plans — often run $30K–$120K+. A structured public first-pass pack is $49 (or $39.20 with code DI20-WELCOME) — useful for backlog questions, recompete heat maps, set-aside risk, open-question lists, and data-room prioritization, not a substitute for counsel-led novation work, full rate audits, or CPARS package reconstruction.
Order first-pass PDF → View sample report

Stage sequencing (screen to IC)

StageGovCon focusDeal-team action
Teaser / CIMBacklog, government stickiness, growth narrativeFlag funded vs ceiling; set-aside dependence
Desk diligenceAgency mix, top contracts, recompete dates, status claimsRed/amber/green; contract hotspot list
Deep contract / complianceAbstracts, CPARS, rates, cyber/clearance, novation pathBacklog bridge; eligibility & remediation map
IC / modelCases for recompete, set-aside loss, rate pressureBase / upside / downside with contract cliffs
Post-closeNovation, capture ownership, rate & cyber plan100-day GovCon plan with named owners

Red flags

SignalSeverityWhy it matters
Backlog mostly unfunded options / IDIQ ceilingDeal-KillerRevenue not contracted; model false certainty
Major revenue requires set-aside status buyer losesDeal-KillerEligibility cliff post-close
Material recompetes within 12–24 months with weak past performanceDeal-KillerHold-period cash flow cliff
Single program / agency >40–50% of revenue without lockHighBudget or relationship shock risk
Cost-type work with weak accounting system / rate riskHighAudit, withhold, and margin pressure
Clearance or CMMC gaps on core defense workHighCannot bid or perform as planned
Heavy sub reliance with thin prime control / flow-down gapsHighPerformance, margin, and compliance leakage
No contract abstracts or CPARS access pre-ICWatchModel and IC risk elevated

Cost & timeline (traditional vs first-pass)

ApproachTypical costTimelineBest use
Full GovCon specialist module (contracts, rates, capture)$30K–$120K+4–12 weeksDefense primes/subs, complex multi-vehicle portfolios
Targeted contract sample + compliance deep-dive$15K–$50K2–6 weeksFocused civilian agency portfolio, cleaner books
Public first-pass GovCon pack$49Minutes to hoursTriage before specialist spend / IC framing

50-point government contracting diligence checklist

  • Top 20 contracts by LTM revenue and remaining funded value
  • Funded vs unfunded vs ceiling backlog bridge
  • Period of performance and option exercise history
  • Contract-type mix (FFP / T&M / cost-plus / hybrid)
  • Prime vs sub revenue split and major primes used
  • Agency, command, and program concentration
  • NAICS / PSC mix and size-standard exposure
  • Set-aside and socioeconomic status on each material vehicle
  • Graduation, affiliation, and post-close eligibility analysis
  • Recompete calendar for next 36 months
  • Historical win rates: new business vs recompete
  • CPARS / past-performance package quality and gaps
  • Protest history (as protester and as awardee subject)
  • Key personnel clauses and retention risk
  • Novation / change-of-control path and agency experience
  • Facility clearance level and status
  • Cleared headcount vs cleared labor demand
  • CMMC / DFARS 252.204-7012 cyber posture
  • ITAR / export-control touchpoints on programs
  • Accounting system adequacy and DCAA history
  • Provisional billing rates and final rate risk
  • CAS coverage where applicable
  • Indirect rate trends (overhead, G&A, fringe)
  • Unbilled AR, retainage, and invoice rejection rates
  • OCI policies and actual conflict flags
  • Subcontractor concentration and flow-down compliance
  • Teaming agreements and JV / mentor-protege structures
  • Data rights / IP assertions on key deliverables
  • Service Contract Act / wage determination exposure
  • False Claims Act / investigation history signals
  • Suspension / debarment screening for entity and principals
  • State / local / grant revenue quality if material
  • GSA schedule / GWAC vehicle health and sales
  • Capture pipeline quality vs marketing list inflation
  • BD / capture headcount capacity vs growth plan
  • Labor category mapping and rate card competitiveness
  • Staffing utilization and bench cost on T&M work
  • Fixed-price delivery risk and change-order history
  • Customer satisfaction beyond formal CPARS
  • Key-person dependence for agency relationships
  • Insurance, bonding, and facility requirements
  • Physical security and SCIF / controlled space needs
  • Supply-chain security and critical suppliers
  • Post-close 100-day novation and capture plan ownership
  • Integration impact on rates, systems, and clearances
  • Synergy claims that ignore set-aside or OCI limits
  • Leverage model sensitivity to recompete loss cases
  • Counsel workstream for FAR novation package readiness
  • Alignment of growth thesis with realistic vehicle access
  • IC materials: contract cliff cases and eligibility map

How deal teams use a first-pass pack

Use a first-pass government contracting pack to structure early questions, pressure-test CIM backlog language, build a recompete and set-aside heat map, and prioritize data-room asks before specialist counsel and rate experts engage. Pair it with financial, QoE, customer, compliance, cyber, and LBO workstreams. It is an input to IC framing — not a full contract abstract set, DCAA file, or novation opinion.

Underwrite the contract engine before you underwrite the growth case

⇧ Already delivered: Tesla (TSLA) · Alphabet (GOOGL) · Palantir (PLTR) — real orders, real SEC data, every claim source-cited.

Get a structured first-pass diligence pack — useful input for GovCon thesis tests, backlog and recompete questions, eligibility risk, and IC prep, not a full specialist government contracts study.

Order report $39.20 → Free brief Sample PDF