A CSAL notification does not give a federal contractor much runway. By the time the letter arrives, the Office of Federal Contract Compliance Programs (OFCCP) has already selected the establishment for a compliance evaluation, and the paperwork on the other side of that letter assumes recordkeeping habits that most HR teams built for hiring, not for defending hiring.
Despite Executive Order 11246 being rescinded in January 2025, and changes to Section 503 disability self-disclosure requirement, contractors still need to have outreach documentation ready relating to veterans and people with disabilities. If your contracts cross the $200,000 threshold under VEVRAA or $20,000 under Section 503, those obligations apply to you right now, letter or no letter.
What triggers a compliance review
OFCCP selects establishments for evaluation through a combination of the Corporate Scheduling Announcement List (CSAL) and targeted enforcement activity. Federal contractors do not get to choose whether they are ready. They only get to choose whether they were ready before the letter showed up.
Q: What is a CSAL notification?
A: A Corporate Scheduling Announcement List (CSAL) is an announcement to federal contractors who have been selected for the next round of audits. It is followed by the formal scheduling letter to each contractor on the list signalling that their audit will begin. Contractors named on a CSAL should treat the notice as the start of the clock, not a formality to file away.
The three gaps that show up most often
Most contractors are not missing compliance entirely. They are missing consistency, and that is what a review tests.
Recordkeeping gaps. VEVRAA and Section 503 both carry recordkeeping requirements tied to veteran and IWD (individuals with disabilities) outreach efforts, not just outreach intent. A file that shows outreach happened once, inconsistently, or without documentation reads the same to a reviewer as outreach that never happened.
Job posting and distribution gaps. Federal contractor obligations include specific state job bank and outreach posting requirements. Manual posting across a patchwork of boards makes it hard to prove, after the fact, that every requisition reached the required channels on the required timeline.
Documentation-to-workflow gaps. The contractors who most efficiently navigate a review are the ones whose compliance documentation was generated as a byproduct of normal hiring activity, not assembled after the letter arrived. Retrofitting a year of postings into a compliance file under a deadline is where most of the stress in this process comes from.
Q: Does rescinding Executive Order 11246 change VEVRAA or Section 503 obligations?
A: No. EO 11246 governed a separate set of federal contractor obligations on the basis of race and sex, and it was rescinded in January 2025. VEVRAA (veteran outreach) and Section 503 (disability outreach) are separate statutes with their own enforcement, and both remain fully in force for covered contractors in 2026.
What readiness means
Readiness is not a binder. It is being able to answer, without a scramble, whether your veteran and IWD outreach efforts are documented consistently across every requisition, whether your state job bank postings are complete and timestamped, and whether your current process would hold up if the establishment named on your next CSAL were the one you are sitting in today.
Q: Who is required to comply with VEVRAA and Section 503?
A: Federal contractors and subcontractors are covered once their contracts meet the applicable dollar thresholds: $200,000 under VEVRAA and $20,000 under Section 503. Coverage is based on contract value, not company size, so a smaller contractor with a single qualifying contract carries the same outreach and recordkeeping obligations as a much larger one.
That is the gap JobTarget's Compliance Readiness Checklist is built to close: a self-assessment that walks a contractor through the VEVRAA and Section 503 requirements that get checked, before a CSAL notice makes it urgent.
Q: What does JobTarget's compliance functionality cover?
A: JobTarget embeds compliance documentation into the job distribution workflow rather than treating it as a separate step. The Compliance Suite automatically posts jobs to required state job banks and to sites reaching veterans and people with disabilities, then captures and archives the documentation for three years. The record exists because the job was posted, not because someone remembered to build it separately. JobTarget's breakdown of how automated compliance keeps federal contractors evaluation ready covers what the reporting produces.
Download the Compliance Readiness Checklist to walk through where your current process stands against VEVRAA and Section 503 before the next CSAL cycle, not after.
