2 CFR 200 § 200.332

Findings Citing § 200.332

Requirements for pass-through entities.

Total Findings
10,034
Across all audits in database
Showing Page
128 of 201
50 findings per page
About this section
Section 200.332 requires pass-through entities to verify that subrecipients are eligible for federal funding and to clearly identify subawards with specific information, such as the subrecipient's name, federal award details, and funding amounts. This affects organizations that distribute federal funds to ensure compliance and transparency in funding processes.
View full section details →
FY End: 2023-09-30
Bmc Health System, Inc.
Compliance Requirement: M
Federal Agency: United States Department of Health and Human Services (HHS) Federal Program: R&D Cluster Federal Award Numbers: Various Federal Award Years: Various Reference: 2023 003 Criteria In accordance with 2 CFR 200.332, a pass through entity (PTE) must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaw...

Federal Agency: United States Department of Health and Human Services (HHS) Federal Program: R&D Cluster Federal Award Numbers: Various Federal Award Years: Various Reference: 2023 003 Criteria In accordance with 2 CFR 200.332, a pass through entity (PTE) must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (xii) Assistance Listings number and Title; the pass through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (2 CFE section 200.332xxi) (b) Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). Additionally, 45 CFR section 75 303(a) states the non Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition When subawards are made to subrecipients, the pass through entities are required to communicate the dollar amount made available under each Federal award and the Assistance Listings Number (ALN) at time of disbursement. BMC does not have system in place to provide the ALN at the time of disbursement of funds. During the year ended September 30, 2023, the BMC passed through $18,031,446 of federal funding to subrecipients. In order to assess the subrecipient’s risk of non compliance, BMC has subrecipient monitoring policies and procedures in place which include the use of a risk assessment questionnaire. The risk assessment questionnaire includes considerations consistent with 2 CFR 200.332(b), including the entity’s prior experience and results of Single Audits, in addition to other factors. As part of our testing related subrecipient monitoring, we identified the following: 1. For 4 of 16 subrecipients selected for testwork BMC did not perform a risk assessment of the entity for purposes of determining the appropriate subrecipient monitoring related to the subaward. However, for these subrecipients, BMC did perform monitoring procedures, including review of invoices for reimbursement, review of Research Performance Progress Reports and review of Single Audit reports. Cause The condition found was primarily due to the monitoring procedures implemented by BMC do not include a review to ensure that a risk assessment is performed for each active subrecipient and BMC does not have a mechanism in place to provide the ALN at the time of disbursement of funds to the subrecipient. Possible Asserted Effect Failure to perform an annual risk assessment to determine appropriate subrecipient monitoring procedures may result in insufficient monitoring procedures being performed to detect subrecipient noncompliance with Federal statutes, regulations, and the terms and conditions of the award. Failure to adequately communicate award identification information could result in the subrecipient not being able to adequately track and report the subawards received resulting in errors being reported on the schedule of expenditures of federal awards within a subrecipient’s annual single audit report and not being able to comply with required terms and conditions of the federal award. Questioned Costs None. Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Recommendation We recommend BMC implement policies, procedures, and internal controls to ensure subrecipient risk assessments are performed for each subrecipient to determine the appropriate subrecipient monitoring is performed in accordance with 45 CFR 75.352(d) and 45 CFR 75.352(e). We recommend that BMC enhance its processes and internal controls over its reporting to the subrecipients of the federal program to ensure all award identification information required under 45 CFR 75.352(a) is provided to the subrecipients.

FY End: 2023-09-30
Spanish Speaking Unity Council of Alameda County, Inc.
Compliance Requirement: M
Finding number: 2023-005 Federal award identification number and year: AL# 21.027 - Coronavirus State and Local Recovery Funds; 2023 Criteria: Pursuant to CFR section 200.332(b), pass-through entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: The Unity Council did not perform a risk assessment of subrecip...

