When the Auditors Leave: DoD Cuts and Fraud Risk

By Chuck Gallagher — Business Ethics Keynote Speaker and Trainer

TL;DR: Chuck Gallagher, business ethics keynote speaker, examines a May 2026 GAO report showing the Department of Defense shed 78,375 civilian employees in twelve months — including contract auditors it never fought to keep — and argues that cutting the people who check the work is an ethics decision wearing a budget decision’s clothes.

In August 2025, somebody at the Defense Contract Audit Agency sat down and wrote a request to hire forty auditors.

Forty. That was the ask.

It wasn’t the first one. Between March and August of that year the agency asked again, and again, because the Department of Defense had frozen civilian hiring and never put defense contract auditors on the list of jobs that got an automatic pass. So DCAA made the case one position at a time. Position by position. In its August request it spelled out what disrupted contract audits would buy: increased risk of noncompliance, financial losses, operational inefficiencies, strained relationships, increased workload.

Read that list again. That’s an audit agency, not a labor union, putting in writing what its own department was purchasing.

Why Does Cutting Oversight Look Like a Budget Decision and Behave Like an Ethics Decision?

The Government Accountability Office published the full accounting on May 29, 2026. DoD’s civilian workforce fell from 793,155 people on January 1, 2025, to 714,780 on January 1, 2026. That’s 78,375 gone in twelve months. About ten percent. The department approved roughly 53,200 deferred resignation applications and recorded 6,650 early retirements in a single year — against 2,030 for the entire stretch from 2016 through 2024, a comparison that ought to stop you cold. It hired about 33,781 civilians. The historical average would have put roughly 59,456 more people through the door.

As a business ethics keynote speaker, I’ve spent two decades in front of rooms drawing the same triangle. Pressure. Rationalization. Opportunity. Fraud needs all three legs, and most executives only ever think about the first two.

Here’s the part folks skip. You don’t control pressure. Somebody’s spouse gets sick. Somebody’s underwater on a house. Somebody’s got a number to hit by Friday and a mortgage that doesn’t care what the number is. You can’t legislate that away. Rationalization? You don’t control that either. The human mind is a defense attorney working around the clock for free, and it will find the argument. Trust me on that one. I know that voice better than I’d care to admit.

Opportunity is the leg you control. It’s the only one you get a vote on. Thin out the people whose entire job is looking, and you manufacture more of it. That’s the whole mechanism, and it isn’t complicated. No trust fund for me, no chance of theft.

Let me be clear. Nobody in that building decided to enable fraud. A budget decision got made, and reasonable people made it for reasons they could defend out loud. Fair enough. But every choice has a consequence, and the consequence of this one won’t land on this year’s ledger. It’ll show up in a False Claims Act complaint four years out, long after everybody who made the call has moved on to something else.

What Happens When the Rule Meant to Protect Critical Work Punishes It Instead?

Here’s the detail from the GAO report I can’t shake.

DoD’s own deferred resignation program let components request exemptions — keep this person, we need them. But the Secretary of Defense directed that exemptions be rare. Rare. So DCAA, which had won exemptions for its auditors under the earlier government-wide program, didn’t request them under the DoD program at all. Its officials told GAO why: auditors make up such a large share of that agency’s workforce that asking to keep them could never qualify as rare.

Stop. You may want to read that sentence again. The function was too central to protect. A rule written to prevent indiscriminate cuts made the most concentrated capability in the building the hardest thing to defend. Nobody designed it that way. It just happened, which is usually how it goes.

Was Anybody Measuring What This Cost?

Federal law isn’t vague here. Section 129a(b) of title 10 says the Secretary of Defense may not reduce civilian workforce levels without analyzing the impact on seven things: workload, military force structure, lethality, readiness, operational effectiveness, stress on the military force, and fully burdened costs.

GAO examined fourteen components. Eleven said they did the analysis. Exactly one — the Missile Defense Agency — produced documentation covering all seven elements. One out of fourteen. On lethality and on stress on the force, only two components could show anything at all. Navy officials told GAO they believed their documentation existed. They just couldn’t produce it. Air Force officials explained that the analysis is spread across many offices, some of it living in email, with no formal document anywhere. I’ve heard a version of that sentence in a conference room more than once. It never ages well.

DoD didn’t fight the finding. It concurred.

What Does Any of This Have to Do With Your Company?

