Criteria or specific requirement: Per 2 CFR Part 200.332, pass through entities are responsible for performing monitoring procedures based upon identified risks and must retain documentation to provide reasonable assurance that subrecipients used the subawards for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Pass through entities are also responsible for ensuring and documenting the determination of valid subrecipients per 2 CFR Part 200.331. Condition: There was no documentation to support the key control that the ED reviews and approves subrecipients’ reimbursement requests as a means of monitoring subrecipient activities. Additionally, there was ambiguity in the subaward agreements about whether the grantees were subrecipients, subcontractors, or beneficiaries. Questioned costs: None. Context: In a statistically valid sample, all 13 subrecipients tested were missing evidence of the ED’s review that subrecipient costs and activities were allowable and met the requirements of the award. None of the subaward agreements tested included all of the information required by 2 CFR section 200.332(a) to sufficiently inform the subrecipients that they were recipients of federal funds and must comply with federal statues, regulations ,and terms and conditions of the federal award. Cause: Lack of adequate knowledge about subrecipient monitoring requirements. Effect: Potential for fraudulent transactions and misuse of subaward by subrecipients due to lack of oversight. Repeat Finding: No. Recommendation: CLA recommends adding a review and approval process for all the reimbursement requests and obtaining the support for the payments made in advance for the subawards and review whether subrecipient used the subaward for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Additionally, CLA recommends modifying the subaward agreements to include the award information required by CFR 200.332 (b). Views of responsible officials: There is no disagreement with the audit finding.
Criteria or specific requirement: Per 2 CFR Part 200.332, pass through entities are responsible for performing monitoring procedures based upon identified risks and must retain documentation to provide reasonable assurance that subrecipients used the subawards for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Pass through entities are also responsible for ensuring and documenting the determination of valid subrecipients per 2 CFR Part 200.331. Condition: There was no documentation to support the key control that the ED reviews and approves subrecipients’ reimbursement requests as a means of monitoring subrecipient activities. Additionally, there was ambiguity in the subaward agreements about whether the grantees were subrecipients, subcontractors, or beneficiaries. Questioned costs: None. Context: In a statistically valid sample, all 13 subrecipients tested were missing evidence of the ED’s review that subrecipient costs and activities were allowable and met the requirements of the award. None of the subaward agreements tested included all of the information required by 2 CFR section 200.332(a) to sufficiently inform the subrecipients that they were recipients of federal funds and must comply with federal statues, regulations ,and terms and conditions of the federal award. Cause: Lack of adequate knowledge about subrecipient monitoring requirements. Effect: Potential for fraudulent transactions and misuse of subaward by subrecipients due to lack of oversight. Repeat Finding: No. Recommendation: CLA recommends adding a review and approval process for all the reimbursement requests and obtaining the support for the payments made in advance for the subawards and review whether subrecipient used the subaward for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Additionally, CLA recommends modifying the subaward agreements to include the award information required by CFR 200.332 (b). Views of responsible officials: There is no disagreement with the audit finding.
Criteria or specific requirement: Per 2 CFR Part 200.332, pass through entities are responsible for performing monitoring procedures based upon identified risks and must retain documentation to provide reasonable assurance that subrecipients used the subawards for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Pass through entities are also responsible for ensuring and documenting the determination of valid subrecipients per 2 CFR Part 200.331. Condition: There was no documentation to support the key control that the ED reviews and approves subrecipients’ reimbursement requests as a means of monitoring subrecipient activities. Additionally, there was ambiguity in the subaward agreements about whether the grantees were subrecipients, subcontractors, or beneficiaries. Questioned costs: None. Context: In a statistically valid sample, all 13 subrecipients tested were missing evidence of the ED’s review that subrecipient costs and activities were allowable and met the requirements of the award. None of the subaward agreements tested included all of the information required by 2 CFR section 200.332(a) to sufficiently inform the subrecipients that they were recipients of federal funds and must comply with federal statues, regulations ,and terms and conditions of the federal award. Cause: Lack of adequate knowledge about subrecipient monitoring requirements. Effect: Potential for fraudulent transactions and misuse of subaward by subrecipients due to lack of oversight. Repeat Finding: No. Recommendation: CLA recommends adding a review and approval process for all the reimbursement requests and obtaining the support for the payments made in advance for the subawards and review whether subrecipient used the subaward for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Additionally, CLA recommends modifying the subaward agreements to include the award information required by CFR 200.332 (b). Views of responsible officials: There is no disagreement with the audit finding.
Criteria or specific requirement: Per 2 CFR Part 200.332, pass through entities are responsible for performing monitoring procedures based upon identified risks and must retain documentation to provide reasonable assurance that subrecipients used the subawards for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Pass through entities are also responsible for ensuring and documenting the determination of valid subrecipients per 2 CFR Part 200.331. Condition: There was no documentation to support the key control that the ED reviews and approves subrecipients’ reimbursement requests as a means of monitoring subrecipient activities. Additionally, there was ambiguity in the subaward agreements about whether the grantees were subrecipients, subcontractors, or beneficiaries. Questioned costs: None. Context: In a statistically valid sample, all 13 subrecipients tested were missing evidence of the ED’s review that subrecipient costs and activities were allowable and met the requirements of the award. None of the subaward agreements tested included all of the information required by 2 CFR section 200.332(a) to sufficiently inform the subrecipients that they were recipients of federal funds and must comply with federal statues, regulations ,and terms and conditions of the federal award. Cause: Lack of adequate knowledge about subrecipient monitoring requirements. Effect: Potential for fraudulent transactions and misuse of subaward by subrecipients due to lack of oversight. Repeat Finding: No. Recommendation: CLA recommends adding a review and approval process for all the reimbursement requests and obtaining the support for the payments made in advance for the subawards and review whether subrecipient used the subaward for authorized purposes in compliance with federal statutes, regulations, and the terms and conditions of the subaward. Additionally, CLA recommends modifying the subaward agreements to include the award information required by CFR 200.332 (b). Views of responsible officials: There is no disagreement with the audit finding.
2023-003 Surveys, Studies, Investigations, Demonstrations, and Training Grants and Cooperative – Assistance Listing No. 66.436; Grant No.84039801, 84039601,94039501; Grant Period – Year ended December 31, 2023. Statement of Condition: Compliance over subrecipient monitoring. Entity did identify the award and applicable requirements, however entity did not evaluate each subrecipient’s risk of noncompliance nor did it monitor subrecipient activities as listed in the contracts “Subaward Performance Reporting” and monitoring procedures per 2 CFR Sections 200.332 (b) and (d) through (f). Criteria: National Association of Wetland Managers’ internal control policies and procedures, and the Uniform Guidance 2 CFR Sections 200.332 (b) and (d)-(f). Cause: Management’s lack of understanding of criteria. Effect: Non-compliance. Questioned Costs: Not identified. Perspective: N/A. Identification: Non-repeat. Recommendation: Management should review above criteria, and implement required procedures. Views of Responsible Officials: NAWM disagrees with the statement of condition and is submitting documentation for NAWM’s activities regarding monitoring procedures per 2 CFR Sections 200.332 (d) through (f) for Assistance Listing No. 66.436; Grant No. 84039801, 84039601, 94039501; Grant Period – Year ended December 31, 2023. Each grant has its own documentation letter addressing each element listed above in its file submitted. A copy of each subawardee’s NICRA is included in their respective files as well as copies of audit findings for each subawardee. Additionally, each subawardee has been awarded federal grants by the U.S EPA and other federal agencies in the past which they have completed successfully. All of these factors, including the information collected on each subaward contract which contain a lot of the required information, and including a search online of the SAM.gov status of each entity, was used to determine any potential risk of noncompliance and no risk was identified by either NAWM or EPA. Auditors’ Evaluation of Views of Responsible Officials: Management’s Response is in conflict with above Statement of Condition, Criteria, and Cause.
