Federal Agency: Department of Education Federal Program Title: Student Financial Assistance Cluster Assistance Listing Number: 84.063, 84.268 Award Period: June 1, 2024 to May 31, 2025 Type of Finding: • Significant Deficiency in Internal Control over Compliance Criteria or Specific Requirement: The 2 CFR section 200.303 requires that non-federal entities receiving federal awards establish and maintain internal control over the federal awards that provides reasonable assurance that the non-federal entity is managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards. Condition: During our testing, we noted the College did not have a formal review of their monthly reconciliations of Common Origination and Disbursement (COD) data with student account records, federal aid packaging by financial aid staff, and monitoring of the G5 system to ensure timely return of undisbursed funds after 240 days. Questioned Costs: N/A Context: The College did not have proper internal controls in place during the 2024-25 academic year to ensure compliance with federal statutes, regulations, and the terms and conditions of the federal award. Cause: The lack of documentation appears to stem from limited administrative capacity, particularly in the wake of operational disruptions and regulatory changes such as FAFSA Simplification. Effect: The College is not following the compliance with federal statutes, regulations, and the terms and conditions of the federal award. Repeat Finding: No Recommendation: We recommend the College review its procedures to ensure controls are in place to ensure to catch any inconsistencies that occur during the year. Views of Responsible Officials: There is no disagreement with the audit finding.
Finding 2025-001 – Procurement (Material Weakness) Repeat Finding: No Federal Agency – National Science Foundation; National Institute of Health Research and Development Cluster Social, Behavioral, and Economic Sciences – Passed through New York University: 47.075, Mathematical and Physical Sciences – Passed through Loyola University of Chicago: 47.049, Biological Sciences: 47.074, Allergy and Infectious Disease Research: 93.855 Federal Award Years: Year Ended May 31, 2025 Condition The College's procurement policy does not reflect all applicable state and local laws and federal regulations. For two out of three (67%) small purchase procurements, there was not sufficient evidence to support that documentation of the noncompetitive procurement method selected was provided at the time of purchase. Criteria Non-federal entities other than states, including those operating federal programs as subrecipients of states, must follow the procurement standards set out at 2 CFR sections 200.318 through 200.327. They must use their own documented procurement procedures, which reflect applicable state and local laws and regulations, provided that the procurements conform to applicable federal statutes and the procurement requirements identified in 2 CFR Part 200. In accordance with 2 CFR sections 200.319 and 200.320(f), price quotations should be obtained from an adequate number of qualified sources for procurements that meet the small purchase procurement threshold or require documentation in support of the rationale to limit competition in those cases where competition was limited. Uniform Grant Guidance (2 CFR 200.303) requires nonfederal entities receiving Federal awards establish and maintain internal controls deigned to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure the College has a procurement policy that meets the all applicable state and local laws and regulations. Questioned Costs There were no questioned costs related to this finding. Cause The College does not have a procurement policy that follows the procurement standards set out at 2 CFR sections 200.318 through 200.327. Context Two out of three vendors tested. Expenditures totaled $100,553. Effect Lack of a documented procurement policy that meets applicable state and local laws and federal regulations can result in improper procurement of goods and services which can lead to loss of future funding. Recommendation We recommend the College implement a procurement policy that conforms to federal regulations. We also recommend that the College implement policies and procedures around documentation of noncompetitive bidding. Views of Responsible Officials We agree with this finding. See corrective action plan.
Finding 2025-002 – Suspension and Debarment (Material Weakness) Repeat Finding: No Federal Agency – National Science Foundation; National Institute of Health Research and Development Cluster Biological Sciences: 47.074, Allergy and Infectious Disease Research: 93.855 Federal Award Years: Year Ended May 31, 2025 Condition For two out two vendors (100%) tested, the College did not provide sufficient documentation that a suspension and debarment check was performed prior to entering into a contract with the vendor. Criteria Non-federal entities are prohibited from contracting with or making subawards under covered transactions to parties that are suspended or debarred. “Covered transactions” include contracts for goods and services awarded under a non-procurement transaction (e.g., grant or cooperative agreement) that are expected to equal or exceed $25,000 or meet certain other criteria as specified in 2 CFR section 180.220 Uniform Grant Guidance (2 CFR 200.303) requires nonfederal entities receiving Federal awards establish and maintain internal controls deigned to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure suspension and debarment checks are performed and documented. Questioned Costs There were no questioned costs related to this finding. Cause The College did not have controls in place to reasonably ensure compliance with suspension and debarment requirements of the Uniform Guidance. Context Two out of two vendors tested. A subsequent check was confirmed that these vendors were not suspended or debarred. Effect If the College does not obtain documentation confirming a vendor for a procurement transaction was not suspended or debarred, the College could enter into a transaction with a suspended or debarred vendor causing unallowable costs and as a result represent noncompliance and result in a loss of federal funding. Recommendation We recommend the College review current processes for suspension and debarment to ensure that documentation is included to support the suspension and debarment check prior to entering into a contract with a vendor. Views of Responsible Officials We agree with this finding. See corrective action plan.
Finding 2025-003 – Student Financial Aid - Excess Cash (Significant Deficiency) Repeat Finding: No Federal Agency – U.S. Department of Education (ED) Student Financial Assistance Cluster Federal Direct Student Loans: 84.268 Federal Award Years: Year Ended May 31, 2025 Condition During our cash management testing, we identified that Lake Forest College had excess cash for the FDL program ranging from $24,903 to $3,683,698 during the period of January 30, 2025 through February 7, 2025. In this situation, the excess cash exceeded one percent of total prior year drawdowns, and the amount was not returned within a seven-day period. Criteria Uniform Grant Guidance (34 CFR 668.166) states the Secretary considers excess cash to be any amount of Title IV, HEA program funds, other than Federal Perkins Loan program funds, that an institution does not disburse to students by the end of the third business day following the date the institution (1) received those funds from the Secretary; or (2) deposited or transferred to its depository account previously disbursed Title IV, HEA program funds, such as those resulting from awards adjustments, recoveries, or cancellations. An institution may maintain for up to seven days an amount of excess cash that does not exceed one percent of the total amount of funds the institution drew down in the prior award year. The institution must return immediately to the Secretary any amount of excess cash over the one-percent tolerance and any amount of excess cash remaining in its account after the seven-day tolerance period. Uniform Grant Guidance (2 CFR 200.303) requires nonfederal entities receiving Federal awards establish and maintain internal controls deigned to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure excess cash is properly handled. Questioned Costs Questioned costs is the amount that exceeded one percent of total prior year drawdowns. Excess cash ranged from $24,903 to $3,683,698. Cause The College drew down funds in advance of the Spring semester which is allowed based on the College’s cash management method. However, due to timing differences, the funds were not ultimately disbursed to students until 8 days after the drawdown was made. Context One instance of excess cash during the fiscal year. Effect Excess cash is noncompliance with Federal regulation and could result in the loss of future funding. Untimely reconciliation of federal awards can result in over or under awarding of funding and result in heightened monitoring by the Department of Education. Recommendation We recommend the College review current processes for monitoring cash management and implement procedures that eliminate excess cash. Views of Responsible Officials We agree with this finding. See corrective action plan.
Finding 2025-004 – Enrollment Reporting (Significant Deficiency) Repeat Finding: No Federal Agency – U.S. Department of Education (ED) Student Financial Assistance Cluster Federal Pell Grant Program: 84.063 Federal Direct Student Loans: 84.268 Federal Work Study Program: 84.033 Federal Supplemental Educational Opportunity Grants 84.007 Federal Award Years: Year Ended May 31, 2025 Condition For three out of forty (7.5%) student enrollment reporting selections, the student's status change at the campus level and program was not properly reported to NSLDS with the required timeframe. Criteria CFR section 685.309 and 690.83(b)(2) requires the College to notify the NSLDS within 30 days of a change in student status or include the change in status in a response to an enrollment reporting roster within 60 days of the student’s date of determination of withdrawal. Uniform Grant Guidance (2 CFR 200.303) requires nonfederal entities receiving Federal awards establish and maintain internal controls deigned to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure accurate and timely enrollment reporting Questioned Costs There were no questioned costs related to testing of enrollment reporting. Cause The student's status change was after the last scheduled reporting transmission file of the semester, therefore their status change was not captured in the NSLDS reporting submission. Context Three out of forty students selected for testing. Effect Failure to report status changes accurately is noncompliance with Federal regulation and could result in heightened monitoring by the Department of Education. Recommendation We recommend the College implement review procedures to ensure that the proper effective date is being reported to the NSLDS when a student withdraws or has an enrollment status change. A system of review procedures and/or controls will ensure the College is reporting status changes accurately. Views of responsible officials We agree with this finding. See corrective action plan.
