2025-016 Improve Controls over Transparency Act Reporting Compliance Requirement: Reporting Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Agriculture Pass-Through Entity: None AL Numbers and Titles: 10.553 – School Breakfast Program 10.555 – National School Lunch Program 10.556 – Special Milk Program for Children 10.582 – Fresh Fruit and Vegetable Program Federal Award Numbers: 245GA324N1099 (Year: 2024), 245GA324N1199 (Year: 2024), 245GA324L11603 (Year: 2024), 255GA324N1099 (Year: 2025), 255GA324N1199 (Year: 2025), 255GA324L1603 (Year: 2025) Questioned Costs: None Identified Repeat of Prior Year Findings: 2024-014, 2023-012 Description: The Georgia Department of Education should improve internal controls to ensure that subaward information associated with the Federal Funding Accountability and Transparency Act is reported appropriately and timely. Background Information: The Child Nutrition Cluster (CNC) is comprised of various programs that are intended to assist states in administering and overseeing food service program operators that provide healthful, nutritious meals to eligible children in public and non-profit private schools, residential child care institutions, and summer programs. This Cluster of programs also fosters healthy eating habits in children by providing fresh fruits and fresh vegetables to children attending elementary and schools and encourages the domestic consumption of nutritious agricultural commodities. Funds associated with the CNC program are provided to the Georgia Department of Education (GaDOE) for allocation to eligible subrecipients. Because the GaDOE subgrants program funds to various entities, the GaDOE must comply with the Federal Funding Accountability and Transparency Act of 2006 (FFATA). The FFATA requirements were signed into law on September 26, 2006 in an effort to give the American public access to information on how their tax dollars are being spent. This information, including information associated with the use of CNC program funds, is accessible via the USAspending.gov website. Criteria: As a recipient of federal awards, the GaDOE is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Under the FFATA (Public Law 109-282), as codified in Title 2 CFR Part 170, Reporting Subaward and Executive Compensation Information, recipients of grants or cooperative agreements, including the GaDOE, who make first-tier subawards of $30,000 or more are required to register in the System for Award Management (SAM.gov). Subaward data, such as the subaward date, subawardee Unique Entity Identifier number, amount of subaward, subaward obligation/action date, date of report submission, and subaward number, are submitted through SAM.gov and accessible to the general public through the USASpending.gov website. Condition: Our examination of reporting requirements associated with CNC revealed that the GaDOE failed to submit subaward data to the SAM.gov. Therefore, all first-tier subawards of $30,000 or more, and the associated subaward data, were not reflected on the USAspending.gov website as required. Cause: The GaDOE had established procedures in place to comply with the FFATA reporting requirements for federal awards, but the GaDOE ceased FFATA reporting when it was removed from the Office of Management and Budget (OMB) Compliance Supplement in anticipation of the transition to the proposed new federal reporting model. When FFATA reporting reappeared in the OMB Compliance Supplement, the GaDOE reinstated FFATA reporting procedures for all federal programs and hired a new staff member in June 2022 to solely assist with bringing all FFATA reporting up to date for all federal programs. However, reporting for CNC proved to be challenging due to the continuously changing award amounts based on the number of claims each month. The GaDOE submitted a request to the USDA to report FFATA information on an annual basis, but that request was denied. Consequently, at fiscal year-end, the GaDOE was still formulating a method that will allow for compliance with CNC FFATA monthly reporting requirements in a more efficient manner. Additionally, during fiscal year 2025, the FFATA reporting system changed from the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS) to SAM.gov. This website required new interface software for uploading large amounts of data; however, the GaDOE did not have this information technology (IT) capability. Therefore, due to personnel changes and the absence of the required IT system interface, the GaDOE has experienced delays in completing CNC FFATA reporting. Effect: The deficiencies noted in the FFATA reporting process resulted in noncompliance with federal regulations. Without effective controls in place to ensure compliance with federal reporting requirements, the transparency objective associated with the FFATA requirements was not achieved as the general public was unable to review expenditure data associated with the State of Georgia’s CNC programs. Recommendation: We recommend that the GaDOE: • Finalize processes and procedures associated with the CNC FFATA reporting requirements; • Incorporate additional oversight, training, and/or staff to aid in the identification of subawards to be reported and the reporting of appropriate data elements, as applicable, in a timely manner; and • Maintain documentation of subaward agreements and the determination of whether each subaward should be entered into SAM.gov in compliance with the FFATA reporting requirements. Views of Responsible Officials: The Georgia Department of Education concurs with this finding.
2025-029 Improve Controls over Employer Tax Form and Payment Submissions Compliance Requirement: Special Tests and Provisions Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Labor Pass-Through Entity: None AL Number and Title: 17.225 – Unemployment Insurance Federal Award Numbers: UI356432155A13 (Year: 2021), UI372182255A13 (Year: 2022), UI379762260A13 (Year: 2022), UI393172355A13 (Year: 2023), 23A60UB000032 (Year: 2023), 23A60UB000074 (Year: 2023), 23A60UB0000117 (Year: 2023), 23A60UD000001 (Year: 2023), 23A60UD000016 (Year: 2023), 23A60UR000037 (Year: 2023), 24A55UI000019 (Year: 2024), 24A55UT000008 (Year: 2024), 25A55UI000074 (Year: 2025), 25A60UD000068 (Year: 2025), 25A60UD000070 (Year: 2025) Questioned Costs: None Identified Description: The Georgia Department of Labor did not maintain adequate documentation of taxes due or taxes received. Background Information: The Unemployment Insurance (UI) program, created by the Social Security Act (Pub. L. No. 74-271), provides Unemployment Compensation (UC) benefits to workers who are unemployed through no fault of their own and are seeking reemployment. To receive benefits, claimants must be able to work, available for work, and actively seeking work. Employers meeting any of the following criteria are required to report UI taxes: • Private employers with a quarterly payroll of $1,500 or at least one worker in 20 different calendar weeks during a calendar year; • Agricultural employers with at least $20,000 in gross payroll for a calendar quarter or with 10 or more workers on any day during 20 different weeks in a calendar year; or • Domestic employers with a payroll of at least $1,000 in any calendar quarter. State Workforce Agencies, including the Georgia Department of Labor (DOL), are required to maintain employer accounts for UI taxes received or due from individual employers. Criteria: As a recipient of federal awards, the DOL is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Additionally, provisions included in the Uniform Guidance, Section 200.302(b) state, in part, that the DOL’s “financial management system must provide for… maintaining records that sufficiently identify the amount, source, and expenditure of Federal funds… [and] records must be supported by source documentation.” Condition: Our audit of the UI program included a review of quarterly tax and wage forms and employer payments received. From a population of 906,391 transactions, a sample of 25 transactions related to the collection of taxes due from employers was randomly selected for testing using a nonstatistical sampling method. The following deficiencies were identified: • We found no evidence that internal controls had been established, documented, or maintained for the items tested. • Of the 25 transactions tested, 13 transactions could not be traced to bank statements, and no supporting documentation could be provided for the transactions. Cause: The DOL has an antiquated system for recording tax transactions that does not maintain an audit trail of electronic tax forms collected. While physical documentation and payments remitted through the mail are maintained on file, no records of electronic employer submissions are maintained for review by the DOL. Effect: The deficiencies in employer tax form and payment submissions resulted in noncompliance with federal regulations. Additionally, without properly designed controls in place, the DOL cannot adequately maintain employer accounts or support the transactions posted to employer accounts. Furthermore, grant provisions allow the grantor to penalize the DOL for noncompliance by suspending or terminating the award or withholding future awards. This may prevent eligible individuals from receiving benefits in the future. Recommendation: The DOL should implement internal controls over the documentation of taxes due and received by: • Ensuring that appropriate documentation is maintained for employer tax submissions, detailing the employer name, wages reported, calculation of taxes, penalties, interest, and FIFA costs due, payment remitted (if any) with time stamps. • Implementing a process in which the system generates a tax form for each employer submission to be maintained as reviewable evidence of taxes due. • Maintaining a receipt log by employer, including amount received, date received, and amount per bank statement or ACH transmission file, as documentation of taxes received. Views of Responsible Officials: We concur with this finding.