FINDING 2023-001 Information on the federal program: Federal Agency: Department of the Treasury Pass-Through Entity: N/A – Direct Grant Federal Program: Coronavirus State and Local Fiscal Recovery Funds (CSLFRF) Assistance Listing Number: 21.027 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Noncompliance Criteria: Title 2 Subtitle A Chapter II Part 200 Subparts A and D, Section 200.332, establishes requirements that pass-through entities must adhere to in regard to their subrecipient grant agreements and the monitoring processes of those subrecipients. Condition: The City of Bloomington was unable to identify subrecipients of CSLFRF funding for the purposes of financial reporting and compliance with requirements under 2 CFR 200.332. The City could not distinguish between a subrecipient and a general vendor. Management misreported subrecipient activity on the SEFA, failed to include required contractual language for subrecipient awards in executed agreements, and did not perform monitoring procedures over the subrecipients management identified during audit testing procedures. Cause: The City does not have an effective system of internal controls in place to effectively structure and review CSLFRF subaward agreements or to effectively monitor subrecipients. Effect: Due to lack of required information being present with agreements and the contracts not clearly differentiating between a subrecipient and a beneficiary, there could be noncompliance issues in how funds are spent and recorded by the subrecipient, which could lead to noncompliance issues for the City of Bloomington and its subrecipients. Questioned costs: There are no questioned costs. Context: The 10 subrecipients represent approximately 18%, $1,025,070, of the total award expenditures of $5,590,828, in 2023. The condition reported was prevalent for each subrecipient participating in the award. Identification as a repeat finding, if applicable: Yes, finding 2022-002 in the prior year report. Recommendation: We recommend that the City institute a policy for the handling of subrecipients for all sources of federal funding. The City should review Title 2 Subtitle A Chapter II Part 200 Subpart A and ensure their agreements with subrecipients include all required information. Management should review Title 2 Subtitle A Chapter II Part 200 Subpart D and ensure all necessary monitoring procedures are being performed over subrecipients moving forward. Views of responsible officials and planned corrective actions: Management acknowledges the finding. See management’s corrective action plan attached to this audit report.
Criteria or Specific Requirement OMB’s Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (UG) requires that a pass-through entity must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information as required in 2 CFR 200.332(b). Condition and Context During our audit, we tested a sample of two subrecipients for each assistance listing number in order to determine if the subrecipient agreements contained all required elements per 2 CFR 200.332(b) and ensure sufficient subrecipient monitoring procedures were performed. As a result of our testing, it was identified that the agreements tested did not contain the subrecipient’s unique entity identifier, federal award identification number, federal award date, assistance listing title, assistance listing number, dollar amount available under each federal award and assistance listing number at the time of disbursement, and approved indirect cost rate. Cause The Organization did not have adequate controls in place to ensure all required elements were included in subrecipient agreements. Effect or Potential Effect Due to the weakness in internal controls and compliance finding noted above, the Organization did not comply with the requirements of the Uniform Guidance regarding communication to subrecipients all the specified elements in 2 CFR 200.332. No questioned costs are reported as this requirement is administrative in nature. Recommendation The Organization should address the weakness noted above and update its subrecipient agreements, policies, and procedures to ensure that all required elements are present to comply with the Uniform Guidance. Views of Responsible Official Management’s corrective action plan is included at the end of this report after the Schedule of Prior Year Findings.
Criteria or Specific Requirement OMB’s Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (UG) requires that a pass-through entity must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information as required in 2 CFR 200.332(b). Condition and Context During our audit, we tested a sample of two subrecipients for each assistance listing number in order to determine if the subrecipient agreements contained all required elements per 2 CFR 200.332(b) and ensure sufficient subrecipient monitoring procedures were performed. As a result of our testing, it was identified that the agreements tested did not contain the subrecipient’s unique entity identifier, federal award identification number, federal award date, assistance listing title, assistance listing number, dollar amount available under each federal award and assistance listing number at the time of disbursement, and approved indirect cost rate. Cause The Organization did not have adequate controls in place to ensure all required elements were included in subrecipient agreements. Effect or Potential Effect Due to the weakness in internal controls and compliance finding noted above, the Organization did not comply with the requirements of the Uniform Guidance regarding communication to subrecipients all the specified elements in 2 CFR 200.332. No questioned costs are reported as this requirement is administrative in nature. Recommendation The Organization should address the weakness noted above and update its subrecipient agreements, policies, and procedures to ensure that all required elements are present to comply with the Uniform Guidance. Views of Responsible Official Management’s corrective action plan is included at the end of this report after the Schedule of Prior Year Findings.
2023-002 Compliance and Internal Controls over Subrecipient Fiscal Monitoring (Significant Deficiency) (Repeat) U.S. Department of Health and Human Services 93.917 – HIV Care Formula Grants Passed through Texas Department of State Health Services Award Periods: April 1, 2022 to March 31, 2024 Contract No. HHS001022300001 Texas Department of State Health Services HIV Care Formula Grants Award Periods: April 1, 2022 to March 31, 2024 Contract No. HHS001022300001 Texas Department of State Health Services State HIV Service Grants Award Periods: April 1, 2022 to August 31, 2024 Contract No. HHS001022300002 Criteria: Pass-through entities are required to monitor subrecipients in accordance with 2 CFR Section 200.332. Further, under 2 CFR Section 200.303a, non-federal entities must establish and maintain effective internal controls to provide reasonable assurance that the entity is managing the federal awards in compliance with statutes, regulations, and the terms and conditions of the award. Condition: For the fiscal year ended December 31, 2023, The Resource Group did not timely perform financial monitoring of its subrecipients. Cause: Initially subrecipient monitoring was suspended due to COVID-19 in 2020 and reinstated late 2021. The Resource Group restarted their monitoring of subrecipients, however the monitoring was done by two individuals, one for programming and the other for financial monitoring. Monitoring of programming was completed timely, while the financial monitoring was not. Further, the Finance Director, who was responsible for the financial monitoring, resigned in 2023 and the successor Finance Director was hired in August 2023. After completing training to perform financial monitoring, the Finance Director completed financial monitoring during 2024. Effect: As a result of not completing all financial monitoring and the turnover in Finance Director, The Resource Group is not in compliance with grant requirements. Questioned Costs: None Noted Recommendation: The Resource Group should follow its policies to perform fiscal monitoring on its subrecipients in accordance with 2 CFR Section 200.332. Views of Responsible Officials: See corrective action plan.
Finding 2023-001: Subrecipient Monitoring Identification of federal program: Program Title: Community Economic Adjustment Assistance for Compatible Use and Joint Land Use Studies Assistance Listing Number: 12.610 Award Identification: W9124J2120002 Federal Agency: U.S. Department of Defense, Office of Local Defense Community Cooperation Criteria or Specific Requirement: Title 2 CFR § 200.303(a) requires pass-through entities to establish and maintain effective internal control over the federal award that provides reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. All pass-through entities are required to have subrecipient monitoring policies and procedures in place, which conform to the requirements of Title 2 CFR § 200.332 to identify subawards, evaluate risk of noncompliance, and perform monitoring procedures based upon identified risks. Condition: In testing compliance over subrecipient monitoring, we noted the Fund does not have a subrecipient monitoring policy in place that fully conforms with requirements of Title 2 CFR § 200.332. Cause: Historically the Fund has had few subawards and therefore has not developed full written subrecipient monitoring policies and procedures. Effect: The Fund should implement policies and procedures for monitoring subrecipients in accordance with Title 2 CFR § 200.332. Questioned Costs: None Context: While management’s existing process includes certain elements of subrecipient monitoring, a formal adopted policy is not in place that that fully conforms with requirements of Title 2 CFR § 200.332. Repeat finding: No Recommendation: Implement policies and procedures for monitoring subrecipients, including adequate documentation that conforms to the requirements of Title 2 CFR § 200.332. Views of responsible individuals: Management concurs with and will implement the recommendation. See corrective action plan.
