FINDING 2022-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County elected to receive the standard revenue loss allowance, allowing the County to claim its total State and Local Fiscal Recovery Funds (SLFRF) allocation of $2,054,458 as revenue loss to use for government services. As such, all SLFRF program funds were expended under the revenue loss eligible use category. The U.S. Department of the Treasury determined that there are no subawards under this eligible use category, and that recipients' use of revenue loss funds would not give rise to subrecipient relationships given there is no federal program or purpose to carry out in the case of the revenue loss portion of the award. Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a non-procurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. The County did not have any policies or procedures in place related to the SLFRF suspension and debarment requirements. A population of three covered transactions, totaling $754,022, that equaled or exceeded $25,000 paid from SLFRF funds were identified. All three covered transactions were selected for testing. For each of the three transactions, the County did not verify the vendors' suspension or debarment status prior to payment due to the County not having any policies or procedures in place to verify that contractors were neither suspended nor debarred, or otherwise excluded or disqualified, from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Cause A proper system of internal controls was not designed by management of the County. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, vendors to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop procedures to ensure contractors and subrecipients, as appropriate, are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2022-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Condition and Context The County had not properly designed or implemented a system of internal control, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based on the type of recipient and the recipient's population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population of below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds. As such, the initial P& E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period, which we obtained from the Treasury's website; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. In addition, the P&E report was not complete or properly supported by the County's records. The County reported no projects for the reporting period; however, the County's expenditures during the reporting period consisted of one project, totaling $311,286, for the support of broadband backbone services in the County. This project should have been reported in the key line items of current period obligations, cumulative obligations, current period expenditures, and cumulative expenditures. The lack of internal controls and noncompliance were isolated to the April 2022 P&E report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls over the P&E report was not designed by management of the County, which would include segregation of key functions to ensure the County provided the Treasury with complete and accurate information related to the SLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls that would provide a segregation of duties for the preparation and review of federal reports to ensure appropriate reviews, approvals and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2022-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Suspension and Debarment Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Procurement and Suspension and Debarment Audit Findings: Material Weakness, Modified Opinion Condition and Context The County elected to receive the standard revenue loss allowance, allowing the County to claim its total State and Local Fiscal Recovery Funds (SLFRF) allocation of $2,054,458 as revenue loss to use for government services. As such, all SLFRF program funds were expended under the revenue loss eligible use category. The U.S. Department of the Treasury determined that there are no subawards under this eligible use category, and that recipients' use of revenue loss funds would not give rise to subrecipient relationships given there is no federal program or purpose to carry out in the case of the revenue loss portion of the award. Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to, contracts for goods and services awarded under a non-procurement transaction (i.e., grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. The County did not have any policies or procedures in place related to the SLFRF suspension and debarment requirements. A population of three covered transactions, totaling $754,022, that equaled or exceeded $25,000 paid from SLFRF funds were identified. All three covered transactions were selected for testing. For each of the three transactions, the County did not verify the vendors' suspension or debarment status prior to payment due to the County not having any policies or procedures in place to verify that contractors were neither suspended nor debarred, or otherwise excluded or disqualified, from participating in federal assistance programs or activities. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 31 CFR 19.300 states: "When you enter into a covered transaction with another person at the next lower tier, you must verify that the person with whom you intend to do business is not excluded or disqualified. You do this by: (a) Checking the EPLS; or (b) Collecting a certification from that person if allowed by this rule; or (c) Adding a clause or condition to the covered transaction with that person." Cause A proper system of internal controls was not designed by management of the County. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management statements of what should be done to effect internal controls and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, vendors to whom payments equal to or in excess of $25,000 were not verified to be not suspended, debarred, or otherwise excluded. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County establish a proper system of internal controls and develop procedures to ensure contractors and subrecipients, as appropriate, are not suspended, debarred, or otherwise excluded prior to entering into any contracts or subawards. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
FINDING 2022-004 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Reporting Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2022 Compliance Requirement: Reporting Audit Findings: Material Weakness, Modified Opinion Condition and Context The County had not properly designed or implemented a system of internal control, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, noncompliance. Recipients are required to submit quarterly or annually Project and Expenditure (P&E) reports to the U.S. Department of the Treasury (Treasury). The reporting periods, as well as the respective due dates, are based on the type of recipient and the recipient's population, as well as the recipient's allocation amount. Information to be reported includes projects funded, expenditures, and contracts for the appropriate reporting period. The County was classified as a metropolitan county with a population of below 250,000 residents that received an allocation of less than $10 million in State and Local Fiscal Recovery Funds. As such, the initial P& E report, covering the period from March 3, 2021 to March 31, 2022, was required to be submitted to the Treasury by April 30, 2022. The subsequent annual reports are to cover one calendar year and must be submitted to the Treasury by April 30 each year. The County submitted one P&E report during the audit period, which we obtained from the Treasury's website; however, a single employee prepared and submitted the P&E report without a review or oversight process in place to prevent, or detect and correct, errors. In addition, the P&E report was not complete or properly supported by the County's records. The County reported no projects for the reporting period; however, the County's expenditures during the reporting period consisted of one project, totaling $311,286, for the support of broadband backbone services in the County. This project should have been reported in the key line items of current period obligations, cumulative obligations, current period expenditures, and cumulative expenditures. The lack of internal controls and noncompliance were isolated to the April 2022 P&E report. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Coronavirus State and Local Fiscal Recovery Funds Compliance and Reporting Guidance, page 10, states in part: ". . . 10. Reporting. All recipients of federal funds must complete financial, performance, and compliance reporting as required and outlined in Part 2 of this guidance. Expenditures may be reported on a cash or accrual basis, as long as the methodology is disclosed and consistently applied. Reporting must be consistent with the definition of expenditures pursuant to 2 CFR 200.1. Your organization should appropriately maintain accounting records for compiling and reporting accurate, compliant financial data, in accordance with appropriate accounting standards and principles. . . ." 31 CFR 35.4(c) states in part: "Reporting and requests for other information. During the period of performance, recipients shall provide to the Secretary periodic reports providing detailed accounting of the uses of funds, . . ." Cause A proper system of internal controls over the P&E report was not designed by management of the County, which would include segregation of key functions to ensure the County provided the Treasury with complete and accurate information related to the SLFRF awards. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. In addition, not meeting the SLFRF reporting requirements increases the likelihood that the public will not have access to transparent and accurate information regarding expenditures of federal awards. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls that would provide a segregation of duties for the preparation and review of federal reports to ensure appropriate reviews, approvals and oversight are taking place. Additionally, management should develop policies and procedures to ensure that the County provides the Treasury with complete and accurate information for the P&E report. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.