2025-027 Improve Controls over Eligibility Determinations Compliance Requirement: Eligibility Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Labor Pass-Through Entity: None AL Numbers and Titles: 17.225 – Unemployment Insurance 17.225 – COVID-19 – Unemployment Insurance Federal Award Numbers: UI347102055A13 (Year: 2020), UI356432155A13 (Year: 2021), UI372182255A13 (Year: 2022), UI379762260A13 (Year: 2022), UI393172355A13 (Year: 2023), 23A60UB000032 (Year: 2023), 23A60UB000074 (Year: 2023), 23A60UB0000103 (Year: 2023), 23A60UB0000117 (Year: 2023), 23A60UD000001 (Year: 2023), 23A60UD000016 (Year: 2023), 23A60UR000037 (Year: 2023), 24A55UI000019 (Year: 2024), 24A55UT000008 (Year: 2024), 25A55UP000019 (Year: 2025), 25A55UI000074 (Year: 2025), 25A60UB000128 (Year: 2025), 25A60UB000156 (Year: 2025), 25A60UB000165 (Year: 2025), 25A60UD000068 (Year: 2025), 25A60UD000070 (Year: 2025) Questioned Costs: $487 Repeat of Prior Year Findings: 2024-032, 2023-028, 2022-028, 2021-035 Description: The Georgia Department of Labor did not have effective internal controls in place to ensure unemployment benefit payments were made correctly and only to eligible claimants. Background Information: The Unemployment Insurance (UI) program, created by the Social Security Act (Pub. L. No. 74- 271), provides Unemployment Compensation (UC) benefits to workers who are unemployed through no fault of their own and are seeking reemployment. To receive benefits, claimants must be able to work, available for work, and actively seeking work. On March 27, 2020, the Coronavirus Aid, Relief, and Economic Security (CARES) Act was signed into law. The CARES Act was designed to mitigate the economic effects of the COVID-19 pandemic in a variety of ways, including providing additional UI provisions. Title II, Subtitle A of the CARES Act, authorizes the following temporary UI programs: • Federal Pandemic Unemployment Compensation (FPUC) – The FPUC program provides eligible individuals with $600 per week in addition to the weekly benefit amount they receive from certain other UC programs. • Pandemic Emergency Unemployment Compensation (PEUC) – The PEUC program provides up to 13 weeks of benefits to individuals who have exhausted all rights to regular compensation under State law or Federal law with respect to a benefit year that ended on or after July 1, 2019, have no rights to regular compensation with respect to a week under any other State or Federal UC law, are not receiving compensation with respect to such week under the UC law of Canada, and are able to work, available to work, and actively seeking work. • Pandemic Unemployment Assistance (PUA) – The PUA program provides up to 39 weeks of benefits to those individuals who are not eligible for regular UC or extended benefits under State or Federal law or PEUC, including those who have exhausted all rights to such benefits. In addition, the State Extended Benefits (SEB) program, which is an extension of UC benefits, becomes available for payment when the State’s 13-week insured unemployment rate (IUR) exceeds 5% and pays claimants up to an additional 13 weeks of compensation. Under the SEB program, the State is required to provide 50% of the amounts paid to the majority of eligible SEB claimants, which are those not covered by Federal law or special provisions of State law. However, under the CARES Act, the U.S. Department of Labor will reimburse the State at 100% of eligible costs for the SEB program. The State of Georgia became eligible to pay SEB May 10, 2020. However, the first payable weekending date (WED) was on July 4, 2020, as the first payable WED of PEUC was April 4, 2020. Further, the last payable WED for SEB was February 6, 2021. Criteria: As a recipient of federal awards, the Georgia Department of Labor (DOL) is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Additionally, provisions included in Title 20 CFR Section 604.3(a) state, “A State may pay UC only to an individual who is able to work and available for work for the week for which UC is claimed.” Furthermore, Title II, Subtitle A of the CARES Act provides specific eligibility guidance for the FPUC, PEUC, and PUA programs. Condition: Our audit of the Unemployment Compensation Fund (UCF) included a review of benefit payments related to regular UC, SEB, and CARES Act UI programs. A sample of 60 UI benefit payment transactions processed by the DOL was randomly selected for testing using a nonstatistical sampling method. The following deficiencies were identified: • In one instance, a claimant of the PUA program did not provide proof of wages or income, which resulted in an overpayment of $316. • In one instance, a claimant did not self-certify that they are able to work, available for work, and actively seeking work each week they claimed benefits, which resulted in an overpayment of $171. Questioned Costs: Upon testing a sample of $18,720 in UI program payments, known questioned costs of $487 were identified. Using the population of UI payments sampled, which totaled $359,839,058, we project likely questioned costs to be approximately $6,881,509. Cause: The DOL must manually review proof of employment or self-employment or a valid offer to begin employment and proof of wages for all PUA claims. This is a very time-consuming process and the DOL does not have the resources to review the volume of PUA claims in a timely manner. In addition, DUA program claims are submitted by paper, including weekly certifications by claimants; however, the DOL misplaced the paper copy of the certification for the week tested and could not provide evidence the claimant self-certified for the week in which the claimant received benefits. Effect: Without effective controls, the DOL increases its risk of providing benefits to ineligible claimants and not detecting these unallowable payments. The deficiencies in eligibility determinations also resulted in noncompliance with federal regulations and questioned costs. While funds for benefit payments are not provided to states through grant awards, states are awarded funds to administer these programs. Grant provisions allow the grantor to penalize the DOL for noncompliance by suspending or terminating the award or withholding future awards. This may prevent eligible individuals from receiving benefits in the future. Recommendation: The DOL management should develop, implement and document internal controls over eligibility and claims processing to ensure procedures are consistently enforced and operate effectively. Management should also provide training on procedures for processing unemployment claims for programs created by the CARES Act. Strong monitoring controls should be implemented, as well, to ensure that the DOL achieves its objectives in complying with the eligibility requirements for the various UC programs. Additionally, the DOL management should develop and document IT controls to stop the release of payment until eligibility requirements are substantiated and verified. The DOL management should also develop, implement and document procedures to stop or reduce payments when individuals do not provide required documentation. Views of Responsible Officials: We concur with this finding. GDOL acknowledges that this is a repeat finding from prior years. In addition, GDOL’s current UI Information Technology (IT) system was developed in 1982 using mainframe legacy technology. Due to its age and structural limitations, many automated processes and corrective controls cannot be easily implemented. As a result, numerous tasks, including the validation and processing of all PUA and DUA documentation to determine eligibility, must be performed manually by staff.
2025-028 Improve Controls over Performance Reporting Compliance Requirements: Reporting Special Tests and Provisions Internal Control Impact: Material Weakness Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Labor Pass-Through Entity: None AL Numbers and Titles: 17.225 – Unemployment Insurance 17.225 – COVID-19 – Unemployment Insurance Federal Award Numbers: UI347102055A13 (Year: 2020), UI356432155A13 (Year: 2021), UI372182255A13 (Year: 2022), UI379762260A13 (Year: 2022), UI393172355A13 (Year: 2023), 23A60UB000032 (Year: 2023), 23A60UB000074 (Year: 2023), 23A60UB0000103 (Year: 2023), 23A60UB0000117 (Year: 2023), 23A60UD000001 (Year: 2023), 23A60UD000016 (Year: 2023), 23A60UR000037 (Year: 2023), 24A55UI000019 (Year: 2024), 24A55UT000008 (Year: 2024), 25A55UI000074 (Year: 2025), 25A55UP000019 (Year: 2025), 25A60UB000128 (Year: 2025), 25A60UB000156 (Year: 2025), 25A60UB000165 (Year: 2025), 25A60UD000068 (Year: 2025), 25A60UD000070 (Year: 2025) Questioned Costs: None Identified Description: The Georgia Department of Labor should improve internal controls over required performance reports to ensure the information is reported appropriately and timely. Background Information: The Unemployment Insurance (UI) program, created by the Social Security Act (Pub. L. No. 74-271), provides Unemployment Compensation (UC) benefits to workers who are unemployed through no fault of their own and are seeking reemployment. To receive benefits, claimants must be able to work, available for work, and actively seeking work. The Georgia Department of Labor (DOL) is responsible for reporting programmatic data related to UI programs, including those associated with the Reemployment Services and Eligibility Assessments (RESEA) program, to the U.S. Department of Labor’s Employment and Training Administration (ETA). Every grant awarded by the ETA requires accurate quarterly and annual reporting as a part of sound financial and management responsibilities. This reporting supports the ETA’s ability to measure fund utilization for performance accountability and assess compliance with statutory expenditure requirements. This information also allows for the measurement of successful outcomes for participants, ensures sound service delivery and reporting practices, and helps determine whether the federal funds achieved maximum benefit. The following performance reports are required to be submitted to the ETA: • ETA 9050 – Time Lapse of All First Payments except Workshare monthly report, • ETA 9052 – Nonmonetary Determination Time Lapse Detection monthly report, • ETA 9055 – Appeals Case Aging monthly report, • ETA 9128 – RESEA Workload quarterly report, and • ETA 9129 – RESEA Outcomes quarterly report. Criteria: As a recipient of federal awards, the DOL is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. In addition, provisions included in UI Program Letter (UIPL) No. 08-24 and UIPL No. 12-25 require ETA 9128 and 9129 reports to be reviewed by UI staff member(s) for accuracy prior to submission. Condition: Our audit of the reporting requirements for the UI program revealed there was no evidence of review and approval or a comparable internal control procedure associated with the ETA 9050, ETA 9052, ETA 9055, ETA 9128, and ETA 9129 performance reports. Cause: While a staff member was assigned to complete the performance reports, there was no process in place to have the reports reviewed for accuracy prior to submission due to management oversight. Effect: Without properly designed controls in place, the DOL cannot adequately ensure the accuracy of information included in performance reports. In addition, the deficiency in internal control resulted in noncompliance with federal regulations. While funds for benefit payments are not provided to states through grant awards, states are awarded funds to administer these programs. Grant provisions allow the grantor to penalize the DOL for noncompliance by suspending or terminating the award or withholding future awards. This may prevent eligible individuals from receiving timely benefits in the future. Recommendation: The DOL should design, implement and document effective controls over performance reporting to ensure that reports are reviewed by an individual, other than the preparer, prior to submission of the reports. The DOL should also establish an audit trail that documents what date the report was reviewed and by whom. Views of Responsible Officials: We concur. Due to staffing changes, we failed to document review and approval of these reports by management.