Special Tests and Provisions – Enrollment Reporting U.S. Department of Education, Student Financial Assistance Cluster, Assistance Listing Number 84.268 Federal Direct Student Loans, Assistance Listing Number 84.063 Federal Pell Grant Program Program Year 2024–2025 Type of Finding: Other Instance of Noncompliance and Deficiency Criteria: Per 2 CFR §200.303, 34 CFR 685.309, OMB No. 1845-0035 and the Federal Student Aid Handbook, institutions are required to report accurate and timely enrollment status changes, including graduation, to the NSLDS via the National Student Clearinghouse or other reporting mechanisms. Accurate reporting ensures proper administration of Title IV funds and prevents inappropriate loan deferments or repayments. Condition: The University did not ensure that all graduation data was accurately transmitted and reflected in the National Student Loan Data System (NSLDS). Questioned Costs: $0 Context: Out of the population of 167 students subject to enrollment reporting, a sample of 17 students were selected for testing. For 1 of the 17 students tested, NSLDS did not reflect the student’s graduation status on campus or program students in which the University’s records reported graduated. Effect: Failure to report accurate enrollment status may result in incorrect deferment or repayment statuses for student borrowers, potentially impacting loan servicing and compliance with federal regulations. Cause: The errors appear to be the result of a lapse in control by the University to ensure all graduation data was accurately transmitted and reflected in the NSLDS. Recommendation: We recommend the University enhance its controls over the enrollment reporting process to ensure that all graduation data is accurately and timely reported to the NSLDS. This may include periodic reconciliations between internal records and NSLDS data and follow-up procedures for discrepancies. Views of Responsible Officials: Management concurs with the finding and recommendation. Further information on the corrective action plan will be provided by management.
Finding 2025-001: Excess Cash – Student Financial Aid Federal Agency: U.S. Department of Education Program Name: Student Financial Assistance Cluster, Federal Direct Student Loans Assistance Listing Number: 84.268 Award Year: June 1, 2024 – May 31, 2025 Program Expenditures: $26,594,632 Questioned Costs: None Criteria: Uniform Grant Guidance (34 CFR 668.166) states the Secretary considers excess cash to be any amount of Title IV, Higher Education Act (HEA) program funds, other than Federal Perkins Loan program funds, that an institution does not disburse to students by the end of the third business day following the date the institution (1) received those funds from the Secretary; or (2) deposited or transferred to its depository account previously disbursed Title IV, HEA program funds, such as those resulting from awards adjustments, recoveries, or cancellations. An institution may maintain for up to seven days an amount of excess cash that does not exceed one percent of the total amount of funds the institution drew down in the prior award year. The institution must return immediately to the Secretary any amount of excess cash over the one-percent tolerance and any amount of excess cash remaining in its account after the seven-day tolerance period. Uniform Grant Guidance (2 CFR 200.303) requires nonfederal entities receiving Federal awards establish and maintain internal controls designed to reasonably ensure compliance with Federal laws, regulations, and program compliance requirements. Effective internal controls should include procedures to ensure excess cash is properly handled. Condition: The Kansas Health Science University (KHSU) had one instance of excess cash for the Federal Direct Student Loan program. During our cash management testing, we identified KHSU had excess cash for the Direct Loan program ranging from $94,646 to $190,735 for the period from March 21, 2025 to April 3, 2025. For the period of March 21, 2025 to April 3, 2025, the excess cash exceeded one percent of total prior year drawdowns and amounts were not returned within the seven-day period. Cause: University officials stated the excess cash issues were due to time needed to reconcile refunds with the Common Origination and Disbursement system. Effect: Excess cash is noncompliance with Federal regulations and could result in heightened monitoring by the U.S. Department of Education. Questioned Costs: None Context: For the period of March 21, 2025 to April 3, 2025, KHSU had excess cash ranging from $94,646 to $190,735. KHSU held excess cash for a period of 9 business days and 14 calendar days, respectively. Repeat Finding: Yes. (Finding 2024-001) Recommendation: We recommend KHSU strengthen internal controls around the determination of amounts to be drawn and refunded to the Secretary during the fiscal year. Views of Responsible Officials: Management agrees with the finding. Please see corrective action plan attached.
Item 2025-006 - Special Tests and Provisions - U.S. Department of Health and Human Services, Health Center Program Cluster (Assistance Listing Number 93.224/93.527) Notice of Award Number 6 H80CS00505-23-04, 6 H2ECS45602-02-04, 1 H8LCS50772-01-00 and 6 H8HCS46163-03-01 - (Significant Deficiency) Criteria: Per 2 CFR §200.303(d), non-Federal entities must take prompt action when instances of noncompliance are identified, including those found in audits and monitoring reviews. Entities are also required to establish and maintain effective internal control over federal awards, including monitoring and corrective action systems. Statement of Condition: During our audit, we noted that LBUCC conducted quarterly internal audit reviews of fifty (50) samples self-pay patients to review for sliding fee discount determination. However, we noted that the findings or exceptions identified in the quarterly internal audit review remained uncorrected. Cause: LBUCC did not have a formal tracking and follow-up procedure to ensure that internal audit findings are remediated in a timely and effective manner. Effect: Lack of procedures to track and follow up the remediation of detected errors increases the risk that errors may persist and may lead to noncompliance and/or financial reporting errors. Questioned Costs: None Context: LBUCC’s Operating Data Analyst haphazardly selects 50 samples from the sliding fee visits each quarter, inspects the supporting documentations and reviews the annual income calculation and sliding fee determination. The Operating Data Analyst noted 16 and 25 exceptions during the 3rd and 4th quarter internal reviews and none of these exceptions were communicated to the respective department and therefore all exceptions remained uncorrected. Identification as a Repeat Finding: This is not a repeat finding. Recommendation: We recommend that LBUCC establish a process for communicating, investigating and correcting all internal audit findings or exceptions on a timely manner. Additionally, we recommend that management identify the potential cause of such findings or exceptions and that necessary corrective actions be taken to address such cause. For example, LBUCC may conduct periodic training of all employees involved in the patient intake and screening process. Management Response: Management agrees with the finding and will implement these steps to strengthen our internal controls particularly the monitoring component as this is essential for sustaining compliance
Finding 2025-003 Identification of the Federal Program: U.S. Department of Housing and Urban Development: AL 14.267 – Continuum of Care Program Compliance Requirement: Procurement, Suspension and Debarment Type of Finding: Significant deficiency in internal controls over compliance. Criteria 2 CFR 200.303(a) of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) establishes that the auditee must establish and maintain effective internal control over the federal award that provides assurance that the entity is managing the federal award in compliance with federal statutes, regulations, and conditions of the federal award. The nonfederal entity’s documented procurement procedures must conform to the procurement standards identified in 2 CFR 200.317 through 200.327. 2 CFR 200 Appendix II requires certain provisions be included in contracts if criteria are met. As outlined in 2 CFR 180, recipients must not utilize any contractor which is suspended or debarred or is otherwise excluded from the central contractor registry. Statement of condition and cause The Organization’s procurement policy did not include all the required elements as outlined in the Uniform Guidance. Additionally, the Organization did not retain documentation to support the procedures performed to ensure compliance with suspension and debarment requirements. Effect Lack of complete procurement, suspension, and debarment policies and not retaining documentation to support compliance with suspension and debarment requirements could result in noncompliance with the Uniform Guidance. Questioned Costs N/A Repeat Finding No Recommendation We recommend that management develop a written procurement policy that conforms with the Uniform Guidance. In addition, we recommend that management implement procedures and control processes to retain documentation supporting compliance with major federal program compliance requirements regarding suspension and debarment. Management response See Corrective Action Plan
Criteria: 2 CFR section 200.303 states in part: “The non-Federal entity must establish and maintain effective internal control over Federal award that provides reasonable assurance that the non-Federal entity in managing the Federal awards in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the ‘Internal Control Integrated Framework’, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: An effective internal control system was not in place to ensure compliance with requirements related to the grant agreement and the Cash Management compliance requirements. Cause: Management is not utilizing the Head Start financial information from the general ledger and accounting software when preparing Head Start draws. Information used for the draws is compiled separately and no reconciliation between draws and the financial system occurs. Effect: Expenditures charged to the Head Start programs could potentially not be included in the Head Start draws. Recommendation: Each Head Start draw should be compiled and reconciled back to the financial statement and then reviewed by a secondary fiscal department employee. Management’s Response: The Agency acknowledges this error and agrees with the recommendations. The Agency provides the additional context that it has been determined that where incorrect drawdowns were made - they were underdrawn, not overdrawn. No drawdowns were determined to include anything beyond known, justifiable, and allowable expenses. Previous T &TA support from the Office of Head Start and monitoring reviews from other fiscal agencies had not previously revealed this concern and recommendations were made to carry out drawdowns in this manner. The Finance department is actively working with the new recommendation from the auditors to use the accounting system (MIP) and to implement a new payroll and reconciliation procedure which will prevent future errors.
Criteria: 2 CFR section 200.303 states in part: “The non-Federal entity must establish and maintain effective internal control over Federal award that provides reasonable assurance that the non-Federal entity in managing the Federal awards in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the ‘Internal Control Integrated Framework’, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: An effective internal control system was not in place to ensure compliance with requirements related to the grant agreement and the Cash Management compliance requirements. Cause: Management is not utilizing the Head Start financial information from the general ledger and accounting software when preparing Head Start draws. Information used for the draws is compiled separately and no reconciliation between draws and the financial system occurs. Effect: Expenditures charged to the Head Start programs could potentially not be included in the Head Start draws. Recommendation: Each Head Start draw should be compiled and reconciled back to the financial statement and then reviewed by a secondary fiscal department employee. Management’s Response: The Agency acknowledges this error and agrees with the recommendations. The Agency provides the additional context that it has been determined that where incorrect drawdowns were made - they were underdrawn, not overdrawn. No drawdowns were determined to include anything beyond known, justifiable, and allowable expenses. Previous T &TA support from the Office of Head Start and monitoring reviews from other fiscal agencies had not previously revealed this concern and recommendations were made to carry out drawdowns in this manner. The Finance department is actively working with the new recommendation from the auditors to use the accounting system (MIP) and to implement a new payroll and reconciliation procedure which will prevent future errors.