Finding 2023-001 – Reporting Identification of federal program: Assistance Listing No. 93.558 – Temporary Assistance for Needy Families. Criteria or specific requirement: Section 200.332 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) provides the requirements for pass-through entities. A pass-through entity (PTE) must clearly identify to the subrecipient the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(2); all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The Organization was not able to provide executed agreements with its subrecipients covering the period under audit that meet the requirements of Section 200.332 of the Uniform Guidance. Cause: Management indicated that the existing subaward agreements, which do not cover the year ended December 31, 2023, were not updated due to an oversight attributed to personnel vacancies. Effect or potential effect: Noncompliance with Section 200.332 of the Uniform Guidance could result in misunderstanding in program compliance requirements. Questioned cost: not applicable. Context: The Organization was not able to provide executed agreements that cover the audit period for the two subawards made under this program. Recommendation: We recommend that the Organization update and execute agreements with its subrecipients that contains all the required elements of Section 200.332 of the Uniform Guidance. Views of responsible officials: The Organization concurs with this finding. See page 40 for corrective action plan.
Finding 2023-001 – Reporting Identification of federal program: Assistance Listing No. 93.558 – Temporary Assistance for Needy Families. Criteria or specific requirement: Section 200.332 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) provides the requirements for pass-through entities. A pass-through entity (PTE) must clearly identify to the subrecipient the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(2); all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The Organization was not able to provide executed agreements with its subrecipients covering the period under audit that meet the requirements of Section 200.332 of the Uniform Guidance. Cause: Management indicated that the existing subaward agreements, which do not cover the year ended December 31, 2023, were not updated due to an oversight attributed to personnel vacancies. Effect or potential effect: Noncompliance with Section 200.332 of the Uniform Guidance could result in misunderstanding in program compliance requirements. Questioned cost: not applicable. Context: The Organization was not able to provide executed agreements that cover the audit period for the two subawards made under this program. Recommendation: We recommend that the Organization update and execute agreements with its subrecipients that contains all the required elements of Section 200.332 of the Uniform Guidance. Views of responsible officials: The Organization concurs with this finding. See page 40 for corrective action plan.
Finding 2023-001 – Reporting Identification of federal program: Assistance Listing No. 93.558 – Temporary Assistance for Needy Families. Criteria or specific requirement: Section 200.332 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) provides the requirements for pass-through entities. A pass-through entity (PTE) must clearly identify to the subrecipient the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(2); all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The Organization was not able to provide executed agreements with its subrecipients covering the period under audit that meet the requirements of Section 200.332 of the Uniform Guidance. Cause: Management indicated that the existing subaward agreements, which do not cover the year ended December 31, 2023, were not updated due to an oversight attributed to personnel vacancies. Effect or potential effect: Noncompliance with Section 200.332 of the Uniform Guidance could result in misunderstanding in program compliance requirements. Questioned cost: not applicable. Context: The Organization was not able to provide executed agreements that cover the audit period for the two subawards made under this program. Recommendation: We recommend that the Organization update and execute agreements with its subrecipients that contains all the required elements of Section 200.332 of the Uniform Guidance. Views of responsible officials: The Organization concurs with this finding. See page 40 for corrective action plan.
Finding 2023-001 – Reporting Identification of federal program: Assistance Listing No. 93.558 – Temporary Assistance for Needy Families. Criteria or specific requirement: Section 200.332 of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance) provides the requirements for pass-through entities. A pass-through entity (PTE) must clearly identify to the subrecipient the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(2); all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The Organization was not able to provide executed agreements with its subrecipients covering the period under audit that meet the requirements of Section 200.332 of the Uniform Guidance. Cause: Management indicated that the existing subaward agreements, which do not cover the year ended December 31, 2023, were not updated due to an oversight attributed to personnel vacancies. Effect or potential effect: Noncompliance with Section 200.332 of the Uniform Guidance could result in misunderstanding in program compliance requirements. Questioned cost: not applicable. Context: The Organization was not able to provide executed agreements that cover the audit period for the two subawards made under this program. Recommendation: We recommend that the Organization update and execute agreements with its subrecipients that contains all the required elements of Section 200.332 of the Uniform Guidance. Views of responsible officials: The Organization concurs with this finding. See page 40 for corrective action plan.
2023-001 Material Weakness – Subrecipient Monitoring – Material Noncompliance Agency: U.S. Department of Treasury Federal Assistance Listing Number: 21.027 COVID-19 - Coronavirus State and Local Recovery Funds Criteria: 2 CFR 200.332(b) requires a pass-through entity to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(d) requires the passthrough entity to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Statement of Condition: Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not document their evaluation of the subrecipients risk of noncompliance and perform monitoring of the subrecipient, as required. Questioned Costs: The amount of questioned costs could not be determined. Context: Lutheran Social Services of Wisconsin and Upper Michigan, Inc.’s subrecipient was required by their contract to provide all requests for disbursement from the grantor to Lutheran Social Services of Wisconsin and Upper Michigan, Inc. for review and approval, prior to requesting the funds from the grantor. Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not receive nor did they review the three (3) draw requests during the period. Additionally, no other processes or controls were in place over the subrecipient monitoring requirement. Effect: Failure to adequately monitor the activity of a subrecipient may result in unallowable costs being charged to the federal program. Cause: Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not have proper controls in place to monitor their subrecipient. Management was unaware the subrecipient was expending passthrough funds and receiving disbursements from the federal grantor. Recommendation: We recommend management review their processes and controls surrounding subrecipients to ensure appropriate oversight is maintained and compliance with all program and contract requirements occurs. Management Response: LSS received a grant from Illinois Housing Development Authority (IHDA) which was ‘passed through’ to a tax credit project entity (the subrecipient of the grant). The agreements governing the grant to Lutheran Social Services of Wisconsin and Upper Michigan, Inc. (LSS) and loan to the subrecipient specifically called for multiple layers of review and approval by the subrecipient, IHDA, other project lenders, a title company, and at IHDA’s request, LSS. The lead developer, a member of the tax credit project entity, is responsible for managing the construction project and for preparation of all draw requests. The agreements specifically called for the tax credit project entity (as subrecipient) to certify to LSS that the draw package met the grant agreement requirements and specifications, on which certification LSS would then rely to make a corresponding certification to IHDA that the draw package met the grant agreement requirements and specifications. In this instance, the lead developer properly prepared certain draw requests (as the subrecipient), made the required certifications, and submitted them directly to IHDA without informing LSS of such draw request. Rather than requiring strict compliance with the grant agreements and rejecting the subrecipient’s draw request for the lack of LSS’s certification, IHDA elected to accept a direct certification from the subrecipient and effectively waive the LSS certification requirement. We agree that LSS did not have a monitoring system in place to ensure that the subrecipient informed LSS of draw requests and ensure that LSS’s intervening certification to IHDA be made, however there are other factors impacting the program: 1. IHDA did not notify the subrecipient or LSS under the terms of the grant documents that the intervening LSS certification was missing, and instead elected to disburse proceeds directly to the subrecipient based on the subrecipient’s direct certification which served as a waiver of the requirement of the intervening LSS certification. 2. All draw requests were approved by the contractor, the architect, the construction lender, and the title company, which multiple additional layers of review put into place by LSS and IHDA as part of grant document negotiation ensured that grant funds were properly utilized for qualifying project expenses. 3. All parties have been made aware of this issue and it has not resulted in any financial, operational or reputation implications. We have put in place a process to ensure all draw requests come to LSS for review and documented sign-off approval before submission to IHDA.