2025-030 Improve Controls over the Identification, Recording, and Reporting of Overpayments Compliance Requirement: Special Tests and Provisions Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Labor Pass-Through Entity: None AL Numbers and Titles: 17.225 – Unemployment Insurance 17.225 – COVID-19 – Unemployment Insurance Federal Award Numbers: UI347102055A13 (Year: 2020), UI356432155A13 (Year: 2021), UI372182255A13 (Year: 2022), UI379762260A13 (Year: 2022), UI393172355A13 (Year: 2023), 23A60UB000032 (Year: 2023), 23A60UB000074 (Year: 2023), 23A60UB0000103 (Year: 2023), 23A60UB0000117 (Year: 2023), 23A60UD000001 (Year: 2023), 23A60UD000016 (Year: 2023), 23A60UR000037 (Year: 2023), 24A55UI000019 (Year: 2024), 24A55UT000008 (Year: 2024), 25A55UP000019 (Year: 2025), 25A55UI000074 (Year: 2025), 25A60UB000128 (Year: 2025), 25A60UB000156 (Year: 2025), 25A60UB000165 (Year: 2025), 25A60UD000068 (Year: 2025), 25A60UD000070 (Year: 2025) Questioned Costs: None Identified Repeat of Prior Year Findings: 2024-035, 2023-030, 2022-029, 2021-038, 2020-038 Description: The Georgia Department of Labor did not maintain adequate controls over the identification, recording, and reporting of benefit overpayments associated with the Unemployment Insurance programs. Background Information: The Unemployment Insurance (UI) program, created by the Social Security Act (Pub. L. No. 74- 271), provides Unemployment Compensation (UC) benefits to workers who are unemployed through no fault of their own and are seeking reemployment. To receive benefits, claimants must be able to work, available for work, and actively seeking work. The Georgia Department of Labor (DOL) is responsible for reporting overpayment data related to UI programs to the U.S. Department of Labor’s Employment and Training Administration (ETA). Every grant awarded by the ETA requires accurate reporting as a part of sound financial and management responsibilities. This reporting supports the ETA’s ability to ensure benefit payments are properly made. The following reports reflect overpayment data that must be submitted to the ETA: • ETA 227 – Overpayment Detection and Recovery Activities quarterly report, and • ETA 902P – Pandemic Unemployment Assistance Activities monthly report. Criteria: As a recipient of federal awards, the DOL is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Title 34, Chapter 8, Article 9 of the Official Code of Georgia Annotated (OCGA) §34-8-254 defines overpayments as the sum of benefits received by any person while any conditions for the receipt of benefits were not fulfilled or while the person was disqualified from receiving benefits. OCGA §34-8-254 assigns legal responsibility and authority for the collection of overpayments to the Commissioner of the DOL. Additionally, according to the UI Report Handbook No. 401, the ETA 227 and ETA 902P reports are required to be submitted to the U.S. Department of Labor in a timely and accurate manner. The ETA 227 reports are due quarterly on the first day of the second month after the quarter of reference, and all applicable data on the ETA 227 reports should be traceable to the data regarding overpayments and recoveries in the state’s financial accounting system. The ETA 902P report is due on the 30th of the month following the month to which data relate and should contain monthly data on PUA activities. Condition: In an effort to assess risk and plan audit procedures, auditors obtained an understanding of the internal controls over the processes for identifying and recording overpayments. In performing these procedures, the DOL stated that crossmatches used to identify possible overpayments are run three to six months after a quarter’s benefits have been paid. Additionally, it is our understanding that after the DOL runs a wage crossmatch for a quarter, the quarter is not run again. In this case, if an employer does not report wages for its employee timely to the DOL, the wages would not be in the crossmatch performed. Based upon this information, auditors requested a complete population of overpayment cases and a reconciliation of the population data to the year-end financial statements. Although the DOL provided a population of overpayment cases, auditors could not summarize the data to match amounts reported on the financial statements. The data provided by the DOL is very limited, reflecting only total overpayments established, paid, and remaining balances by claimant at year-end. All amounts are grouped together and can contain multiple overpayments established on different dates. Auditors could not distinguish important information, such as the date the overpayment was established, week-ending dates for the weeks determined to be overpaid, when the original benefit was paid, and whether the overpayment was caused by fraud. Auditors planned to select a sample of overpayment cases that the DOL had established during the fiscal year under review and verify that the DOL was properly identifying and processing overpayments. While the DOL provided data related to overpayment cases, the auditors were not able to verify the completeness of the population provided as a $6.5 million variance was noted between the amount reported in the financial statements and the amount reflected in the population data. Additionally, upon review of the overpayment information provided, it was determined the underlying data was not mathematically accurate as the sum of all current year activity by claimant did not agree to the ending balance reflected for each claimant. Auditors recalculated the ending balance by claimant based on the activity reflected in the overpayment data file and noted a $2.7 million net variance. Furthermore, auditors inquired if overpayment data in the system of record was reconciled to the billing system and the DOL stated they did not perform such reconciliation. Auditors noted a variance of approximately $128 million between the amount reported in the financial statements and the amount shown in the billing system. Finally, auditors compared the total overpayments reported in the financial statements to ETA 227 submissions and noted an unreconciled variance of $158 million. Cause: The DOL did not have the ability to easily run transaction-level or claimant-level queries for overpayments in their systems. Additionally, the DOL did not reconcile overpayment data to subsystems, federal reports, or accounting records and was unable to do so in a timely manner when requested by the Georgia Department of Audits and Accounts and the State Accounting Office. Effect: Due to the lack of controls, there is an increased risk that possible fraudulent claims and improper benefits paid will not be identified and investigated timely. The deficiencies in the identification and recording of benefit overpayments resulted in noncompliance with federal and state regulations. Additionally, inaccurate reports were likely filed with the U.S. Department of Labor. Furthermore, the lack of accurate and complete data associated with benefit overpayments prevented auditors from testing compliance requirements associated with overpayments. These unknown factors, along with additional issues, are the basis for our adverse opinion on the UI program. Recommendation: The DOL management should develop, implement and document procedures to identify and record benefit overpayments in a timely and accurate manner. These procedures should allow for the tracking of information by fiscal year and periodic reconciliation of detailed records to the general ledger and various required reports. Specifically, the DOL should implement, at a minimum, a monthly reconciliation process to reconcile, by claimant, the overpayment balances and activity within the billing system to the activity and balances reflected in the system of record. Additionally, a review of the detailed listing by claimant from the system of record should be performed to ensure the amounts included in the listing are mathematically accurate. Views of Responsible Officials: We concur with this finding. GDOL acknowledges this is a repeated finding from previous years. The current unemployment system is aged and distressed. GDOL’s limited technology resources will hinder our ability to update our current system to perform reconciliation between the multiple tools used to perform different functions. Therefore, we acknowledge that this finding will persist until a system-wide resolution is implemented in the new modernized UI system.
2025-026 Improve Controls over Transparency Act Reporting Compliance Requirement: Reporting Internal Control Impact: Material Weakness Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Labor Pass-Through Entity: None AL Numbers and Titles: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Federal Award Numbers: 23A55AA038524-01-04 (Year: 2023), 23A55AT000010-01-01 (Year: 2023), 24A55AT000060-01-01 (Year: 2024), 23A55AY000004-01-00 (Year: 2023), 24A55AY000074-01-00 (Year: 2024), 23A55AW000013-01-01 (Year: 2023), 24A55AW000059-01-01 (Year: 2024) Questioned Costs: None Identified Description: The Technical College System of Georgia should improve internal controls to ensure that subaward information associated with the Federal Funding Accountability and Transparency Act is reported appropriately and timely. Background Information: The Workforce Innovation and Opportunity Act (WIOA) authorizes formula grant programs to states to help job seekers access employment, education, training, and support services to succeed in the labor market. Using a variety of methods, states provide employment and training services through a network of American Job Centers (AJC), also known as One-Stop Centers. The WIOA programs provide employment and training programs for adults, dislocated workers, and youth. Funds associated with the WIOA programs are provided to the Technical College System of Georgia (TCSG) for allocation to eligible subrecipients. Because the TCSG subgrants program funds to various entities, the TCSG must comply with the Federal Funding Accountability and Transparency Act of 2006 (FFATA). The FFATA requirements were signed into law on September 26, 2006, in an effort to give the American public access to information on how their tax dollars are being spent. Criteria: As a recipient of federal awards, the TCSG is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Under the FFATA (Public Law 109-282), as codified in Title 2 CFR Part 170, Reporting Subaward and Executive Compensation Information, recipients of grants or cooperative agreements, including the TCSG, who make first-tier subawards of $30,000 or more are required to register in the System for Award Management (SAM.gov). Subaward data, such as the subaward date, subawardee Unique Entity Identifier number, amount of subaward, subaward obligation/action date, date of report submission, and subaward number, are submitted through SAM.gov and accessible to the general public through the USAspending.gov website. Condition: Our audit of the WIOA programs revealed there was no evidence of review and approval or a comparable internal control over the FFATA reports. Additionally, auditors identified 18 subrecipients with 254 first-tier subawards or subaward modifications of $30,000 or more during the period under review. A sample of 40 subawards or subaward modifications totaling $11,058,922 was randomly selected for testing using a non-statistical sampling method. Auditors examined documentation to determine if the subrecipient’s information was properly reported on the USAspending.gov website. Upon performing testing over FFATA reporting, auditors noted the following deficiencies: • Three subawards totaling $560,792 had not been reported as of the end of audit fieldwork; • One subaward totaling $80,000 was not reported timely; and • Three subawards totaling $1,004,249 were not reported accurately. Cause: Through discussion with management, it was noted that the omissions, untimely reporting, and errors were due to an oversight by personnel and a lack of review. Effect: The deficiencies noted in the FFATA reporting process resulted in noncompliance with federal regulations. Without effective controls in place to ensure compliance with federal reporting requirements, the transparency objective associated with the FFATA requirements was not achieved as the general public was unable to review all expenditure data associated with the State of Georgia’s WIOA programs. Recommendation: We recommend that the TCSG: • Establish and document processes and procedures associated with the FFATA reporting requirements; and • Incorporate additional oversight, training, and/or staff to aid in the identification of subawards to be reported and the reporting of appropriate data elements, as applicable, in a timely manner. Views of Responsible Officials: We concur with this finding. The Technical College System of Georgia acknowledges the finding associated with the recent DOAA audit. In the past, The TCSG Office of Workforce Development would have a single staff member enter the information from the FFATA into FSRS.gov, in which a receipt of submission would be downloaded and saved to a local shared folder. However, in March 2025, the FFATA reporting was moved to SAM.gov, which does not provide any proof of submission, only a database of reported subawards. Along with staff turnover and leadership transition, OWD recognizes that an adjustment to the FFATA Subaward submission is needed to continue the assurance of effective controls and compliance.