Finding number: 2023-005 Federal award identification number and year: AL# 21.027 - Coronavirus State and Local Recovery Funds; 2023 Criteria: Pursuant to CFR section 200.332(b), pass-through entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Condition: The Unity Council did not perform a risk assessment of subrecipients. This is not a repeat finding. Cause: The Organization does not have a formally documented policy for performing a risk assessment over subrecipients. Effect or potential effect: A risk assessment for purposes of determining the appropriate subrecipient monitoring was not performed. Recommendation: Management should develop a risk assessment policy to evaluate the risk profile of each subrecipient. Factors included during the evaluation can include the subrecipient's prior experience with the same or similar subawards, results of previous audits, whether the subrecipient has new personnel or new or substantially changed systems, and the extent and results of federal awarding agency monitoring. Views of responsible officials: Management is in agreement with the finding and is in the process of developing and documenting a more robust risk assessment process.

FY End: 2023-09-30
Irl Council
Compliance Requirement: M
2023-004 SUBRECIPIENT MONITORING U.S. Department of Environmental Protection ALN 66.456 – National Estuary Program Federal Award ID Number: 4T-02D39922 and CE-00D90119 2023 Funding Criteria: 2 CFR 200.303 requires non-federal entities to establish and maintain effective internal controls. The use of subrecipients in achieving the goals of the federal award requires the establishment of controls over the monitoring of subrecipients pursuant to 2 CFR section 200.331 and 200.332. This includes t...

2023-004 SUBRECIPIENT MONITORING U.S. Department of Environmental Protection ALN 66.456 – National Estuary Program Federal Award ID Number: 4T-02D39922 and CE-00D90119 2023 Funding Criteria: 2 CFR 200.303 requires non-federal entities to establish and maintain effective internal controls. The use of subrecipients in achieving the goals of the federal award requires the establishment of controls over the monitoring of subrecipients pursuant to 2 CFR section 200.331 and 200.332. This includes the requirement for the subaward contract to include information such as the federal award identification (Assistance Listing Number (ALN) and name of the federal program), all requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award and any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. Condition: Subrecipient awards did not consistently include the required language including the ALN and the pass-through of Federal award requirements. Additionally, the Council did not have controls in place to obtain and review subrecipient single audit reports as a means to ensure the subrecipients are taking timely and appropriate action on deficiencies, if any, pertaining to the Federal award. Cause: In some cases, the Council used the contract template for a subaward for a state financial assistance program rather than for a Federal award and, as a result, required information and language was missing from the contract. Further, the Council did not update its procedures over subrecipient monitoring to include follow-up of any deficiencies pertaining to the subrecipients’ use of the Federal funding detected through audits, on-site reviews or other means. Effect: Without the required language in the subrecipient contracts, subrecipients may not have the information necessary for them to establish appropriate controls over compliance required by the Federal award and to appropriately identify the Federal award and related expenditures on their Schedule of Expenditures of Federal Awards, if applicable. Additionally, without the monitoring of the results of audits and on-site reviews, the Council may not have sufficient information to evaluate the risks of noncompliance associated with a subrecipient. Questioned Costs: None. Perspective: The Council did perform monitoring activities related to the use of funds by subrecipients; however, not all controls required for subrecipient monitoring to comply with 2 CFR section 200.331 and 200.332 were fully implemented for the fiscal year under audit. Required language was not included in two of the eight subrecipient awards tested. For one of these two contracts, the contract was originally funded with local share and applied to the Federal award only after the grantor modified the award to allow the Council to apply pre-award expenditures to the grant program. Recommendation: The Council should review existing subrecipient agreements and amend any contracts that may be missing the required Uniform Guidance language. Management should ensure that future contracts use the template appropriate for the funding source (Federal, state or non-grant funded). To ensure compliance with the requirements for subrecipient monitoring, the Council should establish processes to (1) review and reports required by the subrecipient contract; (2) document the Council’s follow-up on action taken by the subrecipient on any deficiencies detected through audits, on-site reviews or other means; and (3) issue a management decision for audit findings pertaining to the Federal award provided to the subrecipient.