Finding 2025-003 Identification of the Federal Program: U.S. Department of Housing and Urban Development: AL 14.267 – Continuum of Care Program Compliance Requirement: Procurement, Suspension and Debarment Type of Finding: Significant deficiency in internal controls over compliance. Criteria 2 CFR 200.303(a) of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) establishes that the auditee must establish and maintain effective internal control over the federal award that provides assurance that the entity is managing the federal award in compliance with federal statutes, regulations, and conditions of the federal award. The nonfederal entity’s documented procurement procedures must conform to the procurement standards identified in 2 CFR 200.317 through 200.327. 2 CFR 200 Appendix II requires certain provisions be included in contracts if criteria are met. As outlined in 2 CFR 180, recipients must not utilize any contractor which is suspended or debarred or is otherwise excluded from the central contractor registry. Statement of condition and cause The Organization’s procurement policy did not include all the required elements as outlined in the Uniform Guidance. Additionally, the Organization did not retain documentation to support the procedures performed to ensure compliance with suspension and debarment requirements. Effect Lack of complete procurement, suspension, and debarment policies and not retaining documentation to support compliance with suspension and debarment requirements could result in noncompliance with the Uniform Guidance. Questioned Costs N/A Repeat Finding No Recommendation We recommend that management develop a written procurement policy that conforms with the Uniform Guidance. In addition, we recommend that management implement procedures and control processes to retain documentation supporting compliance with major federal program compliance requirements regarding suspension and debarment. Management response See Corrective Action Plan
Criteria: 2 CFR section 200.303 states in part: “The non-Federal entity must establish and maintain effective internal control over Federal award that provides reasonable assurance that the non-Federal entity in managing the Federal awards in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the ‘Internal Control Integrated Framework’, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: An effective internal control system was not in place to ensure compliance with requirements related to the grant agreement and the Cash Management compliance requirements. Cause: Management is not utilizing the Head Start financial information from the general ledger and accounting software when preparing Head Start draws. Information used for the draws is compiled separately and no reconciliation between draws and the financial system occurs. Effect: Expenditures charged to the Head Start programs could potentially not be included in the Head Start draws. Recommendation: Each Head Start draw should be compiled and reconciled back to the financial statement and then reviewed by a secondary fiscal department employee. Management’s Response: The Agency acknowledges this error and agrees with the recommendations. The Agency provides the additional context that it has been determined that where incorrect drawdowns were made - they were underdrawn, not overdrawn. No drawdowns were determined to include anything beyond known, justifiable, and allowable expenses. Previous T &TA support from the Office of Head Start and monitoring reviews from other fiscal agencies had not previously revealed this concern and recommendations were made to carry out drawdowns in this manner. The Finance department is actively working with the new recommendation from the auditors to use the accounting system (MIP) and to implement a new payroll and reconciliation procedure which will prevent future errors.
Criteria: 2 CFR section 200.303 states in part: “The non-Federal entity must establish and maintain effective internal control over Federal award that provides reasonable assurance that the non-Federal entity in managing the Federal awards in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ‘Standards for Internal Control in the Federal Government’ issued by the Comptroller General of the United States or the ‘Internal Control Integrated Framework’, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).” Condition: An effective internal control system was not in place to ensure compliance with requirements related to the grant agreement and the Cash Management compliance requirements. Cause: Management is not utilizing the Head Start financial information from the general ledger and accounting software when preparing Head Start draws. Information used for the draws is compiled separately and no reconciliation between draws and the financial system occurs. Effect: Expenditures charged to the Head Start programs could potentially not be included in the Head Start draws. Recommendation: Each Head Start draw should be compiled and reconciled back to the financial statement and then reviewed by a secondary fiscal department employee. Management’s Response: The Agency acknowledges this error and agrees with the recommendations. The Agency provides the additional context that it has been determined that where incorrect drawdowns were made - they were underdrawn, not overdrawn. No drawdowns were determined to include anything beyond known, justifiable, and allowable expenses. Previous T &TA support from the Office of Head Start and monitoring reviews from other fiscal agencies had not previously revealed this concern and recommendations were made to carry out drawdowns in this manner. The Finance department is actively working with the new recommendation from the auditors to use the accounting system (MIP) and to implement a new payroll and reconciliation procedure which will prevent future errors.
Assistance Listing, Federal Agency, and Program Name - 97.044, U.S. Department of Homeland Security, Assistance to Firefighters Grant Federal Award Identification Number and Year - N /A Pass through Entity - N/A Finding Type - Material weakness Repeat Finding - No Criteria - Per 2 CFR 200.303(a), the nonfederal entity must establish and maintain effective internal control over the federal awards that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal awards. These internal controls should be in compliance with the guidance in the "Standards for Internal Control in the Federal Government," issued by the Comptroller General of the United States, or the "Internal Control Integrated Framework," issued by the Committee of Sponsoring Organization of the Treadway Commission (COSO). Condition - The Township did not have the appropriate controls in place to ensure reports and reimbursement requests that were required to be submitted under the grant were complete and accurate as well as ensuring the matching requirement was properly reviewed. If questioned costs are not determinable, description of why known questioned costs were undetermined or otherwise could not be reported - N/A Identification of How Questioned Costs Were Computed - N/A Context - During testing of required reporting, as well as reimbursement requests submitted, it was noted that there was no evidence of supervisory reviews prior to submission of these documents. It was also noted there was no review in place over the matching requirment. Cause and Effect - The Township did not have the proper controls in place that lead to lack of appropriate reviews of reporting and requests for reimbursement could have resulted in instances of noncompliance. Recommendation - The Township should review its processes and controls in these areas to ensure that all reporting and reimbursement requests are appropriately reviewed. Views of Responsible Officials and Planned Corrective Actions - The Township agrees with the finding and will work to put controls in place to ensure reviews are performed appropriately.
2025-002 - Lack of Written Federal Program Policies. Type: Material Weakness. Condition: The Village does not have documented policies and procedures specific to the administration of the Coronavirus State and Local Fiscal Recovery Funds program. This includes the absence of written guidance on key compliance areas such as payments, procurement, allowability of costs charged to federal programs, compensation, and travel costs under Uniform Guidance. Criteria: Per 2 CFR 200.303 and 200.331 of the Uniform Guidance, non-federal entities are required to establish and maintain effective internal controls and written policies to ensure compliance with federal statutes, regulations, and the terms and conditions of federal awards. These policies should be tailored to the specific requirements of each federal program. Cause: The entity has not developed formal written policies and procedures for the Coronavirus State and Local Fiscal Recovery Funds program, possibly due to reliance on informal practices or general administrative policies that do not address federal-specific requirements. Effect: Without documented policies, there is an increased risk of noncompliance with federal requirements, inconsistent program administration, and lack of accountability. This may result in questioned costs, audit findings, or potential repayment of federal funds. Recommendation: We recommend that the Village develop and implement written policies and procedures specific to the Coronavirus State and Local Fiscal Recovery Funds program. These should include: - Payments in accordance with §200.302 (6), - Procurement in accordance with §200.318, - Allowability of costs charged to federal programs in accordance with §200.302 (7), - Compensation in accordance with §200.430 and §200.431, - Travel costs in accordance with §200.474. Training should also be provided to staff responsible for administering the program to ensure consistent application of these policies. Views of Responsible Officials: Management acknowledges the auditor’s finding regarding the absence of formally documented federal program policies. We recognize the importance of maintaining written procedures to ensure consistent compliance with Uniform Guidance requirements and to strengthen internal controls over federal awards. While informal practices have historically guided our federal program administration, we agree that formalizing these policies will enhance transparency, accountability, and operational efficiency. Management is currently in the process of developing written policies covering key areas such as procurement, allowable costs, subrecipient monitoring, and cash management. We anticipate completing this documentation and implementing the policies by February 28, 2026. We are committed to continuous improvement and appreciate the auditor’s recommendations as part of our efforts to maintain strong compliance and stewardship of federal funds.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: Project-Based Rental Assistance Assistance Listing Number: 14.195 Federal Award Identification Number and Year: 121EH007 Pass-Through Agency: N/A Award Period: April 1, 2024, to March 31, 2025 Compliance Requirement Affected: Eligibility Type of Finding: Significant Deficiency in Internal Control over Compliance Criteria or specific requirement: According to §200.303 Internal Controls of 2 CFR Part 200, the non‐Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non‐Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: Income thresholds, on HUD-50059 tenant recertification forms, were not properly updated to the applicable period, using available income limits published by HUD for the County of Santa Cruz. Questioned costs: None noted. Context: A nonstatistical sample of 12 out of 100 tenant files were selected for testing for the Section 8 Housing Assistance Payments Program. The discrepancy, in the maximum income limit, was identified during the auditor's testing of tenant eligibility to participate in the affordable housing program. Cause: Management oversight on properly updating the income limit thresholds. Effect: Noncompliance results in possible exclusion of eligible applicants as the income limits increased from the income limits used. Repeat Finding: Yes Recommendation: We recommend that the organization review the changes in income limits published by HUD during the tenant certification and recertification process in order to properly update income limits accordingly on form HUD-50059. Views of responsible officials: There is no disagreement with the audit finding.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: Project-Based Rental Assistance Assistance Listing Number: 14.195 Federal Award Identification Number and Year: 121EH007 Pass-Through Agency: N/A Award Period: April 1, 2024, to March 31, 2025 Compliance Requirement Affected: Eligibility Type of Finding: Significant Deficiency in Internal Control over Compliance Criteria or speciic requirement: According to §200.303 Internal Controls of 2 CFR Part 200, the non‐Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non‐Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: Initial certification and/or recertification HUD-50059 tenant eligibility forms lacked proper review by a management agent or an acting management agent. Questioned costs: None noted. Context: A nonstatistical sample of 12 out of 100 tenant files were selected for testing for the Section 8 Housing Assistance Payments Program. The lack of proper review of tenant certification and/or tenant recertification forms was identified during the auditor's testing of tenant eligibility. Cause: Lack of a management agent or acting management agent in place at the time of tenant certification or recertification. Effect: Noncompliance results in the potential for mathematical errors in accuracy of calculation of tenant rent portion or identification of proper income limit thresholds. Repeat Finding: Yes Recommendation: We recommend that the organization have a process in place for secondary review, of the HUD-50059 certification and recertification forms, by either a management agent or an acting management agent, in the absence of a management agent to check for mathematical accuracy of tenant rent calculation and for use of proper income thresholds. Views of responsible officials: There is no disagreement with the audit finding
Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: Project-Based Rental Assistance Assistance Listing Number: 14.195 Federal Award Identification Number and Year: 121EH007 Pass-Through Agency: N/A Award Period: April 1, 2024, to March 31, 2025 Compliance Requirement Affected: Cash Management Type of Finding: Significant Deficiency in Internal Control over Compliance Criteria or specific requirement: According to §200.303 Internal Controls of 2 CFR Part 200, the non‐Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non‐Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition: HUD Housing Assistance Payment forms lacked proper review by a management agent or an acting management agent. Questioned costs: None noted. Context: A nonstatistical sample of 3 out of 12 HUD Housing Assistance Payment forms were selected for testing for the Section 8 Housing Assistance Payments Program. The lack of proper review of HUD Housing Assistance Payment forms was identified during the auditor's testing of cash management. Cause: Lack of a management agent or acting management agent in place at the time of preparing HUD Housing Assistance Payment forms. Effect: Noncompliance results in the potential for mathematical errors in accuracy of calculation of request for payment on the HUD Housing Assistance Payment forms. Repeat Finding: Yes Recommendation: We recommend that the organization have a process in place for secondary review, of the HUD Housing Assistance Payment forms, by either a management agent or an acting management agent, in the absence of a management agent to check for mathematical accuracy of housing assistance payment request. Views of responsible officials: There is no disagreement with the audit finding.
