How-toDeltek CostpointAudit / Compliance

Deltek Costpoint Audit Trail Report for DCAA Readiness

Question
deltek costpoint audit trail report

Also searched as

  • costpoint audit trail dcaa
  • costpoint who changed record
  • costpoint audit log report

Short answer

Costpoint can record who changed which data and when, but audit trail coverage is something an administrator configures per table and field, so the first step is to confirm what is being tracked. Once enabled, you report on changes through the audit or change-tracking reporting in your release, and pair it with transaction history, timesheet change records and security reports for a complete DCAA story.

Applies to: Deltek Costpoint 7.x and 8.x; audit and change-tracking options and report names vary by release and configuration

Getting an audit trail you can show an auditor

  1. 1List the records auditors care about: timesheets and corrections, funding and contract values, rates, vendor and employee master data, journal entries, and security changes.
  2. 2With your administrator, confirm which of these have audit tracking switched on and for which fields.
  3. 3Enable tracking for the gaps in non-production first, check volume and performance, then enable in production.
  4. 4Run the audit trail or change-tracking report for a test change and confirm it shows user, date and time, old value and new value.
  5. 5Combine with timesheet audit information, transaction history and user security reports as relevant.
  6. 6Set a retention rule so audit records are kept as long as your policy and contract require.
  7. 7Restrict who can change tracking settings or purge audit data, and review that access.
  8. 8Document the procedure so you can produce the evidence quickly during an audit.

What auditors actually want to see

A DCAA-minded reviewer wants evidence that labor and cost records cannot be changed without leaving a trace. For timesheets that means original entry, each correction with reason, who made it and who approved it. For master data it means who altered a rate, vendor bank detail or funding amount.

A report alone is not a control. The control is the combination: tracking enabled, access restricted, review performed, and evidence retained. Be ready to show an example of a changed record flowing from change to report, because that demonstrates the system rather than a policy document.

Configuration, volume and retention

Tracking every field on every table is rarely sensible. It increases storage and slows heavy processes. Choose tables and fields with compliance value, and review the volume after a month. Archive old audit data on a schedule rather than letting it grow unmanaged.

Retention should follow your contract and records policy, not storage convenience. Purging audit data casually defeats its purpose, so restrict who can do it and log that action too.

Reporting patterns that save time

Prepare saved report parameters for the common requests: all changes to a project's funding, all timesheet corrections for a period, all changes by a given user, all changes to vendor bank data. Auditors tend to ask the same questions, and having the answer ready is the best signal of a mature control environment.

Combine audit output with the incurred cost submission process, since the same records support rate and cost reviews. See the ICS preparation page for how those come together.

Try it here, free

Deltek Costpoint Private AI Layer Blueprint Generator

Open full tool

Generate an architecture plan for a private AI assistant on on-prem Deltek Costpoint: SQL replica, web services and import interfaces, organization and project permissions, local GPU model and audit.

Common pitfalls

  • !Assuming audit tracking is on everywhere when only a few tables are covered.
  • !Enabling tracking in production without testing the performance effect.
  • !Letting users with broad admin access change or purge audit data.
  • !No retention rule, so evidence disappears or storage balloons.
  • !Producing a report without being able to show the control around it.

How an ERP-grounded AI assistant handles this

An assistant grounded in Costpoint can answer audit questions in plain language: show every funding change on this project this year, or list timesheet corrections by one supervisor. ERPray is read-only, shows the query behind the answer and respects roles. Because audit data is sensitive, Netray deployments run on your own infrastructure, with no copy leaving your boundary. Formal audit submissions still come from your controlled reports.

See ERPray

Frequently asked questions

Does Costpoint have an audit trail?

Yes, Costpoint supports tracking of changes, but what is tracked depends on configuration. An administrator enables auditing for chosen tables and fields. Confirm your coverage and test that a changed record produces user, time, old value and new value.

What audit evidence does DCAA expect for timesheets?

The original entry, every correction with a reason, who made it and who approved it, retained for the required period. Costpoint's timesheet audit information and change tracking support this, but your procedures and access controls must complete the picture.

Can audit trail data be deleted?

It depends on who has access, which is why you should restrict purge and tracking-setting permissions and log their use. Retain audit data per your contract and records policy so evidence is available when requested.

Does turning on auditing slow Costpoint down?

It can, mainly when tracking many fields on high-volume tables. Enable it selectively for compliance-relevant data, test in non-production, and monitor storage and processing times after enabling it in production.

Related

How-to

How to Prepare an Incurred Cost Submission From Costpoint

An incurred cost submission is built from closed-year, reconciled Costpoint data: final direct cost by contract, pool and base amounts, and final indirect rates. Close the fiscal year, freeze the cost data, reconcile pools and bases to the general ledger, then map the results into the government's Incurred Cost Electronic (ICE) model schedules before the deadline.

How-to

How to Run a Report in Deltek Costpoint (Project Status, Expense, SOC)

In Costpoint you run a report from the module's reports or report-type screen: open it, enter the parameters such as project, period and organisation, then preview or submit it to the process queue and open the output when it finishes. Project status and expense reports follow the same pattern. A SOC report is different: it is Deltek's independent assurance report, not something you run inside Costpoint.

How-to

How to Process a Contract Modification in Deltek Costpoint

A contract modification in Costpoint is a controlled change to the contract and project records: funded amount, contract value or ceiling, period of performance and sometimes billing terms. Record it against the correct project and contract with the effective date, update funding before charges exceed the old limit, keep the modification document as evidence, and verify billing limits afterward.

Error fix

Deltek Costpoint Not Working: Outage, Login and Mobile App Troubleshooting

First decide if it is an outage or a local problem: check Deltek's cloud status page if you are hosted by Deltek, or your own servers if on-premises, then test another user and another browser. Most Costpoint issues are login or session problems, browser or network changes, or a mobile app pointed at the wrong server. The mobile app pairs with a QR code or server URL generated by your administrator.

How-to

How to Edit Favorites, Change Your Password and Delete Lines in Deltek Costpoint

In Costpoint you manage favorites from the navigation pane (add a screen to Favorites, then reorder or remove it there), change your password from the login screen or your user options when Costpoint itself authenticates you, and delete lines by selecting the row in the grid, using the delete-record or delete-line toolbar action, and saving. Exact labels shift slightly between Costpoint 7 and 8, and passwords are managed in your identity provider when SSO is on.

How-to

What Is the Latest Version of Deltek Costpoint?

Costpoint 8.x is the current generation of the web product, delivered as a series of releases such as 8.0 and 8.1 with regular updates, and Deltek publishes the authoritative current number on its support portal. The core bundle is the base licensed set of modules, and content management integration is usually done through document links or connectors to a separate repository such as SharePoint.

AI for ERP

AI for Government Contractor ERP Under DCAA Scrutiny

AI for government contractor ERP under DCAA scrutiny: draft indirect rate variance narratives, flag unallowable costs, and build audit trails, run on infrastructure you control.

AI for ERP

AI for Deltek Costpoint in government contract accounting

AI on Deltek Costpoint for timesheets, indirect rates, and incurred cost, grounded on real data and deployed on-prem to keep DCAA-relevant data in house.

Stuck on Deltek Costpoint?

Talk to engineers who work inside Deltek Costpoint every week, and who build private AI that answers these questions from your own ERP data.

Talk to an ERP engineerBrowse ERP Help
All ERP Help articles

Keep exploring

Free tools

ERP fixes and how-tos

Guides

AI on your ERP

Integrations

Software

TermsAudit Trail