Audit 344625

2024-001 Procurement Federal Agency: Department of Health and Human Services Program: Social Services Research and Demonstration (ALN 93.647) Pass-through Entity: N/A Federal Assistance Identification Number or Pass-Through Numbers: N/A Federal Award Years: Year ended June 30, 2024 Type of Finding: Material Weakness in Internal Control over Compliance; Other Matter Compliance Finding Criteria: 2 CFR 200.303(a) requires that each non-Federal entity must "Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award." 2 CFR 200.320 requires that each non-Federal entity must "have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award." Condition: While testing the procurement requirement, we noted that internal controls were not properly designed over the procurement requirement. Prior to receiving federal funding beginning in August 2022, the program conducted a request for proposal (RFP) process and began contracting with a vendor. When federal funding was obtained, the vendor was not reevaluated in accordance with the Uniform Guidance to ensure the procurement requirements were being met. In addition, we noted UW Health – Madison’s procurement policy documents do not include all of the information that is required by the Uniform Guidance. Cause: Because the vendor was already in place for the program prior to receiving federal funds, management did not recognize the need to reevaluate the vendor under the requirements of the Uniform Guidance. Management became aware of the need to perform additional procedures to comply with Uniform Guidance part way through the year and completed the evaluation once it became known. However, by that time, the vendor was already charged to the grant prior to the completion of the vendor evaluation. In addition, management also did not recognize the need to include additional information in its procurement policy documents related to the Uniform Guidance. Effect: Without appropriate internal controls, there is an increased risk of noncompliance related to federal funding. Context: We identified and tested 3 vendors that were direct and material to the program and related to the procurement and suspension and debarment requirements. The sample size was based on guidance from chapter 11 of the AICPA Audit Guide, Government Auditing Standards and Single Audits. Questioned Costs: None. Repeat Finding?: Yes Recommendation: While it was determined that the requirements of the Uniform Guidance were met related to the vendor tested, we suggest that management reevaluate all vendors that were previously used prior to receiving federal funding. In addition, we recommend that management update its procurement policies to incorporate the requirements of the Uniform Guidance. View of responsible officials of the auditee: Management agrees with the finding.

2024-001 Procurement Federal Agency: Department of Health and Human Services Program: Social Services Research and Demonstration (ALN 93.647) Pass-through Entity: N/A Federal Assistance Identification Number or Pass-Through Numbers: N/A Federal Award Years: Year ended June 30, 2024 Type of Finding: Material Weakness in Internal Control over Compliance; Other Matter Compliance Finding Criteria: 2 CFR 200.303(a) requires that each non-Federal entity must "Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award." 2 CFR 200.320 requires that each non-Federal entity must "have and use documented procurement procedures, consistent with the standards of this section and §§ 200.317, 200.318, and 200.319 for any of the following methods of procurement used for the acquisition of property or services required under a Federal award or sub-award." Condition: While testing the procurement requirement, we noted that internal controls were not properly designed over the procurement requirement. Prior to receiving federal funding beginning in August 2022, the program conducted a request for proposal (RFP) process and began contracting with a vendor. When federal funding was obtained, the vendor was not reevaluated in accordance with the Uniform Guidance to ensure the procurement requirements were being met. In addition, we noted UW Health – Madison’s procurement policy documents do not include all of the information that is required by the Uniform Guidance. Cause: Because the vendor was already in place for the program prior to receiving federal funds, management did not recognize the need to reevaluate the vendor under the requirements of the Uniform Guidance. Management became aware of the need to perform additional procedures to comply with Uniform Guidance part way through the year and completed the evaluation once it became known. However, by that time, the vendor was already charged to the grant prior to the completion of the vendor evaluation. In addition, management also did not recognize the need to include additional information in its procurement policy documents related to the Uniform Guidance. Effect: Without appropriate internal controls, there is an increased risk of noncompliance related to federal funding. Context: We identified and tested 3 vendors that were direct and material to the program and related to the procurement and suspension and debarment requirements. The sample size was based on guidance from chapter 11 of the AICPA Audit Guide, Government Auditing Standards and Single Audits. Questioned Costs: None. Repeat Finding?: Yes Recommendation: While it was determined that the requirements of the Uniform Guidance were met related to the vendor tested, we suggest that management reevaluate all vendors that were previously used prior to receiving federal funding. In addition, we recommend that management update its procurement policies to incorporate the requirements of the Uniform Guidance. View of responsible officials of the auditee: Management agrees with the finding.