Finding: 2025-001 Incomplete Tenant Records – Section 8 HCV Program (ALN 14.871) Condition: During our review of forty (40) tenant files under the Section 8 Housing Choice Voucher (HCV) Program, we identified multiple instances of missing documentation and compliance lapses: 1. For one (1) tenant, income verification was not performed for the current year, and prior year income was rolled forward. The HUD-50058 (Family Report) form was reviewed in the PIC system but was not present in the tenant file. 2. For one (1) tenant, the Approved Lease, HUD-52517 (Request for Tenancy Approval), and HUD- 52641 (HAP Contract) forms were not present in the tenant file. Criteria: Under 2 CFR § 200.303, non-Federal entities are required to “establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award.” Additionally, 2 CFR § 200.302(b)(3) mandates that entities “maintain records which adequately identify the source and application of funds provided for federally-assisted activities.” HUD regulations governing the Section 8 Housing Choice Voucher Program (ALN 14.871) further require that tenant files include complete and timely documentation of income verification, lease approvals, and execution of required HUD forms such as HUD-50058 (Family Report), HUD-52517 (Request for Tenancy Approval), and HUD-52641 (Housing Assistance Payments Contract). These documents are essential to support eligibility determinations and ensure accurate Housing Assistance Payments. Cause: The deficiencies appear to result from inconsistent implementation of file maintenance procedures and inadequate internal controls over documentation and compliance tracking. There may also be a lack of staff training or oversight regarding HUD documentation requirements. Effect: Incomplete tenant records compromise the Housing Authority’s ability to demonstrate compliance with HUD regulations and the proper use of Federal funds. Missing documentation such as income verification and executed lease agreements may result in eligibility determinations that cannot be substantiated, increasing the risk of noncompliance. These issues could lead to program findings, reputational harm, or future funding restrictions if not addressed. Questioned Costs: There were no determinable questioned costs identified during the review. While documentation gaps were noted, the absence of supporting records did not allow for a reliable calculation of financial impact. Recommendation: We recommend that the Housing Authority strengthen internal controls over tenant file documentation by implementing a standardized checklist to ensure all required forms and records are consistently retained. Staff should receive periodic training on HUD documentation and compliance requirements to reinforce expectations and reduce errors. Management should also conduct routine internal reviews to verify that income verification and lease documentation are properly completed and maintained. These measures will help ensure that tenant eligibility and payment determinations are adequately supported and compliant with federal regulations. Reply and Corrective Action: To address these findings, the Housing Authority will implement a standardized checklist for all tenant file changes, ensuring that all required forms and records are consistently retained. The Program Administrator and staff will conduct monthly reviews of completed reexaminations to verify that all necessary documentation is present and properly filed. All paperwork related to annual reexaminations, transfers, move-ins, and interims will be scanned into the Lindsey software system within five working days of receipt, prior to physical filing. The Program Administrator will organize monthly training sessions on HCV/S8 program requirements, with participation tracked to ensure all staff attend. Weekly spot checks will be performed to confirm that the checklist is being used appropriately. These actions will be supported by updated training materials, access to the Lindsey software, and dedicated staff time for audits and training. To mitigate risks such as incomplete documentation, missed scanning deadlines, or low training attendance, the Housing Authority will implement pre-audit checklists, set automated reminders for staff, and make training mandatory. Management will monitor the implementation of these corrective actions and conduct follow-up reviews to ensure sustained compliance with HUD regulations.
Assistance Listing, Federal Agency, and Program Name - 14.905; U.S. Department of Housing and Urban Development; Lead Hazard Reduction Demonstration Program Federal Award Identification Number and Year - 252697 Pass through Entity - City of Chicago Department of Public Health Finding Type - Material weakness and material noncompliance with laws and regulations Repeat Finding - No Criteria - 2 CFR 200.303(a) states each recipient must establish, document, and maintain effective internal control over the Federal award that provides reasonable assurance that the recipient is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should align with the guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control-Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition - The Organization did not review period end reimbursement requests for costs that had been expended and requested in prior months. The lack of proper review resulted in the Organization charging duplicate costs of $95,294. Questioned Costs - $95,294 Identification of How Questioned Costs Were Computed - During the period under audit there were two period-end reimbursement requests. Such requests include expenditures from the entire grant period (January 1, 2024 December 31, 2024). Expenditures on the two reimbursement requests were compared in their entirety to expenditures on reimbursement requests earlier in the year. Management determined there were total duplicate costs of $95,294. Context - Of the 25 expenditures tested for allowable costs, two contractor samples were charged in the period-end reimbursement request and in a previous reimbursement request. Subsequently the Organization evaluated the costs charged to the grant and identified contractor invoices in the amount of $95,294 that were erroneously charged to the grant and reported on the schedule of expenditures of federal awards. Cause and Effect - Timely and accurate review over period-end reimbursement requests was not performed and duplicate costs were requested for reimbursement. Recommendation - The Organization should establish formalized review processes and controls to ensure proper identification of expenditures that have been submitted for reimbursement. Views of Responsible Officials and Corrective Action Plan - The Organization agrees with recommendation. Beginning May 1, 2025, the CFO maintains a payout tracker which is updated every time a vendor payout is made and tracks that payment to the reimbursement request and the final payment by the pass-through agency. This process ensures that a payout is not included in a payout request multiple times. The Staff Accountant also maintains a tracker of all reimbursement requests to track with the program budgets and for inclusion in the MIP accounting system. In addition, new personnel are involved in the process with a more formal approval and authorization process implemented. The Organization’s staff has communicated these duplicate requests to the appropriate personnel at the granting agency and are coordinating the repayment of the excess funds as determined by the granting agency.