FY End: 2023-09-30
Irl Council
Compliance Requirement: M
2023-004 SUBRECIPIENT MONITORING U.S. Department of Environmental Protection ALN 66.456 – National Estuary Program Federal Award ID Number: 4T-02D39922 and CE-00D90119 2023 Funding Criteria: 2 CFR 200.303 requires non-federal entities to establish and maintain effective internal controls. The use of subrecipients in achieving the goals of the federal award requires the establishment of controls over the monitoring of subrecipients pursuant to 2 CFR section 200.331 and 200.332. This includes t...

2023-004 SUBRECIPIENT MONITORING U.S. Department of Environmental Protection ALN 66.456 – National Estuary Program Federal Award ID Number: 4T-02D39922 and CE-00D90119 2023 Funding Criteria: 2 CFR 200.303 requires non-federal entities to establish and maintain effective internal controls. The use of subrecipients in achieving the goals of the federal award requires the establishment of controls over the monitoring of subrecipients pursuant to 2 CFR section 200.331 and 200.332. This includes the requirement for the subaward contract to include information such as the federal award identification (Assistance Listing Number (ALN) and name of the federal program), all requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award and any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. Condition: Subrecipient awards did not consistently include the required language including the ALN and the pass-through of Federal award requirements. Additionally, the Council did not have controls in place to obtain and review subrecipient single audit reports as a means to ensure the subrecipients are taking timely and appropriate action on deficiencies, if any, pertaining to the Federal award. Cause: In some cases, the Council used the contract template for a subaward for a state financial assistance program rather than for a Federal award and, as a result, required information and language was missing from the contract. Further, the Council did not update its procedures over subrecipient monitoring to include follow-up of any deficiencies pertaining to the subrecipients’ use of the Federal funding detected through audits, on-site reviews or other means. Effect: Without the required language in the subrecipient contracts, subrecipients may not have the information necessary for them to establish appropriate controls over compliance required by the Federal award and to appropriately identify the Federal award and related expenditures on their Schedule of Expenditures of Federal Awards, if applicable. Additionally, without the monitoring of the results of audits and on-site reviews, the Council may not have sufficient information to evaluate the risks of noncompliance associated with a subrecipient. Questioned Costs: None. Perspective: The Council did perform monitoring activities related to the use of funds by subrecipients; however, not all controls required for subrecipient monitoring to comply with 2 CFR section 200.331 and 200.332 were fully implemented for the fiscal year under audit. Required language was not included in two of the eight subrecipient awards tested. For one of these two contracts, the contract was originally funded with local share and applied to the Federal award only after the grantor modified the award to allow the Council to apply pre-award expenditures to the grant program. Recommendation: The Council should review existing subrecipient agreements and amend any contracts that may be missing the required Uniform Guidance language. Management should ensure that future contracts use the template appropriate for the funding source (Federal, state or non-grant funded). To ensure compliance with the requirements for subrecipient monitoring, the Council should establish processes to (1) review and reports required by the subrecipient contract; (2) document the Council’s follow-up on action taken by the subrecipient on any deficiencies detected through audits, on-site reviews or other means; and (3) issue a management decision for audit findings pertaining to the Federal award provided to the subrecipient.

FY End: 2023-09-30
City of Scottsboro, Alabama
Compliance Requirement: M
Information on the Federal Program: Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number 21.027 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Controls over Compliance, Modified Opinion Criteria: Title 2 U.S. Code of Federal Regulations (CFR Part 200, Uniform Administrative Requirements, Cost Princ...