2025-031 Strengthen Controls over Matching, Earmarking, and Period of Performance Compliance Requirements: Matching, Level of Effort, Earmarking Period of Performance Internal Control Impact: Material Weakness Compliance Impact: None Federal Awarding Agency: U.S. Department of Transportation Pass-Through Entity: None AL Numbers and Titles: 20.600 – State and Community Highway Safety 20.616 – National Priority Safety Programs Federal Award Numbers: 69A37525300004020GA0 (Year: 2025), 69A3752530000405BGAL (Year: 2025), 69A3752530000405CGA0 (Year: 2025), 69A3752530000405DGAM (Year: 2025), 69A3752530000405EGAA (Year: 2025), 69A3752530000405FGA1 (Year: 2025), 69A3752530000405GGA0 (Year: 2025), 69A3752530000405HGA0 (Year: 2025) Questioned Costs: None Identified Description: The Georgia Department of Public Safety should improve internal controls over matching, earmarking, and period of performance requirements to ensure expenditures meet required matching and earmarking percentages and are incurred within the required timeframes. Background Information: The Highway Safety Act of 1966 established the Highway Safety Cluster (HSC) as a formula grant for states to save lives and prevent injuries due to road traffic crashes. Funding is apportioned to State and Territorial Highway Safety Offices using statutory apportionment formulas and requirements. To receive funding, states must have an approved Triennial Highway Safety Plan and an approved Annual Grant Application that details planned projects. The Georgia Department of Public Safety (DPS) is required to maintain adequate internal controls over federal awards, including the matching, earmarking, and period of performance requirements for each federal award. Proper tracking allows the entity to ensure that expenditures meet appropriate matching and earmarking percentages and are incurred within the allowable timeframes in compliance with grant requirements. Criteria: As a recipient of federal awards, the DPS is required to establish, document and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Condition: Our audit of the HSC programs revealed there was no evidence of internal controls implemented over the matching, earmarking, and period of performance compliance requirements. Cause: For the matching and earmarking requirements, management has a process in place to calculate and track the required percentages; however, documentation supporting the calculations and tracking was not maintained. In addition, for the period of performance requirement, management did not establish and document an internal process to independently monitor grant activity and ensure expenditures occurred within the allowable period of performance. Effect: Without proper internal controls in place, there is an increased risk of noncompliance with the matching, earmarking, and period of performance requirements. Recommendation: We recommend that the DPS: • Establish and document processes and procedures associated with the matching, earmarking, and period of performance requirements; • Incorporate additional oversight, training, and/or staff to ensure staff are knowledgeable about applicable requirements; and • Retain sufficient documentation of internal control activities performed. Views of Responsible Officials: We concur with this finding.
2025-032 Improve Controls over Transparency Act Reporting Compliance Requirement: Reporting Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Transportation Pass-Through Entity: None AL Numbers and Titles: 20.600 – State and Community Highway Safety 20.616 – National Priority Safety Programs Federal Award Numbers: 69A37525300004020GA0 (Year: 2025), 69A3752530000405BGAL (Year: 2025), 69A3752530000405CGA0 (Year: 2025), 69A3752530000405DGAM (Year: 2025), 69A3752530000405EGAA (Year: 2025), 69A3752530000405FGA1 (Year: 2025), 69A3752530000405GGA0 (Year: 2025), 69A3752530000405HGA0 (Year: 2025) Questioned Costs: None Identified Description: The Georgia Department of Public Safety should improve internal controls to ensure that subaward information associated with the Federal Funding Accountability and Transparency Act is reported appropriately and timely. Background Information: The Highway Safety Act of 1966 established the Highway Safety Cluster (HSC) as a formula grant for states to save lives and prevent injuries due to road traffic crashes. Funding is apportioned to State and Territorial Highway Safety Offices using statutory apportionment formulas and requirements. To receive funding, states must have an approved Triennial Highway Safety Plan and an approved Annual Grant Application that details planned projects. Funds associated with the HSC program are provided to the Georgia Department of Public Safety (DPS) for allocation to eligible subrecipients. Because the DPS subgrants program funds to various entities, the DPS must comply with the Federal Funding Accountability and Transparency Act of 2006 (FFATA). The FFATA requirements were signed into law on September 26, 2006 in an effort to give the American public access to information on how their tax dollars are being spent. This information, including information associated with the use of HSC program funds, is accessible via the USAspending.gov website. Criteria: As a recipient of federal awards, the DPS is required to establish, document and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Under the FFATA (Public Law 109-282), as codified in Title 2 CFR Part 170, Reporting Subaward and Executive Compensation Information, recipients of grants or cooperative agreements, including the DPS who make first-tier subawards of $30,000 or more are required to register in the System for Award Management (SAM.gov). Subaward data, such as the subaward date, subawardee Unique Entity Identifier number, amount of subaward, subaward obligation/action date, date of report submission, and subaward number, are submitted through SAM.gov and accessible to the general public through the USAspending.gov website. Condition: Our examination of reporting requirements associated with HSC revealed that the DPS failed to submit subaward data to SAM.gov. Therefore, all first-tier subawards of $30,000 or more, and the associated subaward data, was not reflected on the USAspending.gov website as required. Cause: Through discussion with management, it was noted that there was a lack of clarity regarding the DPS’s responsibility for completing the FFATA reporting requirements. In addition, the DPS did not have a designated individual assigned to perform and oversee the FFATA reporting process. As a result, the required subaward information was not reported on SAM.gov in accordance with applicable requirements. Effect: The deficiencies noted in the FFATA reporting process resulted in noncompliance with federal regulations. Without effective controls in place to ensure compliance with federal reporting requirements, the transparency objective associated with the FFATA requirements was not achieved as the general public was unable to review expenditure data associated with the State of Georgia’s HSC programs. Recommendation: We recommend that the DPS: • Establish and document processes and procedures associated with the FFATA reporting requirements; • Incorporate additional oversight, training, and/or staff to aid in the identification of subawards to be reported and the reporting of appropriate data elements, as applicable, in a timely manner; and • Maintain documentation of subaward agreements and the determination of whether each subaward should be entered into SAM.gov in compliance with the FFATA reporting requirements. Views of Responsible Officials: We concur with this finding.
2025-033 Improve Controls over the Procurement Process Compliance Requirement: Procurement and Suspension and Debarment Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of the Treasury Pass-Through Entity: None AL Number and Title: 21.027 – COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Federal Award Number: SLFRP1029 (Year: 2023) Questioned Costs: None Identified Repeat of Prior Year Finding: 2024-037 Description: The Georgia Department of Human Services should improve internal controls to ensure that they are complying with the State of Georgia’s Procurement Policy. Background Information: The Coronavirus State Fiscal Recovery Fund, (CSLFRF), provides direct payments to states, US territories, Tribal governments, metropolitan cities, counties, and non-entitlement units of local government to: 1. Respond to the public health emergency with respect to Coronavirus Disease 2019 (COVID-19) or its negative economic impacts, including by providing assistance to households, small businesses, nonprofits, and impacted industries, such as tourism, travel, and hospitality; 2. Respond to workers performing essential work during the COVID-19 public health emergency by providing premium pay to eligible workers of the recipient that perform essential work or by providing grants to eligible employees that have eligible workers who are performing essential work; 3. Provide government services, to the extent of the reduction in revenue of the eligible entities due to the COVID-19 public health emergency relative to revenues collected in the most recent full fiscal year of the eligible entities prior to the emergency; and 4. Make necessary investments in water, sewer, or broadband infrastructure. In August 2022, the Governor’s Office of Planning and Budget (OPB) dedicated more than $1 billion of CSLFRF federal funds to the Department of Human Services (DHS) to establish the Cash Assistance program. The Cash Assistance program provided one-time cash assistance of up to $350 for active enrollees of the Medicaid, PeachCare for Kids, Supplemental Nutrition Assistance Program, and/or Temporary Assistance for Needy Families government benefit programs in response to the negative economic impacts of the COVID-19 public health emergency. Criteria: As a recipient of federal awards, the DHS is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. The DHS is also required to comply with the procurement standards set forth in 2 CFR 200.317 through 2 CFR 200.327 of the Uniform Guidance. Pursuant to 2 CFR 200.317, “When conducting procurement transactions under a Federal award, a State… must follow the same policies and procedures it uses for procurements with non-Federal funds.” As a state agency, the DHS adheres to the State of Georgia Procurement Manual issued by the Department of Administrative Services (DOAS). Per the State of Georgia Procurement Manual, all contract extensions must occur in writing and require the supplier’s consent. The State Procurement Department’s (SPD) prior consent to the contract extension may also be required depending on the type of extension. Condition: Our examination of compliance with Procurement and Suspension and Debarment regulations for the Cash Assistance program revealed that the DHS did not follow the State of Georgia’s ongoing contract management process for the continuation of services. The DHS was also unable to provide a written notice of extension or amendment to continue services and was unable to provide documentation of written permission from the SPD. Cause: Through discussion with the DHS management, the DHS relied on the contractor to replace cash assistance cards that were lost or undeliverable in the prior year under the original terms of the contract rather than extending or amending the contract. Effect: Without a valid contract extension or amendment, federal funds may be used in a manner that is not in compliance with federal provisions and the Georgia Procurement Manual. Recommendation: The DHS should improve internal controls as they relate to the procurement and contracting processes to ensure that all contract extensions or amendments follow the processes established in the Georgia Procurement Manual. Views of Responsible Officials: DHS concurs with the finding.