2023-001 Material Weakness – Subrecipient Monitoring – Material Noncompliance Agency: U.S. Department of Treasury Federal Assistance Listing Number: 21.027 COVID-19 - Coronavirus State and Local Recovery Funds Criteria: 2 CFR 200.332(b) requires a pass-through entity to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(d) requires the passthrough entity to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Statement of Condition: Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not document their evaluation of the subrecipients risk of noncompliance and perform monitoring of the subrecipient, as required. Questioned Costs: The amount of questioned costs could not be determined. Context: Lutheran Social Services of Wisconsin and Upper Michigan, Inc.’s subrecipient was required by their contract to provide all requests for disbursement from the grantor to Lutheran Social Services of Wisconsin and Upper Michigan, Inc. for review and approval, prior to requesting the funds from the grantor. Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not receive nor did they review the three (3) draw requests during the period. Additionally, no other processes or controls were in place over the subrecipient monitoring requirement. Effect: Failure to adequately monitor the activity of a subrecipient may result in unallowable costs being charged to the federal program. Cause: Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not have proper controls in place to monitor their subrecipient. Management was unaware the subrecipient was expending passthrough funds and receiving disbursements from the federal grantor. Recommendation: We recommend management review their processes and controls surrounding subrecipients to ensure appropriate oversight is maintained and compliance with all program and contract requirements occurs. Management Response: LSS received a grant from Illinois Housing Development Authority (IHDA) which was ‘passed through’ to a tax credit project entity (the subrecipient of the grant). The agreements governing the grant to Lutheran Social Services of Wisconsin and Upper Michigan, Inc. (LSS) and loan to the subrecipient specifically called for multiple layers of review and approval by the subrecipient, IHDA, other project lenders, a title company, and at IHDA’s request, LSS. The lead developer, a member of the tax credit project entity, is responsible for managing the construction project and for preparation of all draw requests. The agreements specifically called for the tax credit project entity (as subrecipient) to certify to LSS that the draw package met the grant agreement requirements and specifications, on which certification LSS would then rely to make a corresponding certification to IHDA that the draw package met the grant agreement requirements and specifications. In this instance, the lead developer properly prepared certain draw requests (as the subrecipient), made the required certifications, and submitted them directly to IHDA without informing LSS of such draw request. Rather than requiring strict compliance with the grant agreements and rejecting the subrecipient’s draw request for the lack of LSS’s certification, IHDA elected to accept a direct certification from the subrecipient and effectively waive the LSS certification requirement. We agree that LSS did not have a monitoring system in place to ensure that the subrecipient informed LSS of draw requests and ensure that LSS’s intervening certification to IHDA be made, however there are other factors impacting the program: 1. IHDA did not notify the subrecipient or LSS under the terms of the grant documents that the intervening LSS certification was missing, and instead elected to disburse proceeds directly to the subrecipient based on the subrecipient’s direct certification which served as a waiver of the requirement of the intervening LSS certification. 2. All draw requests were approved by the contractor, the architect, the construction lender, and the title company, which multiple additional layers of review put into place by LSS and IHDA as part of grant document negotiation ensured that grant funds were properly utilized for qualifying project expenses. 3. All parties have been made aware of this issue and it has not resulted in any financial, operational or reputation implications. We have put in place a process to ensure all draw requests come to LSS for review and documented sign-off approval before submission to IHDA.
2023-001 Material Weakness – Subrecipient Monitoring – Material Noncompliance Agency: U.S. Department of Treasury Federal Assistance Listing Number: 21.027 COVID-19 - Coronavirus State and Local Recovery Funds Criteria: 2 CFR 200.332(b) requires a pass-through entity to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(d) requires the passthrough entity to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Statement of Condition: Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not document their evaluation of the subrecipients risk of noncompliance and perform monitoring of the subrecipient, as required. Questioned Costs: The amount of questioned costs could not be determined. Context: Lutheran Social Services of Wisconsin and Upper Michigan, Inc.’s subrecipient was required by their contract to provide all requests for disbursement from the grantor to Lutheran Social Services of Wisconsin and Upper Michigan, Inc. for review and approval, prior to requesting the funds from the grantor. Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not receive nor did they review the three (3) draw requests during the period. Additionally, no other processes or controls were in place over the subrecipient monitoring requirement. Effect: Failure to adequately monitor the activity of a subrecipient may result in unallowable costs being charged to the federal program. Cause: Lutheran Social Services of Wisconsin and Upper Michigan, Inc. did not have proper controls in place to monitor their subrecipient. Management was unaware the subrecipient was expending passthrough funds and receiving disbursements from the federal grantor. Recommendation: We recommend management review their processes and controls surrounding subrecipients to ensure appropriate oversight is maintained and compliance with all program and contract requirements occurs. Management Response: LSS received a grant from Illinois Housing Development Authority (IHDA) which was ‘passed through’ to a tax credit project entity (the subrecipient of the grant). The agreements governing the grant to Lutheran Social Services of Wisconsin and Upper Michigan, Inc. (LSS) and loan to the subrecipient specifically called for multiple layers of review and approval by the subrecipient, IHDA, other project lenders, a title company, and at IHDA’s request, LSS. The lead developer, a member of the tax credit project entity, is responsible for managing the construction project and for preparation of all draw requests. The agreements specifically called for the tax credit project entity (as subrecipient) to certify to LSS that the draw package met the grant agreement requirements and specifications, on which certification LSS would then rely to make a corresponding certification to IHDA that the draw package met the grant agreement requirements and specifications. In this instance, the lead developer properly prepared certain draw requests (as the subrecipient), made the required certifications, and submitted them directly to IHDA without informing LSS of such draw request. Rather than requiring strict compliance with the grant agreements and rejecting the subrecipient’s draw request for the lack of LSS’s certification, IHDA elected to accept a direct certification from the subrecipient and effectively waive the LSS certification requirement. We agree that LSS did not have a monitoring system in place to ensure that the subrecipient informed LSS of draw requests and ensure that LSS’s intervening certification to IHDA be made, however there are other factors impacting the program: 1. IHDA did not notify the subrecipient or LSS under the terms of the grant documents that the intervening LSS certification was missing, and instead elected to disburse proceeds directly to the subrecipient based on the subrecipient’s direct certification which served as a waiver of the requirement of the intervening LSS certification. 2. All draw requests were approved by the contractor, the architect, the construction lender, and the title company, which multiple additional layers of review put into place by LSS and IHDA as part of grant document negotiation ensured that grant funds were properly utilized for qualifying project expenses. 3. All parties have been made aware of this issue and it has not resulted in any financial, operational or reputation implications. We have put in place a process to ensure all draw requests come to LSS for review and documented sign-off approval before submission to IHDA.
Finding 2023-002: Pre-Award Risk Assessment for Sub-Recipient Information on the Federal Program: 93.048 Criteria: As stated in 2 CFR 200.331 part (b), all pass-through entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring procedures to prescribe to each individual subrecipient. Condition: During our testing performed over subrecipient expenditures, we were unable to obtain evidence that pre-award risk assessment procedures were performed over subrecipients, consistent with 2 CFR §200.332(b). Cause: The Organization's internal policies and procedures governing risk assessment on subrecipients was not performed. Effect or Potential Effect: The Organization could inadvertently be engaged in relationships with subrecipients of higher risk without the appropriate level of oversight to ensure subrecipients are expending funds in accordance with the provisions and terms of the subaward. Questioned Costs: None noted. Context: Our audit procedures consisted of substantive testwork over a sample of subrecipients. We consider our sample to be representative of the population. The samples were made using statistical sampling and we believe the condition appeared to be systematic in nature. Identification as a Repeat Finding, if Applicable: Not a repeat finding. Recommendation: We recommend that the Organization follow their internal policies regarding performing a pre-award risk assessment on all new sub-recipients engaged throughout the life of the award. For repeat sub-recipients, the risk assessment should be re-visited throughout the award term to ensure that conditions have not changed and the original risk assessment remains reasonable.
