GAO’s DOE Review Shows Why Contractor Self-Oversight Needs Measurable Contract Standards
Government agencies increasingly rely on contractors not merely to perform work, but also to operate systems that identify, evaluate, and correct their own performance deficiencies. A new GAO report illustrates the difficulty of that model when neither the contractor nor the Government has a sufficiently clear definition of what effective self-oversight actually means.
On August 26, 2026, GAO released DOE Contracting: Risk-Informed Oversight and Clearer Expectations for Assurance Systems Would Improve Accountability. The report, issued under the direction of Nathan Anderson, Director of GAO’s Natural Resources and Environment team, examined contractor assurance systems used in the Department of Energy’s Office of Environmental Management.
These systems matter because DOE relies heavily on contractors to perform nuclear cleanup and environmental remediation. Contractor assurance systems are intended to allow contractors to monitor their own performance, identify problems, assess risk, and prevent recurrence, while providing DOE with information it can use to tailor government oversight.
GAO found a structural problem: DOE had not defined what an “effective” contractor assurance system means or established specific measurable criteria for making that determination.
The resulting inconsistency was striking. Hanford and Idaho field offices classified their contractor assurance systems as effective even though neither office had a formal definition or defined evaluation criteria. Los Alamos made no effectiveness determination. GAO also identified recurring performance concerns, including deficient issue closure and documentation, operational events creating radiological risk, and deficiencies in identifying significant problems. At Los Alamos, a breakdown in training and qualification contributed to a stop-work order and a 90-day delay in cleanup activity.
The contractor-facing lesson reaches well beyond DOE.
Performance-based oversight works only when the parties understand the performance standard. Telling a contractor to establish a robust compliance, safety, quality, or assurance system without defining measurable outcomes creates ambiguity for both sides. The contractor may believe its system is functioning adequately while the agency applies an unstated or evolving standard.
GAO therefore recommended not only that DOE define effectiveness and establish evaluation criteria, but that DOE use appropriate contract mechanisms to communicate contractor performance expectations and consequences for failing to satisfy them. DOE concurred.
That recommendation is particularly important.
Contractors should not view internal assurance systems merely as compliance infrastructure existing outside the contract. When an agency depends on those systems to reduce direct oversight, the system itself can become part of contractual performance.
That means contractors should identify measurable indicators, preserve evidence of internal reviews, track corrective actions to closure, examine recurrence, establish escalation thresholds, and ensure that management receives reliable information about systemic failures.
Self-governance is valuable precisely because it can identify problems before the customer does. But it works only when expectations are clear and the evidence is credible.
Recommended FedContractPros Product: Ethics & Compliance Builder — useful for structuring internal responsibility, monitoring, corrective-action, escalation, documentation, and management-review systems that translate general compliance obligations into repeatable operational controls.
Disclaimer:
This article is provided for general informational and educational purposes only and does not constitute legal, safety, environmental, nuclear-regulatory, or contract-management advice. Contractor assurance requirements vary by agency, contract, facility, and applicable DOE directives and regulations.