2025-019 Improve Controls over Eligibility Determinations Compliance Requirement: Eligibility Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Number and Title: 93.558 – Temporary Assistance for Needy Families Federal Award Numbers: 2101GATANF (2021), 2201GATANF (2022), 2301GATANF (2023), 2401GATANF (2024), 2501GATANF (2025) Questioned Costs: $2,379 Description: The Department of Human Services should improve internal controls and monitoring over eligibility requirements to ensure that only eligible individuals receive benefits from the Temporary Assistance for Needy Families Program. Background Information: The Department of Human Services (DHS) delivers a wide range of services designed to promote self-sufficiency, safety, and well-being for all Georgians. In delivering these services, the DHS is awarded funding associated with the Temporary Assistance for Needy Families (TANF) program. The TANF program was designed to provide time-limited assistance to needy families with children so that the children can be cared for in their own homes or in the homes of relatives; to end dependence of needy parents on government benefits by promoting job preparation, work, and marriage; to prevent and reduce the incidence of out-of-wedlock pregnancies, including establishing prevention and reduction goals; and to encourage the formation and maintenance of two-parent families. The TANF program has specific eligibility requirements that must be satisfied by beneficiaries to receive TANF assistance. As part of the application process, applicants are required to complete and submit various forms to document eligibility information, including the Form 354, Expense Statement, which is used to verify income for the purpose of determining initial and ongoing eligibility for TANF benefits. Criteria: As a recipient of federal awards, the DHS is required to establish, document, and maintain effective internal control over federal awards that provide reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) Section 200.303 – Internal Controls. Eligibility determination requirements for the TANF program are addressed in Section 1300 of the DHS TANF Policy Manual. In accordance with provisions reflected in the TANF Policy Manual, benefits should only be paid to recipients who meet applicable eligibility criteria. Condition: Our audit of the TANF program revealed deficiencies in the performance of eligibility determinations. The DHS paid TANF benefits totaling $12,200,599 to 5,338 beneficiaries during the period under review. A sample of 40 individual case files was randomly selected for testing using a nonstatistical sampling method. Auditors performed procedures to determine if eligibility determinations were performed appropriately. Testing revealed that three case files did not include the required Form 354. Therefore, these individuals were deemed to be ineligible for benefits and overpaid by a total of $2,379. Questioned Costs: Upon testing a sample of $102,055 of TANF benefits payments, known questioned costs of $2,379 were identified for benefit payments to ineligible TANF recipients. Using the total population amount of $12,200,599, we project the likely questioned costs to be approximately $284,408. Cause: Through discussion with the DHS, management stated that high staff turnover resulted in increased training demands and caused delays in case processing and caseload management. In addition, established policies and procedures were not consistently followed, which resulted in errors in case processing. Effect: The deficiencies in eligibility determinations resulted in noncompliance with federal regulations. Also, grant provisions allow the grantor to penalize the DHS for noncompliance by suspending or terminating the award or withholding future awards. In addition, the DHS may be providing TANF benefits to ineligible individuals and claiming federal reimbursement for unallowable expenditures. Recommendation: We recommend that DHS: • Follow established processes and procedures associated with TANF eligibility determinations. • Clearly define roles and responsibilities for personnel involved in the eligibility process to ensure compliance with TANF rules and regulations; and • Incorporate additional oversight, training, and/or staff to aid in the applicant intake and case management process to ensure that only eligible individuals receive benefits. We also recommend that management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: DHS concurs with the finding.
2025-025 Improve Controls over Transparency Act Reporting Compliance Requirement: Reporting Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Number and Title: 93.667 – Social Services Block Grant Federal Award Numbers: 2301GASOSR (Year: 2023), 2401GASOSR (Year: 2024), 2501GASOSR (Year: 2025) Questioned Costs: None Identified Description: The Georgia Department of Human Services and the Georgia Department of Behavioral Health and Developmental Disabilities should improve internal controls over required Federal Funding Accountability and Transparency Act reporting to ensure that information is reported appropriately and timely. Background Information: The Social Services Block Grant (SSBG) is a flexible funding source that allows states and territories to tailor social service programming to their population’s needs. Through the SSBG, states provide essential social services that help achieve a myriad of goals to reduce dependency and promote self-sufficiency; protect children and adults from neglect, abuse, and exploitation; and help individuals who are unable to take care of themselves to stay in their homes or to find the best institutional arrangements. Funds associated with the SSBG program are provided by the Georgia Department of Human Services (DHS) to the Georgia Department of Behavioral Health and Developmental Disabilities (DBHDD) for allocation to eligible subrecipients. Because the DBHDD subgrants program funds to various entities, the DBHDD must comply with the Federal Funding Accountability and Transparency Act of 2006 (FFATA). The FFATA requirements were signed into law on September 26, 2006 in an effort to give the American public access to information on how their tax dollars are being spent. This information, including information associated with the use of the SSBG program funds, is accessible via the USAspending.gov website. Criteria: As a recipient of federal awards, the DBHDD is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Under the FFATA (Public Law 109-282), as codified in Title 2 CFR Part 170, Reporting Subaward and Executive Compensation Information, recipients of grants or cooperative agreements, including DBHDD who make first-tier subawards of $30,000 or more are required to register in the System for Award Management (SAM.gov). Subaward data, such as the subaward date, subawardee Unique Entity Identifier number, amount of subaward, subaward obligation/action date, date of report submission, and subaward number, are submitted through SAM.gov and accessible to the general public through the USAspending.gov website. Condition: Our examination of reporting requirements associated with the SSBG program revealed that the DBHDD failed to submit subaward data to SAM.gov. Therefore, all first-tier subawards of $30,000 or more, and the associated subaward data, were not reflected on the USAspending.gov website as required. Cause: Through discussion with the DBHDD and the DHS management, it was noted that the Memorandum of Understanding (MOU) between the entities for the state pass-through of SSBG program funds did not outline specific responsibility for reporting the first-tier subawards of $30,000 or more. The DBHDD did not provide the DHS with information related to the subawards of $30,000 or more and the associated subaward data. In addition, staff turnover resulted in internal control processes and procedures not being followed in regard to FFATA reporting. Effect: The deficiencies noted in the FFATA reporting process resulted in noncompliance with federal regulations. Without effective controls in place to ensure compliance with federal reporting requirements, the transparency objective associated with the FFATA requirements was not achieved as the general public was unable to review all expenditure data associated with the State of Georgia’s SSBG program. Recommendation: We recommend that the DHS and the DBHDD: • Implement and document processes and procedures associated with the FFATA reporting requirements. • Incorporate additional oversight, training, and/or staff to aid in the identification of subawards to be reported and the reporting of appropriate data elements, as applicable, in a timely manner. • Maintain documentation of subaward agreements and the determination of whether each subaward should be entered into SAM.gov in compliance with the FFATA reporting requirements. • Update the MOU between the DHS and the DBHDD to include clear role responsibilities between the entities related to FFATA reporting requirements. Views of Responsible Officials: DBHDD agrees with this finding
2025-020 Improve Controls over Eligibility Determinations Compliance Requirement: Eligibility Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Number and Title: 93.767 – Children’s Health Insurance Program Federal Award Numbers: 2405GA5021 (Year: 2024); 2505GA5021 (Year: 2025) Questioned Costs: $260 Repeat of Prior Year Finding: 2024-027 Description: The Department of Community Health and Department of Human Services did not have adequate controls in place to ensure that the required continuing eligibility determinations were performed. Background Information: The Department of Community Health (DCH) administers the Children’s Health Insurance Program (CHIP) that provides child medical coverage to low-income families who exceed Medicaid income limits. CHIP is a large public assistance program in Georgia with federal and state funds totaling approximately $761 million for fiscal year 2025. Eligibility for the CHIP program is determined by the Division of Family and Children Services (DFCS), a division within the Department of Human Services (DHS), which has offices in each of the 159 counties in the State of Georgia. Once eligibility information has been obtained, the DFCS enters the individual into the Georgia Gateway eligibility system, and an approval or denial notice is generated. The Georgia Medicaid Management Information System (GAMMIS) is updated through the Georgia Gateway interface when eligibility for a member is approved. When eligibility is denied, the DFCS sends the denial notice to the DCH, which triggers the removal of the denied member from GAMMIS. Additionally, children covered by public or private health, Third Party Liability (TPL), insurance are ineligible for coverage under CHIP. Criteria: As recipients of federal awards, both the DCH and the DHS are required to establish, document, and maintain effective internal controls over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) Section 200.303 – Internal Controls. Chapter 2200, Basic Eligibility Criteria, of the DFCS Medicaid Policy Manual outlines the eligibility determination requirements for CHIP members. Specifically, Section 30 addresses requirements associated with TPLs, and Section 55 addresses age requirements for participation in Family Medicaid. In accordance with these provisions, claims should only be paid on behalf of recipients who meet the eligibility criteria. Condition: Our audit of the CHIP program revealed deficiencies in the performance of eligibility determinations. During fiscal year 2025, the DCH paid CHIP benefits totaling $725,407,936 for 1,382,228 claims transactions. We used a nonstatistical sampling method to select a random sample of 40 benefit payments from this population and tested the sample to determine if eligibility determinations were performed appropriately. Upon completing this testing, it was determined that two members were covered by TPL insurance and therefore, should have been deemed ineligible for benefits. Questioned Costs: Known questioned costs of $260 were identified for benefit payments to the two ineligible CHIP members. The Federal and State share of questioned cost is approximately $198 and $62, respectively. Using the total population amount of $725,407,936, we project the likely questioned costs to be approximately $60,913,280. The Federal and State share of likely questioned costs is approximately $46,434,193 and $14,479,087, respectively. Cause: The processes that the DFCS performed did not ensure the correct eligibility determinations were made for all CHIP members. The DCH monitoring was not effective over eligibility information contained in the Georgia Gateway and GAMMIS systems. Effect: The deficiencies in eligibility determinations resulted in material noncompliance with federal regulations. Also, grant provisions allow the grantor to penalize the DCH for noncompliance by suspending or terminating the award or withholding future awards. In addition, the DCH may be providing CHIP benefits to ineligible individuals and claiming federal reimbursement for unallowable expenditures. Recommendation: The DCH and DHS management should strengthen oversight of the DFCS eligibility determinations for CHIP members to ensure they are being performed as required. Specifically, we recommend that: • The DCH management should review and improve their procedures for monitoring eligibility, and provide training as necessary to responsible staff; and • The DHS management should continue to provide training associated with these compliance requirements to all staff. We also recommend management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: DHS concurs with the finding.