2025-001 - Internal Control over Compliance and Compliance with Subrecipient Monitoring Requirements Information on the Federal Program: United States Department of Treasury Assistance Listing Number: 21.027 Assistance Listing Name: Coronavirus State and Local Fiscal Recovery Fund Pass-Through Entity: Prince George’s Country Maryland Pass-Through Entity Number: 52-6000-998 Award Period: February 28, 2024 through June 30, 2025 Criteria– In accordance with §200.303(a), Internal Controls, a non-federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. In accordance with 2 CFR §180.300, Suspension and Debarment, non-federal entities cannot enter into awards, subawards, or contracts with certain parties that are debarred, suspended, or otherwise excluded from or ineligible for participation in federal assistance programs or activities. Non-federal entities must either check for exclusions in the System for Award Management (SAM); collect a certification from the entity, or add a clause or condition to the covered transaction with the entity prior to entering into a covered transaction with a non-federal entity. In addition, in accordance with §180.415(b), non-federal entities cannot renew or extend covered transactions (other than no-cost time extension) with any excluded person, or under which an excluded person is a principal, unless the non-federal entity obtains an exception under §180.135. 2 CFR §200.332(b), Requirements for pass-through entities, indicates that pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and that the subaward document includes the best available information provided within 2 CFR §200.332(b)(1). Condition – During our testing of the two subrecipients under this program, we noted that management did not determine whether the subrecipients were suspended or debarred prior to entering into the agreement with the subrecipients or when the subaward agreements were amended. Additionally, the agreements between The Community Foundation and the subrecipients did not contain certain key information, such as the assistance listing number, as required by 2 CFR §200.332(b)(1). Context – During our review of The Community Foundation’s compliance with the Uniform Guidance requirements, we noted that there were two subrecipients under the applicable federal program. Both subrecipients were selected for testing, resulting in a 100% examination rather than a sample-based approach. Upon identification of compliance errors, management subsequently verified the status of the subrecipients in the System for Award Management (“SAM”) to confirm that neither was suspended nor debarred. We reviewed supporting documentation from SAM and confirmed that both subrecipients were not suspended or debarred. Following the audit procedures, which identified missing data elements required by 2 CFR §200.332(b)(1), management issued communications to each subrecipient, providing the relevant information that had initially been omitted from the subaward agreements. Cause - The Community Foundation’s policies include requirements to determine whether vendors/subrecipients are suspended are debarred when working on Federal programs. The individuals executing the agreements between The Community Foundation and the two subrecipients did not properly follow the procurement policy with respect to checks for suspension and debarment. In addition, the individuals executing the agreements with the two subrecipients did not properly review the regulations and did not identify the need to include the information in 2 CFR §200.332(b)(1). Effect or Potential Effect - The lack of adherence to the established internal control policies and procedures can lead to noncompliance with federal statutes, regulations, and the provisions of grant agreements which could ultimately lead to disallowed costs for the major federal program. Questioned Costs - There are no questioned costs. Repeat Finding - This is not a repeat finding from prior year. Recommendation - We recommend that The Community Foundation ensure consistent adherence to its policies and procedures. Given that federal funding is not received on a recurring basis, certain policies and procedures may become outdated. We further recommend that, upon receipt of federal funding in the future, management designate an individual with appropriate knowledge and experience to review applicable federal regulations and update policies and procedures as necessary to maintain compliance. Views of Responsible Officials – Management agrees with the finding and has implemented corrective actions, including verifying subrecipients’ eligibility in SAM.gov before awarding or amending federal subawards, updating subaward templates to meet federal requirements, and revising procurement and cash management policies for compliance. The Controller will act as Compliance Coordinator for future federal funding, overseeing regulation review, staff training, and quarterly compliance checks, with any deficiencies reported to the CFO for prompt resolution. These measures aim to ensure ongoing adherence to federal grant requirements.
2025-001 Misappropriation of Funds Material Weakness in Internal Control Condition: Subsequent to the close of the fiscal year, the Authority was notified by its banking institution of potentially fraudulent activity involving disbursements made to a company owned by an employee of the Authority. Upon investigation, management determined that the employee, who had access to the Authority’s check issuance process, directed $155,706 in payments to an entity they owned and controlled. These payments were not for legitimate goods or services. The disbursements were charged across multiple accounts, including both federal and non-federal program expenditures. The federal program expenditures were charged to the Public and Indian Housing program. Context: The fraudulent activity was identified by the Authority’s bank through transaction monitoring and reported to management. The employee was subsequently terminated, criminally charged, and has pled guilty. The Authority is seeking restitution; however, specific repayment terms have not yet been finalized as of the date of this report. Criteria: Under 2 CFR 200.303, the Authority must establish and maintain effective internal controls over federal awards that provide reasonable assurance of compliance with federal statutes, regulations, and the terms and conditions of the awards. 2 CFR 200.403 requires that costs charged to federal awards be necessary, reasonable, and allocable. Additionally, 24 CFR 990.108 limits Public Housing Operating Fund expenditures to eligible operating expenses necessary for the operation of public housing. Payments made to a company owned by an employee for which no goods or services were received do not meet these allowability requirements. Cause: The Authority did not maintain adequate segregation of duties or sufficient monitoring controls over the vendor setup, invoice processing, and check issuance functions. Specifically, one individual had authority to create vendors, approve invoices, and issue checks without independent review or secondary approval. At the time the fraud occurred, disbursement activity was not subject to an independent secondary review of the overall check run, including the listing of payees and amounts, which could have identified payments issued to an unauthorized or fictitious vendor. Effect: Unauthorized payments totaling $155,706 were made over the nineteen-month period, resulting in a misstatement of both federal and non-federal expenditures. As a result, certain federal program costs were unallowable under 2 CFR 200.403 and 24 CFR 990.108. These expenditures include $115,850 of questioned costs charged to the Public and Indian Housing program during the fiscal year. Auditor’s Recommendations: The Authority should strengthen internal controls over the accounts payable and disbursement process by segregating duties between vendor setup, invoice approval, and check issuance; implementing a dual-approval process for new vendors and all check disbursements; conduct independent reviews of payment reports; and review all expenditures charged to federal programs to identify and reimburse any unallowable costs. Management Response: See Corrective Action Plan.
Federal Agency: United States Department of Education Federal Program: Rehabilitation Services – Vocational Rehabilitation Grants to States (84.126) Federal Award Numbers: H126A220048 (OCFS), H126A230048 (OCFS), H126A240048 (OCFS), H126A250048 (OCFS) Federal Award Years: 2022, 2023, 2024, 2025 State Agency: Office of Children and Family Services Reference: 2025-001 Criteria Reporting RSA 911, Case Service Report (RSA 911) (OMB PRA No. 1820 0508). The RSA 911 is a set of data elements that state Vocational Rehabilitation (VR) agencies must submit to the Office of Children and Family Services. The data elements obtained from state VR agency service records and case management systems document the application for and/or provision of VR services to individuals with disabilities, including program outcomes and demographic information. The RSA 911 data set instructions are available at https://rsa.ed.gov/sites/default/files/subregulatory/pd 19 03.pdf. Key Line Items – Supporting documentation must be included in the service record or case management system for the data elements listed below. Dates reported in the case management system must match the supporting documentation. The following data elements contain critical information: 1. Date of Application (element 7) 2. Date of Eligibility Determination (element 38) 3. Date of Initial Individualized Plan for Employment (IPE) (element 398) 4. Start Date of Employment in Primary Occupation (element 350) 5. Employment Outcome at Exit (element 356) 6. Date of Exit (element 353) 7. Hourly Wage at Exit (element 359) Internal Controls 2 CFR 200.303(a) states the non federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition The Office of Children and Family Services (OCFS) did not maintain complete and accurate data with the quarterly submissions of the RSA 911 report. A sample of 40 cases was selected from the department. For each case, the seven key line items were tested to verify the data reported in the case management system matched supporting documentation. The list below summarizes the key line elements the department could not provide supporting documentation or discrepancies were noted as follows: • Date of Application (Element 7) – Three cases where no signed application could be provided to support the date that the underlying application was received as reported on the RSA 911. • Date of Initial IPE (Element 398) – One case where no signed IPE could be provided to support the date of initial IPE reported on the RSA 911. Cause The condition is due to deficiencies in the review process, which failed to correctly evidence proper review of the supporting documentation via signature of the application and IPE as required for the RSA 911 reporting. The imprecise review process led to reporting deficiencies. Possible Asserted Effect Failure to perform proper review of the data recorded in the case management system prior to the submission of the RSA 911 report can result in incorrect data elements of the seven key line items noted for the Case Service Report. Questioned Costs None Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Recommendation We recommend OCFS to ensure its review process of the underlying cases operates at a precision necessary to identify incorrect data to ensure complete and accurate data is submitted on the RSA 911 reports. This will help mitigate the risk of reporting deficiencies and ensure the reliability of the data used for decision making and program evaluations. View of Responsible Officials Recommendation accepted. Please refer to corrective action plan.