Criteria or specific requirement: The Code of Federal Regulations, 2 CFR 200.332, states that nonfederal entities passing federal awards through to other entities are required to ensure that subawards to subrecipients include required federal award identification and detail of all compliance and other requirements for the federal award. Condition: During our testing we noted that the Company did not include the federally required elements of the award in the subrecipient agreement. Context: For 6 of the 9 subrecipients selected, the Company did not include in their agreements the required federal award information as outlined by 2 CFR 200.332. Cause: Management was made aware of requirements during the award period and created addendums for agreements with subrecipients. For 6 of the 9 subrecipients selected, addendums with the conditions of the award were not created at the time of our review, and the required information was not provided to subrecipients. Effect: The Company is not in compliance with subrecipient monitoring requirements as outlined by 2 CFR 200.332. Recommendation: We recommend the Company to include all guidance under 2 CFR 200.332 in the agreements entered with subrecipients. Views of responsible officials: There is no disagreement with the audit finding. The company has investigated why the information was not provided, and found the cause was an isolated incident, and the error of a former employee who has since been removed from the company. Measures have been put in place to ensure future compliance.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
U.S. Department of Treasury Passed-through the Colorado Department of Local Affairs FFAL #21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Subrecipient Monitoring Material Noncompliance Material Weakness in Internal Controls Criteria: Section 2 CFR 200.331 establishes the determination of whether there is a subrecipient or contractor of the federal award. The non-Federal entity may concurrently receive Federal awards as a recipient, a subrecipient, and a contractor, depending on the substance of its agreements with Federal awarding agencies and pass-through entities. Therefore, a passthrough entity must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. The Federal awarding agency may supply and require recipients to comply with additional guidance to support these determinations provided such guidance does not conflict with this section. Once it is determined the recipient is a sub-recipient there are certain requirements for pass-through entities established in 2 CFR 200.332. Per 2 CFR 200.332, pass-through entities are responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Pass-through entities are required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. Further, the pass-through entity is required to perform certain monitoring activities to ensure the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Finally, the pass-through entity should also verify the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: The County did not appropriately identify two subrecipients of the grant and initially determined them to be contractors. The County failed to perform any subrecipient monitoring as required by the Uniform Guidance. Cause: Due to the County’s failure to understand the sub-recipient monitoring requirements, two of subawards were incorrectly identified as contractors and none of the required award and monitoring procedures were performed for the four subrecipients of the grant. Effect: Insufficient procedures and internal controls related to subrecipients resulted in noncompliance. Questioned Costs: No questioned costs were identified as a result of our procedures. 16 Summit County, Colorado Schedule of Findings and Questioned Costs Year Ended December 31, 2023 Context/Sampling: All four subrecipients were selected for subrecipient monitoring testing. Repeat Finding from Prior Years: No. Recommendation: We recommend that the County establish and adhere to policies and procedures, including internal controls, to ensure compliance with subrecipient monitoring requirements as established by 2 CFR 200.331 and 2 CFR 200.332. Views of Responsible Officials: Management agrees with the finding.
Finding # 2023-003 Subrecipient Monitoring (Significant Deficiency) Information on the Federal Programs: Assistance Listing #98.001 USAID Foreign Assistance for Programs Overseas Criteria or Specific Requirement: § 200.332, Requirements for pass-through entities, requires pass-through entities to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. The statute also requires pass-through entities to include certain federal award identifying information within the subaward agreement. Condition: The Institute maintains subaward selection and monitoring policies. However, the policies do not include pre-prescribed monitoring procedures based on an assessed level of risk assigned in the subaward selection stage. Additionally, as part of our audit, we selected a sample of subawards charged to the major federal programs. We noted that a subaward agreement did not contain certain federal award identifying information, specifically the relevant Federal Assistance Listing Number (ALN). Cause: The Institute maintains subaward selection and monitoring policies that do not include preprescribed monitoring procedures based on an assessed level of risk. Additionally, Federal Assistance Listing Number were omitted from the subaward agreements based on an oversight during the subaward writing process. Effect or Potential Effect: The Institute may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Not including Federal Assistance Listing Numbers in the subaward agreement could lead to the subrecipient omitting the subaward from its Schedule of Expenditures of Federal Awards. Questioned Costs: N/A Context: The Institute executes subaward agreements under US Federal grants. Therefore, the Institute is subject to § 200.332 Requirements for pass-through entities. Our audit procedures consisted of testwork completed on subawards charged to the federal awards. The report in which samples were selected was generated directly from the Institute’s general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend that the Institute revise its subaward selection and monitoring policies to include pre-prescribed monitoring procedures based on an assessed level of risk assigned in the subaward selection stage. The assessed level of risk should be documented in a pre-award risk assessment. Additionally, we recommend that the Institute ensure that all subaward agreements include all elements required by §200.332.
Finding # 2023-003 Subrecipient Monitoring (Significant Deficiency) Information on the Federal Programs: Assistance Listing #98.001 USAID Foreign Assistance for Programs Overseas Criteria or Specific Requirement: § 200.332, Requirements for pass-through entities, requires pass-through entities to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. The statute also requires pass-through entities to include certain federal award identifying information within the subaward agreement. Condition: The Institute maintains subaward selection and monitoring policies. However, the policies do not include pre-prescribed monitoring procedures based on an assessed level of risk assigned in the subaward selection stage. Additionally, as part of our audit, we selected a sample of subawards charged to the major federal programs. We noted that a subaward agreement did not contain certain federal award identifying information, specifically the relevant Federal Assistance Listing Number (ALN). Cause: The Institute maintains subaward selection and monitoring policies that do not include preprescribed monitoring procedures based on an assessed level of risk. Additionally, Federal Assistance Listing Number were omitted from the subaward agreements based on an oversight during the subaward writing process. Effect or Potential Effect: The Institute may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Not including Federal Assistance Listing Numbers in the subaward agreement could lead to the subrecipient omitting the subaward from its Schedule of Expenditures of Federal Awards. Questioned Costs: N/A Context: The Institute executes subaward agreements under US Federal grants. Therefore, the Institute is subject to § 200.332 Requirements for pass-through entities. Our audit procedures consisted of testwork completed on subawards charged to the federal awards. The report in which samples were selected was generated directly from the Institute’s general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend that the Institute revise its subaward selection and monitoring policies to include pre-prescribed monitoring procedures based on an assessed level of risk assigned in the subaward selection stage. The assessed level of risk should be documented in a pre-award risk assessment. Additionally, we recommend that the Institute ensure that all subaward agreements include all elements required by §200.332.
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
Finding 2023-001: Subrecipient Pre-award Risk Assessment Information on the Federal Programs: All Programs Criteria or Specific Requirement: CFR § 200.332, "Requirements for pass-through entities", requires pass-through entities to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: During our testing of subawards, we were unable to verify that pre-award risk assessment procedures were performed. We additionally noted that these requirements were not incorporated into the Organizations' current policies and procedures. Cause: The Organizations do not have a formal internal policy with respect to performing subaward risk assessments as required by Federal regulation at the execution of the subaward agreements or on a regular basis. Effect or Potential Effect: The Organizations may have inadvertently failed to perform monitoring procedures appropriate for a subrecipient’s assessed level of risk. Questioned Costs: N/A Context: The Organizations execute subaward agreements under US Federal grants. Therefore, the Organizations are subject to CFR § 200.332 "Requirements for pass-through entities". Our audit procedures consisted of testwork completed on subawards and individual expenditures charged to the Federal awards. The report in which samples were selected was generated directly from the Organizations' general ledger (accounting system). We consider our sample to be representative of the population. Identification as a Repeat Finding: N/A Recommendation: We recommend the Organizations develop a subaward policy to ensure the risk assessment procedures over its subrecipients are performed and documented prior to engagement. Based on these risk assessments, the Organizations should assign a risk level to each, and then determine the monitoring tools to apply based on these risk levels. We also recommend the Organizations require its subrecipients to submit financial reports demonstrating use of each advance before advancing more funds, to ensure subrecipients are expending funds appropriately. Recommended factors to consider when developing a policy are as follows: Refer to 2 CFR 200.331 part (a) for complete listing of data elements that are required to be included in every subaward, and incorporate this listing into the updated policies and procedures. Establish criteria to be used in the evaluation of the risk of noncompliance associated with the intended subrecipient for the purpose of determining the expected level of oversight during the period of performance. This evaluation should include a scaling system, such as high, medium or low risk (for example), and the monitoring tools and procedures to be performed at each of these levels (additional training, on-site reviews, types of and frequency of reporting, etc.).