2025-018 Improve Controls over Medicaid Eligibility Determinations for Ex Parte Members Compliance Requirement: Eligibility Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Number and Title: 93.778 – Grants to States for Medicaid Federal Award Numbers: 2405GA5MAP (Year: 2024); 2505GA5MAP (Year: 2025) Questioned Costs: $5,247 Repeat of Prior Year Finding: 2024-028 Description: The Department of Community Health and Department of Human Services did not have effective internal controls in place to ensure the required continuing Medicaid eligibility determinations were performed for Supplemental Security Income Ex Parte members. Background Information: The Department of Community Health (DCH) administers the State’s Medicaid program that provides payments for medical assistance to low-income individuals. Medicaid is one of Georgia’s largest public assistance programs with federal and state funds totaling approximately $18 billion for fiscal year 2025. Eligibility for the Medicaid program is determined by the Division of Family and Children Services (DFCS), a division within the Department of Human Services (DHS), which has offices in each of the 159 counties in the State of Georgia. Individuals who are eligible for Supplemental Security Income (SSI) are also eligible for the Medicaid benefits, and those whose SSI benefits are terminated or denied by the Social Security Administration are SSI Ex Parte members for the Medicaid program. For those members, the DCH makes temporary determinations of continued eligibility under a new Ex Parte Medicaid Class of Assistance in the Georgia Medicaid Management Information System (GAMMIS). The DFCS is responsible for performing a Continuing Medicaid Determination (CMD) for each new SSI Ex Parte member. The DFCS uses the daily Ex Parte Determination Reports generated by GAMMIS to identify the new SSI Ex Parte members that require a CMD. GAMMIS also generates monthly Ex Parte Non-Confirmation Reports, which identify all entries from the Ex Parte Determination Reports that are over 30-days old and have not yet been acted upon. When a CMD is complete, the DFCS enters the individual in the Georgia Gateway eligibility system, and an approval or denial notice is generated. GAMMIS is updated through the Georgia Gateway interface when eligibility for a member is approved. When eligibility is denied, the DFCS sends the denial notice to the DCH, which triggers the removal of the denied member from GAMMIS. Criteria: As recipients of federal awards, both the DCH and the DHS are required to establish, document, and maintain effective internal controls over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) Section 200.303 – Internal Controls. The eligibility determination requirements for SSI Ex Parte members are addressed in Chapter 2700, Section 50 - DCH Reports - Ex Parte Lists of the DHS Medicaid Manual. In accordance with provisions reflected in the Medicaid Manual, the DFCS is required to perform eligibility determinations of those members whose SSI benefits are terminated or denied. Condition: Our audit of the Medicaid program revealed deficiencies in the performance of eligibility determinations for SSI Ex Parte members. During fiscal year 2025, the DCH paid Medicaid SSI Ex Parte members benefits totaling $51,119,147 for 9,082 members. We used a nonstatistical sampling method to select a random sample of 60 Ex Parte benefit payments from this population and tested the sample to determine if eligibility determinations were performed appropriately. The following deficiencies were identified: • 45 members were denied by the DFCS in Georgia Gateway but remained active in GAMMIS in error. • GAMMIS reflected one member as deceased; however, benefit payments continued to be made. • Eligibility determinations were not performed for six members tested. Questioned Costs: Known questioned costs of $5,247 were identified for benefit payments to the 52 ineligible SSI Ex Parte members. The Federal and State share of questioned cost is approximately $3,464 and $1,783, respectively. Using the total population amount of $51,119,147, we project the likely questioned costs to be approximately $30,958,586. The Federal and State share of likely questioned costs is approximately $20,438,675 and $10,519,911, respectively. Cause: The processes that the DFCS performed did not ensure the required eligibility determinations were made for all SSI Ex Parte members. Also, while the DCH has systems in place to automate the eligibility process, the Georgia Gateway and GAMMIS systems were not properly interfaced. This resulted in a failure to effectively update member eligibility data between the two platforms. Effect: The deficiencies in eligibility determinations resulted in noncompliance with federal regulations. Also, grant provisions allow the grantor to penalize the DCH for noncompliance by suspending or terminating the award or withholding future awards. In addition, the DCH may be providing Medicaid benefits to ineligible individuals and claiming federal reimbursement for unallowable expenditures. Recommendation: The DCH and DHS management should strengthen oversight of the DFCS eligibility determinations for SSI Ex Parte members to make certain they are being performed timely and accurately. Specifically, management should: • Dedicate the necessary resources to ensure that the Georgia Gateway and GAMMIS systems are interfaced properly; • Review settings within GAMMIS to prevent payments associated with deceased individuals; • Oversee a reconciliation process between members with completed CMDs to members listed on the daily and monthly Ex Parte Determination Reports; and • Continue to provide training associated with these compliance requirements to all staff. We also recommend that management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: We concur with this finding.
2025-021 Improve Controls over Medicaid Eligibility Determinations for Non-SSI Members Compliance Requirement: Eligibility Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Number and Title: 93.778 – Grants to States for Medicaid Federal Award Numbers: 2405GA5MAP (Year: 2024); 2505GA5MAP (Year: 2025) Questioned Costs: $187 Description: The Department of Community Health and Department of Human Services did not have effective internal controls in place to ensure the required continuing Medicaid eligibility determinations were performed for Non-Supplemental Security Income members. Background Information: The Department of Community Health (DCH) administers the State’s Medicaid program that provides payments for medical assistance to low-income individuals. Medicaid is one of Georgia’s largest public assistance programs with federal and state funds totaling approximately $18 billion for fiscal year 2025. Eligibility for the Medicaid program is determined by the Division of Family and Children Services (DFCS), a division within the Department of Human Services (DHS), which has offices in each of the 159 counties in the State of Georgia. Once eligibility information has been obtained, the DFCS enters the individual in the Georgia Gateway eligibility system, and an approval or denial notice is generated. The Georgia Medicaid Management Information System (GAMMIS) is updated through the Georgia Gateway interface when eligibility for a member is approved. When eligibility is denied, the DFCS sends the denial notice to the DCH, which triggers the removal of the denied member from GAMMIS. Criteria: As recipients of federal awards, both the DCH and the DHS are required to establish, document, and maintain effective internal controls over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) Section 200.303 – Internal Controls. The eligibility determination requirements for Non-Supplemental Security Income (Non-SSI) members are addressed in Chapter 2200, Section 55 – Age (Family Medicaid) of the DHS Medicaid Manual. In accordance with provisions reflected in the Medicaid Manual, claims should only be paid on behalf of recipients who meet the eligibility criteria. Condition: Our audit of the Medicaid program revealed deficiencies in the performance of eligibility determinations for Non-SSI members. During fiscal year 2025, the DCH paid Medicaid Non-SSI members benefits totaling $9,047,815,777 for 6,111,754 claims transactions. We used a nonstatistical sampling method to select a random sample of 33 Non-SSI benefit payments from this population and tested the sample to determine if eligibility determinations were performed appropriately. The following deficiencies were identified: • One member was erroneously determined to be eligible because the incorrect pay frequency was used in the income rate determination. • One member was a newborn at the time that eligibility was determined, and the required Social Security Number documentation was not updated once the child reached one year of age. • One member’s eligibility was limited to the Public Health Emergency (PHE) period, but their renewal was extended beyond the authorized timeframe. Questioned Costs: Known questioned costs of $187 were identified for benefit payments to the three ineligible Non-SSI members. The Federal and State share of questioned cost is approximately $123 and $64, respectively. Using the total population amount of $9,047,815,777, we project the likely questioned costs to be approximately $270,771,946. The Federal and State share of likely questioned costs is approximately $178,780,013 and $91,991,933, respectively. Cause: The processes that the DFCS performed did not ensure the required eligibility criteria were met. Additionally, the process did not ensure PHE-related eligibility was terminated as required. Furthermore, the DCH monitoring process was not adequate to identify data fields that were incomplete or not current in the transmission between the Georgia Gateway and GAMMIS systems. Effect: The deficiencies in eligibility determinations resulted in noncompliance with federal regulations. Also, grant provisions allow the grantor to penalize the DCH for noncompliance by suspending or terminating the award or withholding future awards. In addition, the DCH may be providing Medicaid benefits to ineligible individuals and claiming federal reimbursement for unallowable expenditures. Recommendation: The DCH and DHS management should strengthen oversight of the DFCS eligibility determinations for Non-SSI members to make certain they are being performed accurately. Specifically, we recommend that: • The DHS management should implement review procedures that ensure data is entered correctly; • The DHS and DCH management should implement monitoring procedures that target incomplete required data elements; • The DHS and DCH management should implement monitoring procedures over waiver recipients prior to the end of the waiver period to ensure correct determinations are made; and • The DHS management should continue to provide training associated with these compliance requirements to all staff. We also recommend that management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: DHS concurs with the finding.
2025-017 Continue to Strengthen Application Risk Management Program Compliance Requirement: Special Tests and Provisions Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Numbers and Titles: 93.767 – Children’s Health Insurance Program 93.767 – COVID-19 – Children’s Health Insurance Program 93.778 – Grants to States for Medicaid 93.778 – COVID -19 – Grants to States for Medicaid Federal Award Numbers: 2405GA5021 (Year: 2024), 2505GA5021 (Year: 2025), 2405GA5MAP (Year: 2024), 2405GA5ADM (Year: 2024), 2505GA5MAP (Year: 2025), 2505GA5ADM (Year: 2025) Questioned Costs: None Identified Repeat of Prior Year Findings: 2024-023, 2023-018, 2022-018, 2021-031, 2020-028, 2019-024, 2018-026, 2017-037, 2016-044 Description: The Department of Community Health should continue to strengthen controls over its application risk management program. Background Information: See Financial Finding at 2025-002. Criteria: See Financial Finding at 2025-002. Condition: See Financial Finding at 2025-002. Cause: See Financial Finding at 2025-002. Effect: See Financial Finding at 2025-002. Recommendation: See Financial Finding at 2025-002. Views of Responsible Officials: The Department of Community Health (DCH) concurs with the finding and recognizes the need to further strengthen and formalize elements of its enterprise application risk management and System Security Review (SSR) processes. While progress has been made in FY25, DCH acknowledges gaps in documented SSRs and in evidence of SOC report review and complementary user entity control (CUEC) validation. DCH remains committed to addressing these deficiencies through a structured, risk-based, and auditable approach.
