That’s 6 sales in 7 months. 29 all time. And the performance?

16.5%, 17.6%, and 17.8%, net annualized returns on sold works held longer than one year (See all 29 at Masterworks.com)

It’s not from stocks, private equity, or real estate… it’s from contemporary and post war art. Crazy, right?

With Masterworks, you don’t need to be a BILLIONAIRE to invest in multi-million dollar art anymore.

Historically, the segment overall has had attractive appreciation and low correlation to stocks.*

Masterworks targets works featuring legends like Banksy, Basquiat, and Picasso, identifying what they believe to have significant long-term appreciation potential, not just at the artist level but at the level of individual artworks.

As one of the largest players in the art market, with $1.3 billion invested over 500 artworks, they pass critical advantages through to their 70,000+ members to add art to their portfolios strategically.

Looking to diversify your investments in 2026?

Click here to skip the waitlist

^{*According to Masterworks data. Investing involves risk. Past performance is not indicative of future returns. See important Reg A disclosures at masterworks.com/cd.}

Hey, it's Michael.

The day you sign your first labor distribution report as controller, you own every compliance gap in the company.

Including the ones you didn't create. Including the ones nobody told you about. Including the ones the previous controller knew were there and didn't fix.

This is the part of the controller role nobody warns you about in advance.

The job isn't "oversee the accounting function." The job is "be personally accountable for every compliance representation the company makes" — to DCAA, to DCMA, to the contracting officer, to the prime, to the audit firm, to the bank, to the board.

If your timekeeping policy has a gap, you own it. If your indirect rate methodology is wrong, you own it. If your incurred cost submission has an error, you own it. If your unallowable cost screening missed a category, you own it.

That's not fearmongering. It's the actual scope of the role. And it's why the first 90 days as controller can't be an extension of whatever you were doing before. They have to be a structured discovery — before you sign anything that puts your name on it.

That's Phase 7.

Before the inventory, there's one conversation. Almost nobody has it.

You sit down with whoever you report to — usually the CEO or CFO — and you say: "I'm going to spend my first 90 days inventorying our compliance posture. I want your support to do that thoroughly before I sign anything as controller."

That's it. That's the conversation.

Here's what it does. It tells your boss you take the role seriously. It buys you 90 days of cover to find problems without owning them yet. And it sets the expectation that if you find issues, you'll raise them — not hide them.

Without that conversation, here's what happens instead. You walk in. The previous controller is gone. You sign the next compliance representation that crosses your desk — a labor distribution report, a rate certification, the incurred cost submission. And the moment you sign, you own everything in it, whether you knew about it or not.

With the 90-day conversation, you have explicit permission to inventory first. Find a gap, raise it. If it's fixable, fix it. If it needs disclosure, disclose it. But it's not your gap. Without that conversation, every gap becomes yours the moment you sign.

1. The timekeeping policy.

Is it written? Is it current? Has every employee signed it? Are floor checks documented, and when was the last one? If any answer is "no" or "I don't know," that's gap #1. Timekeeping is DCAA checklist item #1 for a reason.

2. The indirect rate methodology.

Where is it documented? When were the rates last recalculated? Are the cost pools consistent with the methodology? Does it align with your most recent ICS? If the methodology lives in someone's head, that's gap #2.

3. Unallowable cost screening.

Who identifies unallowable costs? What's the process? Is there documentation that screening actually happened? Are there GL accounts nobody has reviewed for allowability? FAR Part 31 unallowability is a top-five DCAA finding, and screening is usually informal.

4. The incurred cost submission cycle.

When was the last ICS filed? Are any years still pending audit? Any open findings from prior submissions? Has the methodology in your filed ICS drifted from what you're doing today? Mismatches between filed methodology and current practice are silent risk.

5. Contract-level profitability.

For every active contract: do you have a current bid-to-actual variance? Are any trending below 0% margin? Are there contracts where the original bid model is simply missing? Contracts running below water without documentation are a forecasting risk for the whole company.

6. The accounting system adequacy determination.

Is there a current DCAA letter on file confirming your accounting system is adequate? When was it issued? Has anything changed since — software, methodology, org structure — that would invalidate it? An expired or invalidated determination affects your eligibility to win cost-type work.

None of these are dramatic. All of them are the kind of gap that turns into a finding two years later — and the finding sticks to the controller who signed off, not the one who created the problem.

The controller seat sits in the middle of a path most people stall on because nobody draws the map:

Bookkeeper owns transactions, A/P, A/R, payroll. The gap to the next level is volume and accuracy.

Staff / senior accountant owns month-end close, indirect cost allocation, contract billing. The gap to the next level is compliance depth — indirect rate calculation, FAR Part 31 fluency, a DCAA-readiness mindset.

Assistant controller owns rate calculation, ICS prep, audit coordination, reporting accuracy. The gap to the next level is ownership — building and presenting monthly bid-to-actual variance, not just producing it.

Controller owns every compliance representation, financial integrity, audit results, rate strategy, and the team. The gap to the next level is strategy — FP&A, bid-no-bid analysis, capacity modeling.

CFO owns capital structure, banking, board reporting, M&A readiness, and the company growth model. (Reality check: most GovCons under $50M run with a controller acting as CFO. The title comes with scale — that's next week's edition.)

Most people stall at one specific gap. The fastest way up is to identify yours and start doing the next level's work before you have the title.

1. You'd run the 6-item inventory before signing anything — even if you've been in the seat for years.

If you became controller without doing this, do it next quarter. The gaps don't expire just because you've been signing.

2. You've had the 90-day conversation with your boss — or you wish you had.

The cover it buys is real, and it's available the day you ask for it.

3. You can name which gaps are yours and which you inherited.

Knowing the difference is the difference between managing risk and absorbing it silently.

1. Have the 90-day conversation — even if you're not new. Frame the inventory as protecting the company, and get explicit support to do it thoroughly.

2. Run the 6-item inventory and document each finding in a short memo to file: what you found, the risk, and the recommended action.

3. Rank the gaps by risk — compliance exposure first, then dollar impact. Surface the top three to whoever you report to.

4. Build the remediation and disclosure plan. For each gap: fix, monitor, or disclose. Put dates on them.

A company can't grow past its compliance posture. The controller is the person who either keeps that posture clean or signs their name to a problem that detonates two years later — at exactly the moment the company is trying to win bigger work, pass a system audit, or sell.

The first 90 days set the tone for everything after. Done as a structured discovery, they protect the controller and the company at the same time. Done as "just keep the books balanced," they quietly transfer every inherited risk onto one person's signature.

That's Phase 7. Do the inventory. Document the gaps. Surface them. Then sign with eyes open.

Phase 8: The GovCon CFO. Most sub-$50M shops run with a controller doing the CFO job — and there are five specific differences between the two that show up at exactly the wrong moment. Plus: when a GovCon actually needs a real CFO, and the recap offer that closed at full valuation because one controller did 18 months of quiet readiness work.

Until then — run the inventory.

—Michael Harris, Founder/CEO of 4G Consulting, LLC