FINDING 2023-002 Program Information: Temporary Assistance for Needy Families (ALN #93.558) Criteria or Specific Requirement (Including Statutory, Regulatory or Other Citation): Federal Compliance Requirement: M. Subrecipient Monitoring – The pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f). Condition: The Organization did not have sufficient monitoring processes in place to detect erroneous costs charged to the TANF grant. Cause: Lack of administrative oversight with respect to subrecipient monitoring requirements. Effect or Potential Effect: The Organization was not in compliance with subrecipient monitoring requirements. Questioned Costs: Amount below reportable threshold. Context: For 1 of 22 invoices the Organization did not perform sufficient subrecipient monitoring procedures to detect erroneous costs charged by the subrecipient. Identification as a Repeat Finding: No similar findings noted in the prior year. Recommendation: We recommend that the Organization enhance its policies and procedures over subrecipient monitoring to properly detect and prevent erroneous calculations. Views of Responsible Officials and Planned Corrective Actions: The Organization will properly monitor the subaward disbursed to provide reasonable assurance the subrecipient used the subaward for authorized purposes.
Finding 2023-002: Subrecipient Monitoring - Review of Audit Reports Information on the Federal Program: Assistance Listing Numbers 19.705 and 19.345 Criteria: As stated in 2 CFR 200.332(f), all pass-through entities must verify that every subrecipient is audited as required by 2 CFR 200 Subpart F when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold for triggering such an audit. Condition: We were unable to determine whether Accountability Lab performed procedures to verify whether or not its subrecipients were subject to a compliance audit in accordance with 2 CFR 200 Subpart F. Cause: Accountability Lab does not have a formal/regularized process in place to monitor subrecipient audit requirements. Effect: Accountability Lab's current practices do not provide sufficient documentation to demonstrate its compliance with the requirements to obtain and review subrecipient audit reports. Questioned Costs: None noted. Context: Our audit work included three subrecipients across two major programs. For two out of the three subrecipients tested, we were not able to verify whether or not Accountability Lab obtained and reviewed the subrecipient audit reports. Identification as a Repeat Finding: Not applicable. Recommendation: Accountability Lab should implement a "Review of Subrecipient Audit" form, to be completed annually for each subrecipient that receives U.S. Government funding. The form should document a) the subrecipient's name; b) the annual amount of U.S. Government funds expended by the subrecipient; c) whether the subrecipient was subject to a U.S. Government compliance audit under 2 CFR 200 Subpart F; and d) Accountability Lab's formal review of the audit report as well as its conclusions and follow up on any reported findings, if applicable.
Finding 2023-002: Subrecipient Monitoring - Review of Audit Reports Information on the Federal Program: Assistance Listing Numbers 19.705 and 19.345 Criteria: As stated in 2 CFR 200.332(f), all pass-through entities must verify that every subrecipient is audited as required by 2 CFR 200 Subpart F when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold for triggering such an audit. Condition: We were unable to determine whether Accountability Lab performed procedures to verify whether or not its subrecipients were subject to a compliance audit in accordance with 2 CFR 200 Subpart F. Cause: Accountability Lab does not have a formal/regularized process in place to monitor subrecipient audit requirements. Effect: Accountability Lab's current practices do not provide sufficient documentation to demonstrate its compliance with the requirements to obtain and review subrecipient audit reports. Questioned Costs: None noted. Context: Our audit work included three subrecipients across two major programs. For two out of the three subrecipients tested, we were not able to verify whether or not Accountability Lab obtained and reviewed the subrecipient audit reports. Identification as a Repeat Finding: Not applicable. Recommendation: Accountability Lab should implement a "Review of Subrecipient Audit" form, to be completed annually for each subrecipient that receives U.S. Government funding. The form should document a) the subrecipient's name; b) the annual amount of U.S. Government funds expended by the subrecipient; c) whether the subrecipient was subject to a U.S. Government compliance audit under 2 CFR 200 Subpart F; and d) Accountability Lab's formal review of the audit report as well as its conclusions and follow up on any reported findings, if applicable.
Finding 2023-002: Subrecipient Monitoring - Review of Audit Reports Information on the Federal Program: Assistance Listing Numbers 19.705 and 19.345 Criteria: As stated in 2 CFR 200.332(f), all pass-through entities must verify that every subrecipient is audited as required by 2 CFR 200 Subpart F when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold for triggering such an audit. Condition: We were unable to determine whether Accountability Lab performed procedures to verify whether or not its subrecipients were subject to a compliance audit in accordance with 2 CFR 200 Subpart F. Cause: Accountability Lab does not have a formal/regularized process in place to monitor subrecipient audit requirements. Effect: Accountability Lab's current practices do not provide sufficient documentation to demonstrate its compliance with the requirements to obtain and review subrecipient audit reports. Questioned Costs: None noted. Context: Our audit work included three subrecipients across two major programs. For two out of the three subrecipients tested, we were not able to verify whether or not Accountability Lab obtained and reviewed the subrecipient audit reports. Identification as a Repeat Finding: Not applicable. Recommendation: Accountability Lab should implement a "Review of Subrecipient Audit" form, to be completed annually for each subrecipient that receives U.S. Government funding. The form should document a) the subrecipient's name; b) the annual amount of U.S. Government funds expended by the subrecipient; c) whether the subrecipient was subject to a U.S. Government compliance audit under 2 CFR 200 Subpart F; and d) Accountability Lab's formal review of the audit report as well as its conclusions and follow up on any reported findings, if applicable.
Finding: Subrecipient Monitoring Federal Assistance Listing Number 21.023 COVID-19 Emergency Rental Assistance Program Department of Treasury Award Number - ERAE0226, Award Year 2021 Criteria: According to 2 CFR Part 200.332 - All pass through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and include various required information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. In addition, pass through entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Finally, the pass through entities must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, is in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Condition: During testing, we noted the following: - The Assistance Listings number and Title were not provided to the County's two subrecipients in accordance with 2 CFR Part 200.332(a) - The County did not have a formal documented risk assessment completed for either of the County's two subrecipients in accordance with 2 CFR Part 200.332(b) - The County did not obtain or review one of the subrecipients single audit reports in accordance with 2 CFR Part 200.332(f) Questioned costs: None. Context: We tested the County's two subrecipients receiving $1,075,000 in subrecipient awards for the year ended December 31, 2023 and noted the issues above. A non-statistical sampling methodology was used to select the sample. Effect: The subrecipient may be unaware whether the funds are federal or what compliance requirements they are responsible for following. In addition, The County may not perform the adequate level of monitoring as formal risk assessments were not completed. Finally, the County did not review the single audit report and while any finding would not directly be related to the subaward program, failure to review such reports and take appropriate action could result in non-compliance by the subrecipient continuing for an inappropriate length of time. Cause: The County does not have adequate internal controls over subrecipient monitoring to ensure that the County is in compliance with subrecipient monitoring requirements. Identification as a repeat finding: Not applicable. Recommendation: We recommend that the County develop a risk assessment template or form to be completed over each federal subrecipient. The County should provide training to those administering grants over the development risk assessment template or form and the associated monitoring to be performed based on each assessed risk. In addition, the County should develop a subrecipient grant template to help ensure all required information is included within each award. Finally, the County should establish a policy or procedure over obtaining and reviewing audits completed over each of their subrecipients. Views of responsible officials: The County agrees with the finding. See separate auditee document for planned corrective actions.