Federal Agency: United States Department of Education Federal Program: Rehabilitation Services – Vocational Rehabilitation Grants to States (84.126) Federal Award Numbers: H126A220047 (SED), H126A230047(SED), H126A240047 (SED), H126A250047 (SED) Federal Award Years: 2022, 2023, 2024, 2025 State Agency: State Education Department Reference: 2025-002 Criteria Reporting RSA 911, Case Service Report (RSA 911) (OMB PRA No. 1820 0508). The RSA 911 is a set of data elements that state Vocational Rehabilitation (VR) agencies must submit to the United States Department of Education. The data elements obtained from state VR agency service records and case management systems document the application for and/or provision of VR services to individuals with disabilities, including program outcomes and demographic information. The RSA 911 data set instructions are available at https://rsa.ed.gov/sites/default/files/subregulatory/pd 19 03.pdf. Key Line Items – Supporting documentation must be included in the service record or case management system for the data elements listed below. Dates reported in the case management system must match the supporting documentation. The following data elements contain critical information: 1. Date of Application (element 7) 2. Date of Eligibility Determination (element 38) 3. Date of Initial Individualized Plan for Employment (IPE) (element 398) 4. Start Date of Employment in Primary Occupation (element 350) 5. Employment Outcome at Exit (element 356) 6. Date of Exit (element 353) 7. Hourly Wage at Exit (element 359) Internal Controls 2 CFR 200.303(a) states the non federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition The State Education Department (SED) did not maintain complete and accurate data with the quarterly submissions of the RSA 911 report. A sample of 60 cases was selected from the department. For each case, the seven key line items were tested to verify the data reported in the case management system matched supporting documentation. The list below summarizes the key line elements the department could not provide supporting documentation or discrepancies were noted as follows: • Date of Application (Element 7) – Two cases where no documentation could be provided to support the date that the underlying application was received as reported on the RSA 911. • Date of Initial IPE (Element 398) – One case where the date of Initial IPE reported in the RSA 911 did not agree to the date on the underlying IPE. Cause The condition is due to deficiencies in the input and review process, which failed to correctly input information per the supporting documentation required for the RSA 911 report. The imprecise review process led to reporting deficiencies. Possible Asserted Effect Failure to perform proper review of the data recorded in the case management system prior to the submission of the RSA 911 report can result in incorrect data elements of the seven key line items noted for the Case Service Report. Questioned Costs None Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding was included in the 2024 Single Audit Report as finding number 2024 004 at pages 25 27. Recommendation We recommend SED to ensure its review process of the underlying cases operates at a precision necessary to identify incorrect data to ensure complete and accurate data is submitted on the RSA 911 reports. This will help mitigate the risk of reporting deficiencies and ensure the reliability of the data used for decision making and program evaluations. View of Responsible Officials Recommendation accepted. Please refer to corrective action plan.
Federal Agency: United States Department of Education Federal Program: Rehabilitation Services – Vocational Rehabilitation Grants to States (84.126) Federal Award Numbers: H126A220047 (SED), H126A230047(SED), H126A240047 (SED), H126A250047 (SED) Federal Award Years: 2022, 2023, 2024, 2025 State Agency: State Education Department Reference: 2025-003 Criteria Period of Performance Under section 111(a)(1) of the Rehabilitation Act, the Department pays to each state each federal fiscal year an amount equal to the federal share of the cost of providing VR services and administering the VR program. Consistent with the definition of “period of performance” at 2 CFR section 200.1 and the requirements governing information that must be contained in a Grant Award Notification (GAN) at 2 CFR section 200.211, the VR GAN specifies the beginning and end dates for each VR grant award. Therefore, state VR agencies may incur obligations or make expenditures under a grant award if they are incurred during the period of performance for that award. Any obligations or expenditures incurred outside of that period of performance would need to be paid with funds available from a different VR grant award. Internal Controls 2 CFR 200.303(a) states the non federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition The State Education Department (SED) did not maintain complete data along with the supporting documentation for the period of performance. A sample of 60 transactions was selected from SED records. For each case, an invoice, pay period, and/or manual journal entries were tested to verify the data reported in the NYGR0302 report. It was also checked to ensure that the disbursement was properly reviewed, approved, and that the selected amount met the requirement of an allowable activity incurred during the period of performance and liquidated within the required time period. During our review of fiscal year 2025 transactions, we identified that 4 out of the 60 sampled transactions occurred outside the designated period of performance. The grant award period ended on September 30, 2024, with a liquidation period extending 120 days beyond that date, until January 28, 2025. Specifically, for grant number H126A230047, these four services were incurred in either October or November 2024, which is after the designated period of performance. This indicates a significant lapse in the controls governing the timing of obligations and expenditures related to VR grant funds. Cause The condition related to a deficiency in the operation of the review process not occurring at a precision necessary to identify missing information during the review that is required to be in compliance with the grant’s period of performance. Possible Asserted Effect The identified issue of a transaction occurring outside the period of performance and being liquidated beyond the required liquidation period could have significant implications for SED. This non compliance with federal regulations may result in financial penalties, reduced future funding, and potential repayment of misused funds. Questioned Costs $23,190 (representing the 4 transactions found to have occurred outside the specified period of performance. The population amounted to $117,470,987, of which sixty, totaling $2,948,245, were selected for test work.) Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding was identified in the 2024 Single Audit Report as finding number 2024-003 at pages 23-24. Recommendation We recommend SED implement a new control mechanism for reviewing funds before distribution. This control should include a pre distribution review process with a dedicated team or staff verifying the period of performance for each VR grant award, ensuring all obligations and expenditures fall within the specified dates. Additionally, an automated system or manual control is recommended to be developed or enhanced to flag any transactions outside the period of performance or liquidation period. View of Responsible Officials Recommendation accepted. Please refer to corrective action plan.
Federal Agency: United States Department of Homeland Security Federal Program: Disaster Grants – Public Assistance (Presidentially Declared Disasters) (97.036) Federal Award Numbers: 4480DRNYP00000001 and 4694DRNYP00000001 Federal Award Years: 2020, 2023 State Agency: Division of Homeland Security and Emergency Services Reference: 2025-012 Criteria Special Reporting for Federal Funding Accountability and Transparency Act In accordance with the FEMA PA Program Policy Guide, the Federal Funding Accountability and Transparency Act (FFATA) requires that FEMA manage and administer awards in a manner so as to ensure that federal funding is expended and associated programs are implemented in full accordance with the U.S. Constitution, federal law, and public policy requirements. These requirements include, but are not limited to those protecting free speech, religious liberty, public welfare, the environment, and prohibiting discrimination. FEMA must communicate to recipients all relevant public policy requirements, including those in general appropriations provisions, and incorporate them either directly or by reference in the terms and conditions of the award. Recipients are responsible for complying with all requirements of the award. For all federal awards, this includes the provisions of FFATA, which includes requirements on executive compensation, and also requirements implementing the Act for the non federal entity at 2 C.F.R. Parts 25 and 170. FFATA requires recipients to register in the FFATA Subaward Reporting System and report on all awards and subawards equal to or greater than $30,000. Internal Controls Lastly, 2 CFR 200.303(a) states the non federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition The Division of Homeland Security and Emergency Services (DHSES) did not timely report awards granted to subrecipients for the Disaster Assistance – Public Assistance program as summarized in the table below during the period April 2024 through March 2025 as required by FFATA. FFATA reporting should be made in FSRS no later than the last day of the month following the month in which the subaward/subaward amendment obligation was made or the subcontract award/subcontract award modification was made. DHSES does not have sufficient internal controls in place to verify the data being reported/entered into the FFATA report to the underlying subaward source documents to ensure the completeness and accuracy of the data being reported. Cause The condition found was due to inadequate tracking of subaward reports, which led to the omission of one subaward amendment and the late reporting of two subawards. For the incorrect subaward amounts, from review of SAM.gov it appeared that DHSES reported subaward amendments as new awards for the total cumulative obligations, including previous obligation versions that had already been reported, rather than as edits to existing subaward reports within SAM.gov as indicated in the guidance provided by SAM.gov. This led to the over reporting of subaward obligations for the selected subaward. Management communicated and provided internal email support that the noncompliance concerning the incorrect subaward amounts stemmed from errors that occurred as a result of the system transition from FSRS to SAM.gov. Possible Asserted Effect The failure to timely report subawards and inaccuracies in the reported amounts resulted in noncompliance with FFATA requirements. This noncompliance could lead to increased scrutiny from federal agencies and potential penalties or corrective actions imposed on DHSES. Questioned Costs None Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Recommendation We recommend DHSES review and enhance its procedures, tracking mechanisms, and internal controls to ensure that all amounts passed through to subrecipients under subawards are reported timely and accurately in accordance with the FFATA federal regulations to prevent future occurrences. View of Responsible Officials Recommendation accepted. Please refer to corrective action plan.
2025-001: Applicant Provided the Incorrect Amount of LIHEAP Award. Assistance Listing Number: 93.568 Name of Federal Agency: Department of Health and Human Services Program Title: LIHEAP Compliance Requirement: Eligibility Pass-through Entity: Florida Department of Commerce Federal Grant/Contract Number and Grant Year E1991 2023 Finding Type: Significant Deficiency in Internal Control Questioned Costs: $3,577 Condition: Application for assistance under the LIHEAP program was approved for an amount which did not agree to the amount applicable for the applicant’s income and age per the Low-Income Home Energy Assistance Program Payment Matrix as provided by the Florida Department of Commerce. Criteria: 2 CFR section 200.303 requires that nonfederal entities receiving federal awards establish and maintain internal control over the federal awards that provides reasonable assurance that the nonfederal entity is managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal awards. The required eligibility determinations should be performed and the individual determined to be eligible in accordance with the compliance requirements of the program and the HHS Poverty Guidelines and State Medium Income Estimates. Cause: Human error in the calculation of the amount the individual was eligible for under the program that was not caught during the review and approval process. Effect: Providing incorrect funding to applicants may result in the loss of funding under the program. Prevalence: For a sample of 25 individuals provided LIHEAP benefits during fiscal year 2025, one participant was found to have been given an incorrect amount based on the Matrix provided by the Florida Department of Commerce resulting in an additional amount awarded of $100. Not a repeat finding and not found to be a systemic issue. Recommendation: Continued review of the calculations for amounts to be provided for applicants to ensure they meet the amounts determined under the Matrix provided by the Florida Department of Commerce.