Now, the way I see it, this is your story with a bigger budget.

Every organization I speak to has a version of it. The internal audit function that got folded into finance during a reorganization. The compliance officer who now reports to the executive she’s supposed to be checking. The controls testing that went from monthly to quarterly because the team lost two people and nobody backfilled. Each decision was defensible standing alone, and each one left a little more room in the same triangle. As a business ethics keynote speaker, I’ve sat through enough post-mortems to know that nobody ever remembers the meeting where it started. Usually because there wasn’t one.

The second lesson is quieter and it costs more. Eleven components said they did the work. One could prove it. The gap between doing the analysis and documenting the analysis is exactly where organizations find out they were never as protected as they believed. When the subpoena arrives, “we considered it” is a memory. Memories don’t hold up under oath.

You cut the watchers, you widen the door. Call that politics if you want. I call it arithmetic.

Frequently Asked Questions

What did the 2026 GAO report find about the Defense Department’s civilian workforce cuts?

GAO published on May 29, 2026. The headline number: DoD’s civilian workforce fell by 78,375 employees between January 1, 2025, and January 1, 2026 — about 9.9 percent. The department approved roughly 53,200 deferred resignation applications and hired about 59,456 fewer civilians than its historical average would predict. GAO also found DoD didn’t consistently conduct or document the impact analysis federal law requires before reductions like these, and recommended the department collect and share lessons learned. DoD concurred.

How do workforce reductions increase an organization’s fraud risk?

Fraud needs three things at once: pressure, rationalization, and opportunity. Leaders have almost no control over the first two. Personal financial strain and self-justification are human constants, and you can’t policy them away. Opportunity is the only leg an organization actually controls, and it gets controlled through detection. Audit. Review. Somebody looking. Cut those and the risk goes up. It’s that plain.

What is Section 129a(b) and what does it require?

It’s a provision of title 10 of the U.S. Code. It bars the Secretary of Defense from reducing programmed civilian workforce levels without an appropriate analysis of the impact on seven elements: workload, military force structure, lethality, readiness, operational effectiveness, stress on the military force, and fully burdened costs. GAO reviewed fourteen DoD components. One of them, the Missile Defense Agency, could produce documentation addressing all seven.

Why couldn’t the Defense Contract Audit Agency protect its own auditors?

Because of a rule. DoD’s deferred resignation program allowed components to request exemptions, but the Secretary directed that exemptions be rare. DCAA officials told GAO that auditors make up so large a share of the agency’s workforce that an exemption request for them could not qualify as rare — so the agency didn’t request one under that program. There’s a hiring side to this too. DoD issued no categorical hiring-freeze exemption for defense contract auditors, which left DCAA asking position by position between March and August 2025.

What should private companies take from a federal workforce report?

The mechanism translates directly. Most companies thin oversight the same way — folding internal audit into finance, having compliance report to the person it reviews, moving controls testing from monthly to quarterly after attrition. Every step defensible in isolation, and the effect piles up anyway. Then there’s the documentation lesson. Eleven DoD components said they performed the required analysis, and one could prove it. In litigation, an undocumented analysis and no analysis look identical.

A Closing Thought

Here’s what I know from the other side of a bad decision: the door was already open before anybody walked through it. Somebody widened it, quietly, for a reason that made sense at the time. If your organization is heading into a lean year — and most are — you’ll do the math on what the oversight costs. Do the other math too. Work out what moves into the space where the oversight used to be. I’ve been in that space. I know what moves in. I bring that conversation to boards, executive teams, and conference stages, and I don’t bring it as theory. It’s the arithmetic of consequence, and I’d welcome the chance to bring it to yours. I speak on business ethics, fraud risk, and the choices that look small until they aren’t. You can reach me and see available programs at ChuckGallagher.com.

Five Questions for Reflection

1. Which oversight or review function in your organization has quietly gotten smaller in the last three years — and who made that call?

2. If a regulator asked you to document the risk analysis behind your last staffing reduction, what could you actually produce?

3. Where in your structure does someone report to the person they are responsible for checking?

4. DoD’s rule that exemptions be “rare” made its most concentrated capability the hardest to defend. What rule in your company punishes the function it was meant to protect?

5. If the consequence of this year’s cost decision arrives in 2030, who will be in the room to answer for it — and does that change how you decide today?

Leave a Reply