Finding Number: 2023-001 Internal Control over Compliance and Compliance with the Subrecipient Monitoring Compliance Requirement, Repeat Finding, Finding No. 2022-001 Identification of the Major Federal Program: Programs: Government Agency: Inclusion Across the Nation of Communities of Learners of Underrepresented Discoverers in Engineering and Science Assistance Listing Number: 47.076 Award Number: HRD-1834540 Award Years: 09/01/2018 – 02/28/2025 PhysTEC: Building a Solution to the National Physics Teacher Shortage Assistance Listing Number: 47.049 Award Number: PHY-1707990 Award Years: 07/01/2017 – 06/30/2023 National Science Foundation (NSF) Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the “Transparency Act” that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions – Our examination of the program’s subrecipient monitoring requirements includes the review and approval of financial and performance quarterly reports by the program managers. The quarterly reports are prepared by APS’ grants administrator with inputs provided by the subrecipient submitted to the program managers. Of the program’s twenty (20) subrecipients, we examined eight (8) subrecipients and observed that although the respective program managers had monitoring oversight of the various grant’s financial and programmatic activities, there was no formal evidentiary documentation to support the monitoring oversight process performed by the program managers. Furthermore, our examination of the program’s subrecipient monitoring requirements includes follow-ups by APS to ensure the subrecipients take timely and appropriate action on all deficiencies pertaining to federal awards provided to the subrecipients which have been detected through reviews of audits, on-site reviews, and other means. We selected six (6) subrecipients for testing and noted that for two (2) samples selected APS was unable to provide evidence that it monitored the subrecipients through review of its single audit reports, on-site reviews, and other means. We also tested a sample of three (3) subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds timely and on one (1) of the sub awards reported, the contract award amount reported is less than the actual expenditures incurred by the subrecipient. APS began implementation of its corrective action plan on June 5, 2023, and the exceptions identified above is as a result of the fact that APS was still in the implementation process of its corrective action plan. Cause - Management does not have adequate internal controls and policies and procedures in place to ensure that a review is performed on the financial and programmatic reports in a timely manner and to ensure that its subrecipients do not have any audit deficiencies relating to federal award programs and if any deficiencies are detected, that the subrecipients takes timely and appropriate action to resolve the deficiencies identified. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS’ noncompliance with the reporting requirements. Effect or potential effect – APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. In addition, failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs – None. Context – These are conditions identified per review of APS compliance with specified compliance requirements using a statistically valid sample. Recommendations – BDO recommends that APS continue to apply the implemented policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are documented and maintained. Furthermore, APS should continue to implement policies to obtain and review single audit reports of its subrecipients in order to ensure compliance with all the required laws, guidelines and requirement under the award. BDO recommends that APS continues to implement established policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS’ corrective action is described in the Management’s Corrective Action Plan included below.
Finding Number: 2023-001 Internal Control over Compliance and Compliance with the Subrecipient Monitoring Compliance Requirement, Repeat Finding, Finding No. 2022-001 Identification of the Major Federal Program: Programs: Government Agency: Inclusion Across the Nation of Communities of Learners of Underrepresented Discoverers in Engineering and Science Assistance Listing Number: 47.076 Award Number: HRD-1834540 Award Years: 09/01/2018 – 02/28/2025 PhysTEC: Building a Solution to the National Physics Teacher Shortage Assistance Listing Number: 47.049 Award Number: PHY-1707990 Award Years: 07/01/2017 – 06/30/2023 National Science Foundation (NSF) Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the “Transparency Act” that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions – Our examination of the program’s subrecipient monitoring requirements includes the review and approval of financial and performance quarterly reports by the program managers. The quarterly reports are prepared by APS’ grants administrator with inputs provided by the subrecipient submitted to the program managers. Of the program’s twenty (20) subrecipients, we examined eight (8) subrecipients and observed that although the respective program managers had monitoring oversight of the various grant’s financial and programmatic activities, there was no formal evidentiary documentation to support the monitoring oversight process performed by the program managers. Furthermore, our examination of the program’s subrecipient monitoring requirements includes follow-ups by APS to ensure the subrecipients take timely and appropriate action on all deficiencies pertaining to federal awards provided to the subrecipients which have been detected through reviews of audits, on-site reviews, and other means. We selected six (6) subrecipients for testing and noted that for two (2) samples selected APS was unable to provide evidence that it monitored the subrecipients through review of its single audit reports, on-site reviews, and other means. We also tested a sample of three (3) subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds timely and on one (1) of the sub awards reported, the contract award amount reported is less than the actual expenditures incurred by the subrecipient. APS began implementation of its corrective action plan on June 5, 2023, and the exceptions identified above is as a result of the fact that APS was still in the implementation process of its corrective action plan. Cause - Management does not have adequate internal controls and policies and procedures in place to ensure that a review is performed on the financial and programmatic reports in a timely manner and to ensure that its subrecipients do not have any audit deficiencies relating to federal award programs and if any deficiencies are detected, that the subrecipients takes timely and appropriate action to resolve the deficiencies identified. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS’ noncompliance with the reporting requirements. Effect or potential effect – APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. In addition, failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs – None. Context – These are conditions identified per review of APS compliance with specified compliance requirements using a statistically valid sample. Recommendations – BDO recommends that APS continue to apply the implemented policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are documented and maintained. Furthermore, APS should continue to implement policies to obtain and review single audit reports of its subrecipients in order to ensure compliance with all the required laws, guidelines and requirement under the award. BDO recommends that APS continues to implement established policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS’ corrective action is described in the Management’s Corrective Action Plan included below.
Federal Agency: U.S. Department of Treasury Federal Program Title: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Program Year: January 1, 2023 – December 31, 2023 Pass-Through Agency: Indiana Finance Authority Pass-Through Number: Unknown Type of Finding: • Significant deficiency and noncompliance Criteria or Specific Requirement – Subrecipient Monitoring: Pursuant to 2 CFR § 200.331, non-Federal entities can award subawards for the purpose of carrying out a portion of a federal award and creates a federal assistance relationship with the subrecipient. In addition, pursuant to 2 CFR § 200.332, the non-Federal entity must identify to the subrecipient as a subaward and includes the Federal award identification. The non-Federal entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, incompliance with Federal statutes, regulations, and the terms and conditions of the subaward. Condition: The County could not provide support that it had sufficient review of the subrecipient during the year on a consistent basis. The County had not properly designed or implemented a system of internal controls that would likely be effective in preventing, detecting, and correcting, noncompliance. Questioned Costs: None Context: It was noted that the file selected for testing did not have documented evidence supporting that the County had sufficient monitoring and communication of the subrecipient. From a population of three files, one was selected for testing. Our sample was not intended to be statistically valid. Effect: The County was unable to support that the subrecipients were being monitored. Cause: Failure to maintain sufficient monitoring of the subrecipient Identification as a Repeat Finding: Yes, 2022-003 Recommendation: We recommend the County maintain adequate communication and documentation with the subrecipients to ensure compliance with the subrecipients requirement. This documentation could include a quarterly communication, receipt of the audited financial statements and single audit report, if applicable. Views of Responsible Officials and Planned Corrective Action: The County is aware of the compliance requirement and has implemented additional procedures, including certain of those identified in the recommendation above, to be able to support suspension and debarment processes are in place. Persons responsible for implementing: Abby Doyle, Chief Deputy Auditor Anticipated completion date: Completed.
Federal Agency: U.S. Department of Treasury Federal Program Title: COVID-19 Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Program Year: January 1, 2023 – December 31, 2023 Pass-Through Agency: Indiana Finance Authority Pass-Through Number: Unknown Type of Finding: • Significant deficiency and noncompliance Criteria or Specific Requirement – Subrecipient Monitoring: Pursuant to 2 CFR § 200.331, non-Federal entities can award subawards for the purpose of carrying out a portion of a federal award and creates a federal assistance relationship with the subrecipient. In addition, pursuant to 2 CFR § 200.332, the non-Federal entity must identify to the subrecipient as a subaward and includes the Federal award identification. The non-Federal entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, incompliance with Federal statutes, regulations, and the terms and conditions of the subaward. Condition: The County could not provide support that it had sufficient review of the subrecipient during the year on a consistent basis. The County had not properly designed or implemented a system of internal controls that would likely be effective in preventing, detecting, and correcting, noncompliance. Questioned Costs: None Context: It was noted that the file selected for testing did not have documented evidence supporting that the County had sufficient monitoring and communication of the subrecipient. From a population of three files, one was selected for testing. Our sample was not intended to be statistically valid. Effect: The County was unable to support that the subrecipients were being monitored. Cause: Failure to maintain sufficient monitoring of the subrecipient Identification as a Repeat Finding: Yes, 2022-003 Recommendation: We recommend the County maintain adequate communication and documentation with the subrecipients to ensure compliance with the subrecipients requirement. This documentation could include a quarterly communication, receipt of the audited financial statements and single audit report, if applicable. Views of Responsible Officials and Planned Corrective Action: The County is aware of the compliance requirement and has implemented additional procedures, including certain of those identified in the recommendation above, to be able to support suspension and debarment processes are in place. Persons responsible for implementing: Abby Doyle, Chief Deputy Auditor Anticipated completion date: Completed.
