CAIQ: the cloud questionnaire worth filling in before anyone asks
The CAIQ is a spreadsheet of a few hundred yes-or-no questions about your cloud service. Completing it once turns most incoming security questionnaires into a file attachment.
The wage determination is part of the contract, and its rates are an input to the estimate. Contractors who read it after winning discover the margin was never there.
A Davis-Bacon wage determination lists the minimum wage rates and fringe benefit amounts that must be paid to each classification of labourer and mechanic on a covered federal construction contract, for a given county and type of construction. It is issued by the Department of Labor, it is incorporated into the contract, and it is the document against which every hour of your certified payroll is checked.
The Davis-Bacon Act applies to federal contracts for construction, alteration or repair above a modest threshold that has stood since the 1930s, and related Acts extend the same requirement to a wide range of federally assisted work — which is why a contractor with no federal contracts can still land inside the regime through a grant-funded project for a local authority.
When the work requires a classification that does not appear in the determination, the contractor cannot simply pick the closest rate. A conformance request goes to the contracting officer and on to the Department of Labor, proposing a classification and a rate bearing a reasonable relationship to those in the determination, with the agreement of the affected workers. It takes time, which is why it is identified during bid preparation rather than in week three — and any conformed rate applies retroactively to the first hour of that work, so guessing low does not save money.
Post the applicable wage determination and the poster at the site where workers can see them. It is a requirement in its own right, and an unposted determination is the first easy finding of any site visit.
The most expensive mistakes in this area are made before the contract is signed. A bid built on the crew’s ordinary rates, on a project where the determination requires a higher classification rate plus fringe, produces a job that loses money in a way no site management can recover. Pull the determination for the county and construction type at bid stage, map your intended crew onto its classifications, and price the fringe explicitly rather than assuming existing benefits cover it.
What makes the weekly reporting fast is a table built once per project: classification, base rate, fringe, the workers assigned to each, and the conformance requests outstanding. Ettex Sheets holds that mapping with the totals the payroll is checked against, Ettex Records keeps the determination, its modification number and the posting evidence per project, and the weekly reporting it feeds is covered in certified payroll.
To be clear: this is a spreadsheet and a file, not legal or compliance advice. Determinations, thresholds, conformance procedure and the reach of the related Acts are set by regulation and change; the contracting agency and your labour counsel are the authorities for a specific project.
A Department of Labor listing of minimum base rates and fringe amounts per worker classification for a given county and construction type, incorporated into covered federal construction contracts.
Building, residential, heavy or highway, depending on the character of the project. The same county can have four determinations with different rates.
A conformance request is submitted through the contracting officer to the Department of Labor before the work is performed. Any approved rate applies retroactively to the first hour.
Generally the determination incorporated at award is the one that binds for that contract. Confirm with the contracting agency rather than assuming.
The CAIQ is a spreadsheet of a few hundred yes-or-no questions about your cloud service. Completing it once turns most incoming security questionnaires into a file attachment.
An FMEA that ends in a scored table has produced nothing. The output is the list of things you changed, and most teams stop one step before it.
Collecting certificates is easy. The failure is always the same one: a policy expires in month seven of a two-year contract and nobody finds out until there is a claim.