2025-003 - Lack of Written Federal Program Policies. Type: Material Weakness. Condition: The Village does not have documented policies and procedures specific to the administration of the Water and Waste Disposal for Rural Communities program. This includes the absence of written guidance on key compliance areas such as procurement, subrecipient monitoring, allowable costs, and reporting requirements under Uniform Guidance. Criteria: Per 2 CFR 200.303 and 200.331 of the Uniform Guidance, non-federal entities are required to establish and maintain effective internal controls and written policies to ensure compliance with federal statutes, regulations, and the terms and conditions of federal awards. These policies should be tailored to the specific requirements of each federal program. Cause: The entity has not developed formal written policies and procedures for the Water and Waste Disposal for Rural Communities program, possibly due to reliance on informal practices or general administrative policies that do not address federal-specific requirements. Effect: Without documented policies, there is an increased risk of noncompliance with federal requirements, inconsistent program administration, and lack of accountability. This may result in questioned costs, audit findings, or potential repayment of federal funds. Questioned Costs: n/a. Recommendation: We recommend that the Village develop and implement written policies and procedures specific to the Water and Waste Disposal Systems for Rural communities program. These should include: - Procurement standards in accordance with 2 CFR 200.318 – 200.327. - Subrecipient monitoring protocols. - Guidelines for allowable costs and cost principles. - Reporting and recordkeeping requirements. - Internal control procedures to ensure compliance. Training should also be provided to staff responsible for administering the program to ensure consistent application of these policies. Views of Responsible Officials: Management acknowledges the auditor’s finding regarding the absence of formally documented federal program policies. We recognize the importance of maintaining written procedures to ensure consistent compliance with Uniform Guidance requirements and to strengthen internal controls over federal awards. While informal practices have historically guided our federal program administration, we agree that formalizing these policies will enhance transparency, accountability, and operational efficiency. Management is currently in the process of developing written policies covering key areas such as procurement, allowable costs, subrecipient monitoring, and cash management. We anticipate completing this documentation and implementing the policies by February 28, 2026. We are committed to continuous improvement and appreciate the auditor’s recommendations as part of our efforts to maintain strong compliance and stewardship of federal funds.
Department of Homeland Security, State of Illinois Office of Emergency Management, Federal Financial Assistance Listing 97.036, 4728‐DR‐IL Disaster Grants – Public Assistance Activities Allowed or Unallowed, Allowable Costs/Cost Principles, and Period of Performance Material Weakness in Internal Control over Compliance Criteria: 2 CFR 200.303(a) establishes that the auditee must establish and maintain effective internal control over the federal award that provides assurance that the entity is managing the federal award in compliance with federal statutes, regulations, and conditions of the federal award. Condition: Materials expenditures were claimed for reimbursement with no documented formal review and approval. Cause: The Cooperative did not retain documentation to support the review and approval over material costs claimed for reimbursement under the program. Effect: Without a formal documentation of review of expenses, demonstrating the expenditures comply with federal regulations is difficult. Questioned Costs: No questioned costs over $25,000. Context/Sampling: Nonstatistical sampling was used. Sample size was 60 transactions which accounted for $1,925,243 out of $2,310,004 of federal program expenditures of which $1,736,952 was submitted for reimbursement. Repeat Finding form Prior Year: No Recommendation: We recommend the Cooperative review the process for documenting the review and approval over material costs. Views of Responsible Officials: Management agrees with the finding.
2024-002. Failure to Maintain Accurate Accounting Records for Federal Awards Criteria: Title 2 U. S. Code of Federal Regulations (CFR) Section 200.303, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) requires the recipient of federal awards to establish and maintain internal control over federal awards that provide reasonable assurance that the recipient is managing the federal awards in compliance with federal statutes, regulations, and the terms and conditions of the federal award. One of the objectives of internal control over compliance is to ensure that federal transactions are properly recorded and accounted for in the accounting records in order to permit the preparation of reliable financial statements, including the Schedule of Expenditures of Federal Awards. Condition: Federal grant revenues in the amount of $270,907 were not properly recorded in the accounting records. Cause: Undetermined. Effect: Federal award transactions could be improperly reported in the financial statements and the Schedule of Expenditures of Federal Awards. Recommendation: All future federal grant revenue should be properly recorded in the accounting records.
Finding 2024-001: Rural Rental Housing Loans Assistance Listing Number: 10.415 U.S. Department of Agriculture Compliance Requirement: Eligibility Type of finding: Internal Control Over Compliance (significant deficiency) Criteria: The Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards require that the non-Federal entity establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award (2 CFR 200.303(a)). Condition: The Organization did not implement a review or monitoring process to ensure propriety in eligibility determinations and tenant lease agreements for the period June 2024 – December 2024. Specifically, there was no review of eligibility determinations and tenant lease agreements for 8 of 12 tenant files reviewed. Cause: The Administrative Assistants took over completing all tenant eligibility determinations after the previous Executive Director retired in May 2024 resulting in a lack of separate review. Effect: Noncompliance with the Rural Rental Housing Loan requirements may exist and not be detected by the Organization. Recommendation: The Organization should strengthen its internal controls with adopted policies and procedures to ensure a review process is established through adequate segregation of duties. The Organization should consider assessing and realigning the duties and responsibilities of the Executive Director and Alamosa Administrative Assistant to provide for a review process of tenant eligibility determinations. Grantee’s Response: See corrective action plan.
Finding 2024-001: Rural Rental Housing Loans Assistance Listing Number: 10.415 U.S. Department of Agriculture Compliance Requirement: Eligibility Type of finding: Internal Control Over Compliance (significant deficiency) Criteria: The Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards require that the non-Federal entity establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award (2 CFR 200.303(a)). Condition: The Organization did not implement a review or monitoring process to ensure propriety in eligibility determinations and tenant lease agreements for the period June 2024 – December 2024. Specifically, there was no review of eligibility determinations and tenant lease agreements for 8 of 12 tenant files reviewed. Cause: The Administrative Assistants took over completing all tenant eligibility determinations after the previous Executive Director retired in May 2024 resulting in a lack of separate review. Effect: Noncompliance with the Rural Rental Housing Loan requirements may exist and not be detected by the Organization. Recommendation: The Organization should strengthen its internal controls with adopted policies and procedures to ensure a review process is established through adequate segregation of duties. The Organization should consider assessing and realigning the duties and responsibilities of the Executive Director and Alamosa Administrative Assistant to provide for a review process of tenant eligibility determinations. Grantee’s Response: See corrective action plan.
Finding 2024-001: Rural Rental Housing Loans Assistance Listing Number: 10.415 U.S. Department of Agriculture Compliance Requirement: Eligibility Type of finding: Internal Control Over Compliance (significant deficiency) Criteria: The Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards require that the non-Federal entity establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award (2 CFR 200.303(a)). Condition: The Organization did not implement a review or monitoring process to ensure propriety in eligibility determinations and tenant lease agreements for the period June 2024 – December 2024. Specifically, there was no review of eligibility determinations and tenant lease agreements for 8 of 12 tenant files reviewed. Cause: The Administrative Assistants took over completing all tenant eligibility determinations after the previous Executive Director retired in May 2024 resulting in a lack of separate review. Effect: Noncompliance with the Rural Rental Housing Loan requirements may exist and not be detected by the Organization. Recommendation: The Organization should strengthen its internal controls with adopted policies and procedures to ensure a review process is established through adequate segregation of duties. The Organization should consider assessing and realigning the duties and responsibilities of the Executive Director and Alamosa Administrative Assistant to provide for a review process of tenant eligibility determinations. Grantee’s Response: See corrective action plan.
Finding 2024-002: Lower Income Housing Assistance Program - Section 8 New Construction and Substantial Rehabilitation Assistance Listing Number: 14.182 U.S. Department of Housing and Urban Development (Repeat of Finding 2023-002 and 2022-002) Compliance Requirements: Cash Management, Eligibility, Reporting, Special Tests and Provisions Type of finding: Internal Control Over Compliance (significant deficiency) Criteria: The Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards require that the non-Federal entity establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award (2 CFR 200.303(a)). Condition: The Organization has not implemented a review or monitoring process to ensure propriety in eligibility determinations, tenant lease agreements, housing assistance payment requests, and return of funds for vacant units and rent adjustments to contract rent included on the monthly Housing Assistance Payment vouchers. Cause: The compliance responsibilities of the Organization are performed by one person which has made it difficult to establish a proper review process over cash management, eligibility, reporting, and special tests and provisions requirements. Effect: Noncompliance with the Lower Income Housing Assistance Program - Section 8 New Construction and Substantial Rehabilitation requirements may exist and not be detected by the Organization. Recommendation: The Organization should strengthen its internal controls with adopted policies and procedures to ensure a review process is established through adequate segregation of duties. The Organization should consider assessing and realigning the duties and responsibilities of administrative staff allowing the administrator to act in a more supervisory position. Grantee’s Response: See corrective action plan.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2 CFR §2400.101 gives regulatory effect to the Department of Housing and Urban Development for 2 CFR §200.303(a) which states that the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Furthermore, 2 CFR §200.430(i)(1)(i) states "charges to Federal awards for salaries and wages must be based on records that accurately reflect the work performed. These records must be supported by a system of internal controls which provides reasonable assurance that the charges are accurate, allowable, and properly allocated. The “City of Columbus Fiscal Policies and Procedures for the Administration of HUD Grants Manual” Part II Section C – Standards for Documentation of Personal Services provides the following: All grant funded staff (both city staff and subrecipient staff) will utilize personal activity reports (timesheets). All timesheets will reflect total hours worked, identify the federal grant hours worked, and be signed by either the employee or the supervisor. Furthermore, the City of Columbus Department of Development has established a procedure of timesheet review which requires supervisors review employee timesheets within one week of the pay period end date. This review is evidenced by an electronic signature on the employee-completed timesheet.While the City does have an internal control policy in place in accordance with 2 CFR 430(i)(1)(i), supervisors were not always adhering to the policy which resulted in a deficiency in the application of the control process. During payroll control testing over AL #14.239 Home Investment Partnership Program, it was noted 3 out of the 5 selected worklogs (60%) were not signed by the supervisor within the one-week requirement as required by City policy. Supervisory sign offs occurred between 12 and 32 working days (not including weekends) following the end of the pay period.Failure to follow the established internal control policy and ensuring all time sheets are appropriately approved by a knowledgeable supervisor, within one week of the pay period end date, could result in unallowable costs being allocated to a federal program and could ultimately result in noncompliance and/or a questioned cost. The City should review established policies and procedures with supervisory personnel and evaluate if additional control procedures should be in place to ensure all timesheets are appropriately reviewed timely prior to allocation to a federal program.