2025-023 Improve Controls over Earmarking Requirements Compliance Requirement: Matching, Level of Effort, Earmarking Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Numbers and Titles: 93.958 – Block Grants for Community Mental Health Services 93.958 – COVID-19 – Block Grants for Community Mental Health Services Federal Award Numbers: B09SM085388 (Year: 2021), B09SM087284 (Year: 2021), B09SM087352 (Year: 2023) Questioned Costs: $2,872,330 Description: The Georgia Department of Behavioral Health and Developmental Disabilities should improve internal controls to ensure that earmarking requirements associated with federal programs are met. Background Information: The Community Mental Health Services Block Grant (MHBG) program was created to provide funds to states and territories to enable them to carry out their respective plans for providing comprehensive community-based mental health services for adults with serious mental illness and children with serious emotional disturbances. MHBG program funds are allocated to individual states based upon a formula. This funding is provided to the Georgia Department of Behavioral Health and Development Disabilities (DBHDD) and may be distributed by the DBHDD to cities, counties, or service providers within the State of Georgia to carry out activities associated with the state plan. In carrying out the state plan and providing community mental health services, the DBHDD must meet specific earmarking requirements to ensure that MHBG funds are used for specifically designated purposes or activities. Therefore, the DBHDD is responsible for implementing adequate controls to ensure that earmarking requirements are met and earmarked funds are accurately recorded, monitored, and reported. Criteria: As a recipient of federal awards, the DBHDD is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Provisions included in Title 42 of the U.S. Code (USC) §300x-9(c)(1) require states to “expend not less than 10 percent of the amount the State receives… each fiscal year to support evidence-based programs that address the needs of individuals with early serious mental illness, including psychotic disorders, regardless of the age of the individual at onset.” Provisions included in Title 42 USC §300x-9(c)(2) provide that “in lieu of expending 10 percent of the amount the State receives…, a State may elect to expend not less than 20 percent of such amount by the end of such succeeding fiscal year.” Further, provisions included in Title 42 USC §300x-9(d)(1) require states to “expend at least 5 percent of the amount the State receives… each fiscal year to support evidenced-based programs that address the crisis care needs of individuals with serious mental illnesses and children with serious emotional disturbances, which may include individuals (including children and adolescents) experiencing mental health crises demonstrating serious mental illness or serious emotional disturbance, as applicable.” Provisions included in Title 42 USC §300x-9(d)(3) provide that “in lieu of expending 5 percent of the amount the State receives…, a State may elect to expend not less than 10 percent of such amount to support such programs by the end of two consecutive fiscal years.” Condition: Upon review of award documentation associated with the MHBG program, auditors identified three MHBG awards for which closeout procedures were performed during the fiscal year under review. Therefore, these awards were specifically tested to ensure that earmarking requirements were met with regards to administrative expenses, evidence-based programs that address early serious mental illness, and evidenced-based programs that address crisis care. The following deficiencies were noted upon testing the earmarking requirements for award number B09SM085388, which was awarded a total of $30,385,390: • The DBHDD was required to expend at least 10 percent of amounts received, or $3,038,539, to support evidenced-based programs that address early serious mental illness. The DBHDD only expended $1,685,479 for this purpose. Therefore, the DBHDD should have expended an additional $1,353,060 to meet this earmarking requirement. • The DBHDD was required to expend at least 5 percent of amounts received, or $1,519,270, to support evidenced-based programs that address crisis care. However, no funds were expended for this purpose, and the DBHDD did not meet this earmarking requirement. Questioned Costs: Known questioned costs of $2,872,330 were identified for funding that should have been expended to satisfy earmarking requirements but was expended for other purposes. Cause: Per discussions with the DBHDD management, the complexity of administering multiple supplemental grant awards, along with the termination of one award prior to the original liquidation date, contributed to inconsistent monitoring of earmarking requirements. As a result, communication gaps and coordination challenges arose between program and finance management. Effect: The deficiencies noted with MHBG earmarking requirements resulted in noncompliance with federal regulations. Also, grant provisions allow the grantor to penalize the DBHDD for noncompliance by suspending or terminating the award or withholding future awards. Recommendation: We recommend that the DBHDD strengthen controls over earmarking requirements by ensuring established policies and procedures are consistently followed. Management should also enhance monitoring procedures over grant awards with multiple supplemental awards to ensure earmarked funds are accurately tracked and expended in accordance with applicable requirements. In addition, management should provide training to program and finance staff to improve coordination between departments, understanding of earmarking requirements, and timely identification of issues. We also recommend that management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: DBHDD agrees with the finding.
2025-022 Improve Controls over Transparency Act Reporting Compliance Requirement: Reporting Internal Control Impact: Material Weakness Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Numbers and Titles: 93.788 – Opioid STR 93.958 – Block Grants for Community Mental Health Services 93.958 – COVID-19 – Block Grants for Community Mental Health Services 93.959 – Block Grants for Prevention and Treatment of Substance Abuse 93.959 – COVID-19 – Block Grants for Prevention and Treatment of Substance Abuse Federal Award Numbers: H79TI085741 (Year: 2022), H79TI087737 (Year: 2024), B09SM089617 (Year: 2024), B09SM084001 (Year: 2021), B09SM085388 (Year: 2021), B09SM090335 (Year 2025), B08TI083934 (Year: 2021), B08TI085799 (Year: 2023), B08TI087031 (Year: 2024), B08TI083530 (Year: 2021), B08TI088098 (Year: 2025) Questioned Costs: None Identified Repeat of Prior Year Findings: 2024-030, 2023-023, 2022-025 Description: The Georgia Department of Behavioral Health and Developmental Disabilities should improve internal controls over required Federal Funding Accountability and Transparency Act reporting to ensure that information is reported appropriately and timely. Background Information: The Block Grants for Community Mental Health Services Block Grant (MHBG) program was created to provide funds to states and territories to enable them to carry out their respective plans for providing comprehensive community-based mental health services for adults with serious mental illness and children with serious emotional disturbances. MHBG program funds are allocated to individual states based upon a formula. This funding may be distributed to cities, counties, or service providers within each state to carry out activities associated with the state plan. The objective of the Substance Abuse Prevention and Treatment Block Grant (SABG) program is to provide funds to states, territories, and one Indian tribe for the purpose of planning, carrying out, and evaluating activities to prevent and treat, Substance Abuse (SA) and other related activities as authorized by the statute. The objective of the Opioid STR (OSTR) program is to provide funds to states and Tribes for the purpose of addressing the opioid crisis within their communities. OSTR program funds are for carrying out activities that supplement opioid-related activities and these activities are undertaken by the state agency that administers the SABG program. Funds associated with the MHBG, SABG, and OSTR programs are provided to the Georgia Department of Behavioral Health and Developmental Disabilities (DBHDD) for allocation to eligible entities, including local health agencies, community-based organizations, and other public or private entities, through subgrants. Because the DBHDD subgrants MHBG, SABG, and OSTR program funds to various entities, the DBHDD must comply with the Federal Funding Accountability and Transparency Act of 2006 (FFATA). The FFATA requirements were signed into law on September 26, 2006 in an effort to give the American public access to information on how their tax dollars are being spent. This information, including information associated with the use of MHBG, SABG, and OSTR program funds, is accessible via the USAspending.gov website. Criteria: As a recipient of federal awards, the DBHDD is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Under the FFATA (Public Law 109-282), as codified in Title 2 CFR Part 170, Reporting Subaward and Executive Compensation Information, recipients of grants or cooperative agreements, including the DBHDD, who make first-tier subawards of $30,000 or more are required to register in the System for Award Management (SAM.gov). Subaward data, such as the subaward date, subawardee Unique Entity Identifier number, amount of subaward, subaward obligation/action date, date of report submission, and subaward number, are submitted through SAM.gov and accessible to the general public through the USAspending.gov website. Condition: Our audit of the MHBG, SABG, and OSTR programs revealed there was no evidence of review and approval or a comparable internal control over the FFATA reports. Additionally, upon performing testing over FFATA reporting, auditors noted the following deficiencies: • From a population of 99 first-tier subawards or subaward modifications of $30,000 or more associated with the MHBG program, a sample of 15 subawards or subaward modifications totaling $3,185,584 was randomly selected for testing using a non-statistical sampling method. Auditors examined documentation to determine if the subrecipient’s information was properly reported on the USAspending.gov website. Testing revealed that all 15 subawards or subaward modifications tested were not reported timely. • From a population of 279 first-tier subawards or subaward modifications of $30,000 or more associated with the SABG program, a sample of 40 subawards or subaward modifications totaling $9,156,749 was randomly selected for testing using a non-statistical sampling method. Auditors examined documentation to determine if the subrecipient’s information was properly reported on the USAspending.gov website. Testing revealed that 37 subawards or subaward modifications totaling $8,303,493 were not reported timely. • From a population of 48 first-tier subawards or subaward modifications of $30,000 or more associated with the OSTR program, a sample of seven subawards or subaward modifications totaling $2,607,200 was randomly selected for testing using a non-statistical sampling method. Auditors examined documentation to determine if the subrecipient’s information was properly reported on the USAspending.gov website. Testing revealed that one subaward or subaward modification totaling $550,700 was reported under the incorrect federal award identification number and five subawards or subaward modifications totaling $2,015,000 were not reported timely. Cause: Formal internal control processes for FFATA reporting were established but not implemented correctly during the fiscal year under review. As a result, noncompliance occurred with respect to FFATA reporting. Effect: The deficiencies noted in the FFATA reporting process resulted in noncompliance with federal regulations. Without effective controls in place to ensure compliance with federal reporting requirements, the transparency objective associated with the FFATA requirements may not be achieved as the general public was unable to review timely expenditure data associated with the State of Georgia’s MHBG, SABG, and OSTR programs. Recommendation: We recommend that the DBHDD: • Implement and document established processes and procedures associated with the FFATA reporting requirements. • Incorporate additional oversight, training, and/or staff to aid in the identification of subawards to be reported and the reporting of appropriate data elements, as applicable, in a timely manner; and • Review, update, and maintain documentation of subaward agreements and the determination of whether each subaward should be entered into SAM.gov in compliance with the FFATA reporting requirements. Views of Responsible Officials: DBHDD agrees with this finding.