Criteria: Per 2 CFR 200.332, Mesa County is responsible for informing subrecipients of the Federal award identifiers including but not limited to award date, period of performance and Federal awarding agency and Assistance Listing Number and title. Mesa County is required to assess the subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. In addition, the County should also verify that the subrecipient is audited as required by Subpart F - Audit Requirement under the Uniform Guidance. The monitoring policy should include an initial valuation of risk of noncompliance to determine the appropriate level of monitoring required related to the subaward as well as appropriate awarding documentation. Condition: During our testing, we evaluated the procedures for evaluating subrecipient’s risk of noncompliance with Federal statutes, regulations and the terms and conditions of the subaward. We noted the following: • For two (2) of two (2) subrecipients selected, the required evaluation of the subrecipient’s risk of noncompliance was not documented. Cause: The County did not adhere to their established policies and procedures relating to risk assessment when a subrecipient contract is awarded. Effect: The County’s policies were not consistently followed requiring compliance with the Subrecipient monitoring requirements in 2 CFR 200.332. Additionally, the County’s control policies were not consistently followed. Questioned Costs: None to report. Context/Sampling: The population of two (2) subrecipients were selected for subrecipient monitoring testing for the direct award from the US Department of Treasury. The total population across the program, including sub-awards from the State of Colorado was 2 subrecipients. Repeat Finding from Prior Years: Yes. Recommendation: We recommend that the County adhere to their policies and procedures in accordance with 2 CFR 200.332 to ensure compliance with subrecipient monitoring requirements. Views of Responsible Officials: Agree
Cluster: Research and Development Agency: Department of Human and Health Services Award Names: Safety and Health Risks in Energy Transition for the Commercial Fishing Industry Award Numbers: U01OH012502 Assistance Listing Title: Center for Disease Control and Prevention (CDC) Assistance Listing Number: 93.262 Award Year: FY 2023 Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Condition Through our testing of 4 subrecipients out of a total subrecipient population of 10, we were able to obtain a documented initial risk assessment for each subrecipient selected and other evidence of monitoring such as meetings with the subrecipients. However, we were unable to obtain evidence that the Company obtained and reviewed the annual Uniform Guidance report or annual audited financial statements (if the entity was not subject to a Uniform Guidance audit) for 1 out of 4 subrecipients selected for testing. Cause The Company failed to ensure that their subrecipient monitoring process included obtaining and reviewing every subrecipient’s annual Uniform Guidance report or annual audited financial statements during FY 2023. Effect The lack of an annual review of subrecipient audits may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend the Company follow their policy, which includes obtaining and reviewing Uniform Guidance reports (or audited financial statements to the extent Uniform Guidance reports are not available) for every subrecipient on an annual basis and ensure that it is completed for all applicable awards. When reviewing the reports, they should understand the type of opinion(s) expressed and whether there were any findings associated with their awards, document their review and assess whether there is any change in the risk assessment and subsequent monitoring needed of each subrecipient. We also recommend a supervisory review over subrecipient monitoring to be included in the process to ensure it gets completed completely and accurately for all awards. This supervisory review should also be evidenced through documentation. This is a repeat finding of 2022-001, which continued to remain open during FY2023. Management’ Views and Corrective Action Plan Management’s Views and Corrective Action Plan are included at the end of this report.
MONITORING Significant Deficiency in Internal Control Over Compliance and Noncompliance ALN 93.391 – Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises Department of Health and Human Services Award Number: NH75OT0000010 Award Year: 2021 Criteria or Specific Requirement: The Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. The Uniform Guidance in 2 CFR Section 200.332 states- All pass-through entities must ensure that every subaward is clearly identified to the subrecipient and includes the following information at the time of the subaward as follows: (1) Federal award identification, (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations, and terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports, (4) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (5) Appropriate terms and conditions concerning the closeout of the subaward. Condition: For all four subrecipients tested, subaward agreements did not include the award information required under 2 CFR 200.332. This was a finding carried over from the prior period. There were no new contracts entered into with subrecipients during 2023. Cause: Subaward agreements were not properly written and appropriately reviewed to ensure all required award information was included. Effect or Potential Effect: Denver Department of Public Health and Environment (DDPHE) was not in compliance with subrecipient requirements outlined in 2 CFR Section 200.332. Furthermore, not communicating proper compliance requirements and other information may increase the likelihood of noncompliance on the part of the subrecipient and non-fulfillment of program goals and objectives. In addition, this also increases the risk the subrecipient may not understand they are receiving Federal funds, which could result in subrecipients failing to comply with the Uniform Guidance or pass-through entity requirements for the award. Questioned Costs: Not applicable Context: The control finding was remediated in 2023. However, the control was not present when DDPHE entered into agreements with its subrecipients. These were the same contracts in existence in the prior period. The grant ended on May 31, 2023, and was closed out. Identification as a Repeat Finding: This is a repeat finding from the prior year. This was reported as finding 2022-007 in the 2022 report. Recommendation: DDPHE should revise future subaward agreements to include specific Federal award identification information and language clearly stating applicable audit requirements subrecipients must comply with to ensure all agreements comply with the requirements in 2 CFR Section 200.332. Views of Responsible Officials: This has been remediated. For additional information, see the City’s separate report for planned corrective actions.
Finding 2023-001 – Subrecipient Monitoring Federal Agency: Department of Treasury Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds – ALN #21.027 Condition: The County did not have a documented risk assessment process for evaluating the subrecipient’s risk of non-compliance. As part of the monitoring process, the County also did not have controls in place to obtain and review the annual audit reports of all subrecipients. Criteria: 2 CFR section 200.332(b) requires pass-through entities to evaluate subrecipient risks of noncompliance as part of their subrecipient monitoring procedures. In addition, 2 CFR section 200.332(d) indicates as part of the monitoring process, the pass-through entity should ensure subrecipients take follow-up action on audit deficiencies, which would be identified as part of the review of the annual audit reports of subrecipients. Cause: There were no procedures in place to document the County’s assessment of risk for subrecipients and the County does not have procedures in place to adequately review the subrecipient audits received. Effect: The deficiencies in subrecipient monitoring could result in the County not identifying unallowable expenditures being incurred by County subrecipients. Repeat Finding: This is a repeat finding of 2022-001. Recommendation: We recommend implementation of procedures to formally document and complete a risk assessment of subrecipients. Based on the risk assessment performed, the County should develop monitoring procedures to address the risks noted, which should include a documented review of subrecipient audits and deficiencies be followed up on, if applicable. Questioned Costs: Unknown Views of Responsible Official and Planned Corrective Action: Management agrees with the finding. See separate correction action plan.
Finding 2023-001 – Subrecipient Monitoring Federal Agency: Department of Treasury Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds – ALN #21.027 Condition: The County did not have a documented risk assessment process for evaluating the subrecipient’s risk of non-compliance. As part of the monitoring process, the County also did not have controls in place to obtain and review the annual audit reports of all subrecipients. Criteria: 2 CFR section 200.332(b) requires pass-through entities to evaluate subrecipient risks of noncompliance as part of their subrecipient monitoring procedures. In addition, 2 CFR section 200.332(d) indicates as part of the monitoring process, the pass-through entity should ensure subrecipients take follow-up action on audit deficiencies, which would be identified as part of the review of the annual audit reports of subrecipients. Cause: There were no procedures in place to document the County’s assessment of risk for subrecipients and the County does not have procedures in place to adequately review the subrecipient audits received. Effect: The deficiencies in subrecipient monitoring could result in the County not identifying unallowable expenditures being incurred by County subrecipients. Repeat Finding: This is a repeat finding of 2022-001. Recommendation: We recommend implementation of procedures to formally document and complete a risk assessment of subrecipients. Based on the risk assessment performed, the County should develop monitoring procedures to address the risks noted, which should include a documented review of subrecipient audits and deficiencies be followed up on, if applicable. Questioned Costs: Unknown Views of Responsible Official and Planned Corrective Action: Management agrees with the finding. See separate correction action plan.