2024-001 COVID-19 – Coronavirus State and Local Fiscal Recovery Funds – Assistance Listing No. 21.027 Significant Deficiency in Internal Control Over Compliance – Appropriate Internal Control Structure Related to Compliance Requirements I. Procurement and Suspension and Debarment Criteria: 2 CFR 200.303 includes requirements related to internal controls for federal award programs, including that CICP must, among other things, “establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO)”. Condition and Context: We noted CICP did not complete their procurement checklist timely for one specific vendor, in accordance with their written policies. The procurement checklist is CICP’s key control for monitoring procurement and suspension and debarment of vendors. The vendor relationship was an existing relationship, but the vendor had not previously been used for any activities related to federal awards. CICP had other written documentation which provided evidence they followed their procurement process; however, no written documentation was maintained indicating suspension or debarment was reviewed prior to using the vendor for activities related to the federal award. Cause and Effect: Not completing the procurement checklist timely could result in noncompliance related to procurement and suspension and debarment. Recommendation: We recommend the procurement checklist be completed in line with the written policies of CICP. Views of Responsible Officials and Planned Corrective Action: CICP agrees with the recommendation and it was implemented effective 2/14/2025.
Finding 2024-005 – Internal Controls over Federal Awards (Significant Deficiency and Noncompliance)( Repeat finding) Information on the Federal Program: U.S. Department of Justice, Assistance Listing No.16.575 Victims of Crime Act (VOCA) Criteria: 2 CFR 200.303 requires non-federal entities to establish and maintain effective internal control over the Federal awards that provides reasonable assurance that the non-federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition/Context: We selected 50 disbursements for testing. Of those 50, 25 were for payroll and 25 were non-payroll disbursements. Of the 25 non-payroll, 4 lacked documentation of approval for payment.Cause: The Organization did not properly document controls established in its accounting manual to review and approve expenses charged to the grant. Effect: The Organization did not obtain proper approvals according to the policy of established controls. Questioned costs: None Recommendation: We recommend the Organization strengthen its policies and procedures surrounding disbursement and allocation processes to document the review and approval process to meet the control standards. Views of Responsible Officials: Management agrees with this finding. See Management’s View and Corrective Action Plan included at the end of the report.
Finding 2024-001 Reporting Criteria: Pursuant to 2 CFR section 200.303(a), the nonfederal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Revolving Loan Fund (RLF) recipients must administer RLFs in accordance with an RLF Plan approved by EDA. Pursuant to 13 CFR 307.14 (a) All RLF Recipients, including those receiving Recapitalization Grants for existing RLFs, must complete and submit an RLF report, using Form ED-209, in a format and at a frequency as required by EDA. Pursuant to 13 CFR 307.14 (b) All RLF Recipients must certify as part of the RLF report to EDA that the RLF is operating in accordance with the applicable RLF Plan and that the information provided is complete and accurate. Condition: There were no adequate internal controls to identify and correct material misstatements in key line items in the Form ED-209, Revolving Loan Fund Financial Report (report) for the Legacy or Cares Revolving Loan Funds or submit the reports timely. The key line items contain critical information and should reconcile to the Authority's financial documents and account balances. Cause: The current internal control system in place was not adequate to ensure: loan reporting procedures were followed in accordance with the RLF Plan approved by the EDA. Effect: The reports do not contain accurate information. This is a repeat finding of 2023-001. Recommendation: We have the following recommendations: 1) the Authority should implement procedures to ensure that the RLF program is administered in accordance with the plan approved by the EDA, 2) the Authority should implement procedures to ensure that required reports are reviewed for accuracy prior to being submitted by the due date. View of Responsible Official: Management agrees with the finding. See separate corrective action plan.
Finding 2024-001 Reporting Criteria: Pursuant to 2 CFR section 200.303(a), the nonfederal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Revolving Loan Fund (RLF) recipients must administer RLFs in accordance with an RLF Plan approved by EDA. Pursuant to 13 CFR 307.14 (a) All RLF Recipients, including those receiving Recapitalization Grants for existing RLFs, must complete and submit an RLF report, using Form ED-209, in a format and at a frequency as required by EDA. Pursuant to 13 CFR 307.14 (b) All RLF Recipients must certify as part of the RLF report to EDA that the RLF is operating in accordance with the applicable RLF Plan and that the information provided is complete and accurate. Condition: There were no adequate internal controls to identify and correct material misstatements in key line items in the Form ED-209, Revolving Loan Fund Financial Report (report) for the Legacy or Cares Revolving Loan Funds or submit the reports timely. The key line items contain critical information and should reconcile to the Authority's financial documents and account balances. Cause: The current internal control system in place was not adequate to ensure: loan reporting procedures were followed in accordance with the RLF Plan approved by the EDA. Effect: The reports do not contain accurate information. This is a repeat finding of 2023-001. Recommendation: We have the following recommendations: 1) the Authority should implement procedures to ensure that the RLF program is administered in accordance with the plan approved by the EDA, 2) the Authority should implement procedures to ensure that required reports are reviewed for accuracy prior to being submitted by the due date. View of Responsible Official: Management agrees with the finding. See separate corrective action plan.
Finding 2024.001: Eligibility - Significant Deficiency Grantor: U.S. Department of Agriculture Federal Program Names: WIC Special Supplemental Nutrition Program for Women, Infants and Children Federal Assistance Listing Numbers: 10.557 Federal Award Identification Number and Year: 79194 - 2023, 76709 - 2023 and 88458 - 2024 Name of Pass-through Entity: Indiana State Department of Health Criteria In accordance with 2CFR 200.303(a), Internal Controls, a nonfederal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. The specific eligibility requirements are unique to each federal program, in accordance with the terms and conditions of the Federal award pertaining to the program. Condition During our testing over eligibility requirements, we were unable to review sufficient documentation to support that benefit recipients were eligible for benefits. Cause The Center's internal controls over eligibility were not consistently followed to ensure the presence of documentation to support that all benefit recipients were eligible for benefits. Effect Lack of sufficient support over eligibility could result in ineligible individuals receiving benefits. Questioned Costs None. Context We selected 40 beneficiaries charged to the federal program to test compliance and controls over eligibility. Out of 40 individuals tested, we noted 4 instances where there was no documentation to support that the benefit recipients were eligible for benefits and the internal controls over eligibility were followed. Identification of Repeat Finding None. Recommendation We recommend that management provide training to those responsible for verifying eligibility to ensure that documentation and internal control over eligibility is maintained. Views of Responsible Officials Management agrees with the audit finding and will strengthen internal controls and accountability to correct the deficiency.
Department of Transportation Federal Financial Assistance Listing 20.106; Awards AIP3-46-0050-59, AIP3-46-0050-62, AIP3-46-0050-63, and AIP3-46-0050-64. COVID-19 Airport Improvement Program Reporting Material Weakness in Internal Control over Compliance; Material Noncompliance Criteria - 2 CFR 200.303(a) establishes that the auditee must establish and maintain effective internal controls over the federal awards that provide assurance that the entity is managing the federal awards in compliance with federal statutes, regulations, and the conditions of the federal award. 2 CFR 200.327 and 2 CFR 200.328 require the auditee to collect financial information and monitor its activities under federal awards to assure compliance with applicable federal requirements and performance expectations are being achieved and report these items in accordance with the program requirements. Condition - The SF-425 annual report dated September 30, 2024, for award AIP3-46-0050-64 underreported the federal share of expenditures by $23,588, while the FAA Form 5100-127 annual report dated December 31, 2023, for all awards underreported the total capital expenditures and construction in progress by $2,729,962. Cause - The Authority does not have an internal control structure designed to ensure amounts reported on SF-425 and FAA Form 5100-127 reports are adequately reviewed and agree to underlying accounting records. Effect - Lack of compliance with designed internal controls over reporting could result in the Authority reporting incorrect or incomplete information. Questioned Costs - None reported. Context/Sampling - A nonstatistical sample of 7 reports out of 27 reports. Repeat Finding from Prior Year – Yes, prior year finding 2023-002 Recommendation - Management should determine and formalize reporting responsibilities between the Airport and the State and establish review processes to ensure that amounts included in SF-425 and FAA Form 5100-127 reports agree with the underlying accounting records. Views of Responsible Officials - Management agrees with the finding.