2025-024 Improve Controls over Earmarking Requirements Compliance Requirement: Matching, Level of Effort, Earmarking Internal Control Impact: Significant Deficiency Compliance Impact: Nonmaterial Noncompliance Federal Awarding Agency: U.S. Department of Health and Human Services Pass-Through Entity: None AL Numbers and Titles: 93.959 – Block Grants for Prevention and Treatment of Substance Abuse 93.959 – COVID-19 – Block Grants for Prevention and Treatment of Substance Abuse Federal Award Numbers: B08TI083934 (Year: 2021, B08TI083530 (Year: 2021), B08TI085799 (Year: 2023) Questioned Costs: $3,015,691 Description: The Georgia Department of Behavioral Health and Developmental Disabilities should improve internal controls to ensure that earmarking requirements associated with federal programs are met. Background Information: The objective of the Substance Abuse Prevention and Treatment Block Grant (SABG) program is to provide funds to states, territories, and one Indian tribe for planning, carrying out, and evaluating activities to prevent, treat, and provide recovery services for Substance Abuse (SA) and other related activities as authorized by the statute. SABG program funding is provided to the Georgia Department of Behavioral Health and Development Disabilities (DBHDD) to carry out these activities. In carrying out these activities, the DBHDD must meet specific earmarking requirements to ensure that SABG funds are used for specifically designated purposes or activities. Therefore, the DBHDD is responsible for implementing adequate controls to ensure that earmarking requirements are met and earmarked funds are accurately recorded, monitored, and reported. Criteria: As a recipient of federal awards, the DBHDD is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Provisions included in Title 45 CFR Sections 96.124 (b)(1) require states to “expend not less than 20 percent for programs for individuals who do not require treatment for substance abuse, which programs – (i) educate and counsel the individuals on such abuse; and (ii) provide for activities to reduce the risk of such abuse by the individuals.” Further, provisions included in Title 42 of the U.S. Code §300x-24(b) define designated states as “any State whose rate of cases of acquired immune deficiency syndrome is 10 or more such cases per 100,000 individuals (as indicated by the number of such cases reported to and confirmed by the Director of the Centers for Disease Control and Prevention for the most recent calendar year for which such data are available)” and require designated states to expend not less than two percent and not more than five percent of the SABG award amount to carry out one or more projects to make available to individuals early intervention services for human immunodeficiency virus (EIS HIV) at the sites where the individuals are undergoing substance abuse treatment. Condition: Upon review of award documentation associated with the SABG program, auditors identified three SABG awards for which closeout procedures were performed during the fiscal year under review. Therefore, these awards were specifically tested to ensure that earmarking requirements associated with primary prevention programs for individuals who do not require treatment, carrying out one or more projects to make available to individuals EIS HIV, and administration expenses had been satisfied. The following deficiencies were noted: • For award number B08TI083934, which totaled $38,820,318, the DBHDD was required to expend at least 20 percent of the award amount, or $7,764,064, to support primary prevention programs for individuals who do not require treatment. The DBHDD only expended $5,781,988 for this purpose. Therefore, the DBHDD should have expended an additional $1,982,076 to meet this earmarking requirement. • For award number B08TI085799, $58,922,488 of the total award was subject to EIS HIV earmarking requirements. The DBHDD was required to expend a maximum of five percent of the adjusted award amount, or $2,946,124, to carry out one or more projects to make available to individuals EIS HIV. However, the DBHDD expended $3,675,943 for this purpose, exceeding the maximum amount by $729,819. • For award number B08TI083530, which totaled $50,518,974, the DBHDD was required to expend a maximum of five percent of the award amount, or $2,525,949 to carry out one or more projects to make available to individuals EIS HIV. However, the DBHDD expended $2,829,745 for this purpose, exceeding the maximum amount by $303,796. Questioned Costs: Known questioned costs of $3,015,691 were identified for funding that was expended in excess of earmarking requirements or should have been expended to satisfy earmarking requirements but was expended for other purposes. Cause: Per discussions with DBHDD management, the complexity of administering multiple supplemental grant awards, along with the termination of one award prior to its liquidation date, contributed to inconsistent monitoring of earmarking requirements. As a result, communication gaps and coordination challenges arose between program and finance management. Effect: The deficiencies noted with SABG earmarking requirements resulted in noncompliance with federal regulations. Also, grant provisions allow the grantor to penalize the DBHDD for noncompliance by suspending or terminating the award or withholding future awards. Recommendation: We recommend that the DBHDD strengthen controls over earmarking requirements by ensuring established policies and procedures are consistently followed. Management should also enhance monitoring procedures over grant awards with multiple supplemental awards to ensure earmarked funds are accurately tracked and expended in accordance with applicable requirements. In addition, management should provide training to program and finance staff to improve coordination between departments, understanding of earmarking requirements, and timely identification of issues. We also recommend that management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: DBHDD agrees with this finding.
2025-034 Improve Controls over Indirect Cost Rate Plan Compliance Requirement: Allowable Costs/Cost Principles Internal Control Impact: Material Weakness Compliance Impact: Material Noncompliance Federal Awarding Agencies: U.S. Social Security Administration Pass-Through Entities: None AL Number and Title: 96.001 – Social Security Disability Insurance Federal Award Numbers: 2504GADI00 (Year: 2025), 2404GADI00 (Year: 2024) Questioned Costs: $4,363,991 Description: The Georgia Vocational Rehabilitation Agency did not have a federally approved negotiated indirect cost rate agreement in place with its cognizant Federal agency for the fiscal period under audit. Background Information: The Social Security Disability Insurance (DI) program was established in 1954 under Title II of the Social Security Act and provides benefits to disabled wage earners and their families in the event the family wage earner becomes disabled. The Georgia Vocational Rehabilitation Agency (GVRA) works with the U.S. Social Security Administration (SSA) to make disability determinations for Georgia citizens and ultimately disburses DI program funding to eligible recipients. In performing this work, the GVRA incurs both direct and indirect costs. Under federal regulations, indirect costs charged to the DI program should be based on a rate approved by the cognizant federal agency, SSA, as evidenced by a written agreement. Criteria: As a recipient of federal awards, the GVRA is required to establish, document, and maintain effective internal control over federal awards that provides reasonable assurance of managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards pursuant to Title 2 U.S. Code of Federal Regulations (CFR) Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), Section 200.303 – Internal Controls. Additionally, provisions included in the Uniform Guidance, Appendix VII to Part 200 – States and Local Government and Indian Tribe Indirect Cost Proposals, Section D1(b) state, “A governmental department or agency… that receives more than $35 million in direct Federal funding during its fiscal year must submit its indirect cost rate proposal to its cognizant agency for indirect costs.” Section D(1)(d) further explains that “Indirect cost proposals must be developed (and, when required, submitted) within six months after the close of the governmental unit’s fiscal year, unless an exception is approved by the cognizant agency for indirect costs.” Condition: Our audit of the DI program included a review of indirect cost expenditures charged to the program. Our review revealed that the indirect cost rate plan utilized was related to fiscal year 2015 and was not federally approved for the fiscal year under review. Therefore, unallowable indirect costs totaling $4,363,991 were calculated using this unapproved indirect cost rate plan and recorded through four journal entries during the year under review. Questioned Cost: Known questioned costs of $4,363,991 were identified for expenditures that were not supported by a federally approved indirect cost rate plan. These known questioned costs related to expenditures that were not tested as part of a sample, and therefore, should not be projected to a population to determine likely questioned costs. Cause: Because the GVRA is administratively attached to the Georgia Department of Human Services, the GVRA management faced challenges determining the appropriate cognizant Federal agency with whom to communicate and confusion associated with which indirect cost plan to implement for the fiscal year under review. Therefore, for fiscal year 2025, the GVRA followed the methodology from the most recently approved indirect cost rate plan, which was from fiscal year 2015. Effect: The deficiencies noted in the indirect cost process resulted in noncompliance with federal regulations and questioned costs. Without effective controls in place, there is an increased risk of federal funds being expended for unallowable purposes and untimely detection and correction of noncompliance. Also, grant provisions allow the grantor to penalize the GVRA for noncompliance by suspending or terminating the award or withholding future awards. Recommendation: Management should improve controls over indirect costs to ensure an indirect cost rate proposal is developed and submitted to the cognizant Federal agency for negotiation and approval within six months of each fiscal year end. Additionally, the GVRA management should incorporate additional oversight, training, and/or staffing within the indirect cost rate proposal process. We also recommend that management consult with the grantor to discuss whether the questioned costs identified in the audit should be repaid. Views of Responsible Officials: GVRA believes its internal controls and cost allocation practices are aligned with established standard operating procedures. In early 2024, GVRA engaged with an accounting firm specializing in governmental cost allocation, to develop a Cost Allocation Plan reflective of the agency’s unique organizational structure, grant reporting requirements, and federal oversight. Given that GVRA’s federal funding is administered under the oversight of three separate federal agencies, the Cost Allocation Plan is subject to a formal, multi-agency review and approval process. GVRA’s established procedures require coordinated engagement with each federal cognizant agency and its parent agency to ensure documented compliance with all applicable statutory, regulatory, and oversight requirements. In late 2024, final revisions to the federal Uniform Guidance regarding the “de minimis” indirect cost rate were issued, providing GVRA the opportunity to simplify its cost allocation methodology and meet its federal compliance obligations under the updated standard. GVRA received written email approval from the Social Security Administration (SSA) to continue utilizing its current cost allocation methodology until a negotiated indirect cost rate is established. GVRA has undergone audit review by both SSA and the Rehabilitation Services Administration (RSA) under the current methodology, with no findings or questioned costs reported. Additionally, the current Georgia Department of Audits and Accounts (DOAA) audit has continued to review funds administered under this approach. Auditor’s Concluding Remarks: As noted above, the indirect cost plan presented for audit was drafted in 2015 and did not reflect the required evidence of approval by the grantor. Given that the plan was outdated and appeared to be unapproved, we reaffirm our finding and will review the status of the finding during our next audit.