The GovCon CFO Checklist: 18 Months Before Your Sale Process

The GovCon founders who get the best outcomes in a sale process are almost never the ones who were the best at their core business. They are the ones who were the most prepared. And preparation in GovCon M&A means something very specific: the finance function is ready before the banker is engaged, not before the process closes.

The 18-month window matters because most of the work that protects enterprise value in a GovCon transaction requires time — not money, not effort, but calendar months. You cannot file three outstanding ICS submissions in a week. You cannot stabilize an indirect rate structure under diligence pressure and have the buyer accept it at face value. You cannot migrate to a DCAA-compliant accounting platform during the Q&E process without creating exactly the kind of noise that gives buyers a lever to retrade.

What follows is the checklist we use with GovCon companies preparing for a transaction. It is organized as a monthly cadence starting 18 months out. Not every item applies to every company, but the sequence is deliberate — earlier work unlocks later work, and skipping items creates compounding risk downstream.

Months 18–15: Foundation

Accounting system assessment. The first question is whether the accounting system is DCAA-adequate. Commission or conduct an SF1408 readiness assessment — not a self-assessment, but a formal review by someone who knows the standard and can identify the gaps a DCAA auditor would find. If the system is non-compliant, the remediation or migration timeline starts now. Platform migration to Costpoint, Unanet, or JAMIS takes 6 to 12 months minimum.

ICS filing status audit. Pull the ICS submission history for every applicable year. For each year that has not been filed, filed but not audited, or audited with open findings, document the status and model the exposure. Create a remediation plan that sequences filings in a way that minimizes audit risk — generally, older years first, then working forward. Engage a GovCon-experienced accounting firm if any years require significant reconstruction.

Indirect rate structure documentation. Write the pool definitions. Document the allocation bases. Produce a FAR 31.205 unallowable cost policy. Create the three-year rate variance schedule. This documentation does not need to be perfect at month 18 — it needs to exist. The process of writing it will surface inconsistencies in how the rates have actually been applied, which creates time to remediate before diligence.

Timekeeping system review. Test the company's timekeeping practice against DCAA's ICR 3.100 and 3.300 criteria. Identify batch entry, missing CLIN-level charging, supervisory approval gaps, and correction audit trail deficiencies. Every gap identified now is one that does not surface in diligence. Every gap that surfaces in diligence is a potential FCA exposure conversation.

Months 15–12: Financial infrastructure

GAAP conversion and historical restatement. If the books are on cash basis or a hybrid accrual, the conversion to full GAAP starts here. Three years of GAAP-compliant historical financials are the minimum for a credible sale process — and the restatement often takes longer than expected when unbilled receivables, deferred revenue, and WIP calculations are done correctly for the first time. A quality of earnings (QoE) team will test the methodology, not just accept the restated numbers.

EBITDA bridge construction. Build the normalized EBITDA bridge with every planned add-back documented and supported. Owner compensation add-backs, one-time expenses, M&A costs, and non-recurring items all need source documentation. Each add-back that cannot be supported is worth the transaction multiple — at 9x, a $500K undocumented add-back costs $4.5M in enterprise value. The bridge should be defensible by the CFO in a conversation with a sophisticated buyer's QoE team.

Revenue recognition under ASC 606. GovCon revenue recognition under ASC 606 is complex. Cost-plus contracts, time-and-materials contracts, and firm-fixed-price contracts each have different performance obligation structures. Unbilled receivables and WIP need to be recognized as revenue as work is performed, not as invoices are submitted. A company that has been on a cash-basis or billing-basis revenue recognition model will have revenue that differs materially from what ASC 606 requires — and that delta will be a QoE finding.

Contract portfolio documentation. Map every contract: type (cost-plus, T&M, FFP), customer, CLIN structure, period of performance, funded and unfunded value, novation requirements under FAR 42.12, and recompete schedule. The concentration analysis — no single contract above 25% of trailing revenue as a target — needs to be calculated. The novation mapping needs to be done, customer agency by customer agency, because novation timelines vary significantly.

Months 12–9: Transaction readiness

NWC baseline construction. Build the rolling 12-month normalized net working capital analysis. Track DSO by customer and channel with root-cause analysis. Reconcile unbilled receivables monthly and document the conversion cycle. Map AR, unbilled, AP, and accrued payroll. Establish a defensible NWC target that reflects the business's actual working capital requirement — not a number engineered to minimize the NWC peg adjustment at closing.

Financial reporting package upgrade. Produce the reporting package a banker will use — monthly contract-level P&L with full margin detail, EBITDA bridge, backlog walk, and book-to-bill ratio. This is not the internal management reporting package. It is the package that communicates financial performance to a sophisticated institutional buyer who will scrutinize every number. Build it now and run it every month for 12 months before the process so it has a track record.

Backlog quality analysis. Distinguish funded backlog (contracts awarded with money on them) from unfunded backlog (contracts awarded but not yet funded) from pipeline (contracts expected to be awarded). Calculate recompete exposure — the percentage of revenue at risk in the next 18 months from contracts coming up for re-competition. Identify any single-award contracts where the loss of the incumbent position would have a material impact on revenue. This is the analysis a buyer uses to evaluate revenue quality.

Months 9–6: Banker readiness

Virtual data room architecture. Build the VDR structure before the banker engagement. Organize financials (by year, by type), contracts (with all modifications), compliance documentation (DCAA correspondence, ICS filings, audit reports), HR and benefits, IP and technology, and corporate records. A VDR that is organized and pre-populated signals operational discipline to a buyer. A VDR assembled under diligence pressure signals the opposite.

QoE pre-work. Produce the QoE supporting schedules proactively: revenue by contract, by customer, by period; margin analysis by contract type; NWC by component; rate reconciliation for the trailing three years. These are the schedules the QoE team will build regardless — producing them in advance allows the seller to control the narrative rather than respond to the buyer's model.

Management presentation preparation. The management presentation is the first substantive interaction between company leadership and potential buyers. GovCon-specific elements — DCAA relationship, indirect rate history, ICS status, contract portfolio analysis, recompete strategy — need to be presented by someone who understands them at a level that builds confidence, not skepticism. If the CFO has never presented a GovCon financial story to a PE buyer, practice sessions with someone who has are a worthwhile investment.

Months 6–0: Process

The 18 months of preparation culminate in a process that should feel controlled, not reactive. A data room that responds to requests in 72 hours. A management team that presents the financial story with confidence. An EBITDA bridge that holds up under QoE scrutiny. A rate structure that the buyer's team can validate rather than reconstruct. An ICS history that is current and clean.

The difference between a $135M outcome and a $165M outcome on a $15M EBITDA GovCon company is not the banker fee. It is not the market conditions. It is the degree to which the finance function was prepared to defend the stated multiple from the first management presentation to the day the wire clears.

The GovCon CFO Readiness Diagnostic tells you where you stand across each dimension of this checklist in 15 minutes. Sync-to-Sale is the structured program that closes the gaps the diagnostic surfaces. And if the question is whether you have the right finance leader in place to execute the 18-month plan, a GovCon fractional CFO with transaction experience is often the right answer — someone who has done this before, at a company like yours, and who knows what holds up and what doesn't. Reach Steve Radanovic directly if you want to start the conversation.