Audit 402905

2 CFR 200.514 of the Uniform Guidance requires entities to have internal controls in place to monitor that expenditures are only for allowable activities and that services charged to the federal award are allowable per the applicable cost principles. In addition, a fundamental concept in a good system of internal controls is the segregation of duties; segregating access, custody, and authorization of transactions. These controls aid in mitigating risk in monitoring. Through inquiry and internal control testing, it was noted that the employees outside of the HR department have access to employee information within the system. This includes potential access to pay rates and other protected information inside the system. Payroll costs represent the majority of Federal award expenditures for the Medical Center.