Information on the Federal Program: Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number 21.027 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Controls over Compliance, Modified Opinion Criteria: Title 2 U.S. Code of Federal Regulations (CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Section 200.332, Requirements for pass-through entities, states "All pass-through entities must: (a) ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward; (b) evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring; (c) consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 (Specific conditions); (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved; (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501. 2 CFR 200.303 states in part: "The non-Federal enity must (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award." Condition: The City received a total State and Local Fiscal Recovery Funds (SLFRF) allocation of $3,431,839. In its March, 2022, Project and Expenditures Report, the City elected to use the standard allowance for identifying revenue loss and reported its Revenue Loss Due to Covid-19 Public Health Emergency as $3,431,839. During fiscal year ended September 30, 2023, the City made payments from its SLFRF federal award, totaling $1,600,000, to another local government entity for materials used by the other government for a water line project. The payments were supported by an invoice from the other government, to which were attached copies of invoices submitted to the other government by its vendors. The City reported in its March, 2023, Project and Expenditures Report that the payments were made under the Infrastructure: Drinking water: Transmission & distribution Project Expenditure Category and Subcategory. The City also reported the transactions as a subaward, including identification of the subrecipient, and reported each of the payments to the subrecipient in the Expenditures section, in that Project and Expenditures Report. The City was unable to provide: a copy of the subaward agreement that clearly identified the subaward to the subrecipient as a subaward and that included the information required by Section 200.332(a); supporting documentation that the City evaluated the subrecipient's risk of noncompliance as required by Section 200.332(b); supporting documentation that the City monitored the activities of the subrecipient as required by Section 200.332 (d); and/or supporting documentation that the City verified that the subrecipient was audited as required by Subpart F. Cause: The City did not have adequate internal controls to ensure compliance with the Subrecipient Monitoring compliance requirement. The City's past federal awards experience did not involve or include subawards. Effect or Potential Effect: Noncompliance by the subrecipient may occur due to the subrecipient not being aware of the federal program's requirements and due to the City not sufficiently monitoring the subrecipient. Recommendation: We recommend that management of the City design and implement a comprehensive system of internal controls over federal award compliance, including development of policies and procedures to ensure compliance with the Subrecipient Monitoring compliance requirement. Views of Responsible Officials and Planned Corrective Actions: See Corrective Action Plan

FY End: 2023-09-30
Center for Religion and Diplomacy, Inc.
Compliance Requirement: M
2023-004: Significant deficiency over Subrecipient Monitoring Assistance listing number: 97.132 Agency: Department of Homeland Security Program: Targeted Violence and Terrorism Prevention Grant Program Grant Year: 2023 Criteria: According to, § 200.332(a) Requirements for pass-through entities, all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes specified information at the time of the subaward and if any of these data e...

2023-004: Significant deficiency over Subrecipient Monitoring Assistance listing number: 97.132 Agency: Department of Homeland Security Program: Targeted Violence and Terrorism Prevention Grant Program Grant Year: 2023 Criteria: According to, § 200.332(a) Requirements for pass-through entities, all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes specified information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Condition: Certain required disclosures, including the assistance listing number, monitoring requirements, and audit requirements, were missing from the subaward. Cause: The subaward was prepared using a format more suited for a contract. Effect: Award requirements may not have been properly communicated to the subawardee. Questioned costs: There were no questioned costs related to this finding. Repeat finding: This is not a repeat finding. Auditor’s recommendation: We recommend all agreements are prepared with the required information before they are finalized. Written processes and control should be developed of subawards and subrecipient monitoring. Utilize a checklist of required communications when completing the agreement to ensure all required elements are included. Views of Responsible Officials and Corrective Action Plan (unaudited): See corrective action plan.

FY End: 2023-09-30
Beth Israel Lahey Health, Inc.
Compliance Requirement: M
BETH ISRAEL LAHEY HEALTH, INC. AND AFFILIATES Schedule of Findings and Questioned Costs Year ended September 30, 2023 Finding 2023-02 – Subrecipient Monitoring Federal Agency: United States Department of Health and Human Services Program: Research and Development Cluster Assistance Listing Number: 93.837 and 93.847 Criteria: Criteria: 2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient’s risk of non- compliance with Federal statutes, regulations, and the terms and co...

BETH ISRAEL LAHEY HEALTH, INC. AND AFFILIATES Schedule of Findings and Questioned Costs Year ended September 30, 2023 Finding 2023-02 – Subrecipient Monitoring Federal Agency: United States Department of Health and Human Services Program: Research and Development Cluster Assistance Listing Number: 93.837 and 93.847 Criteria: Criteria: 2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient’s risk of non- compliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of 200.332. Further, 200.332 (d) requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Condition: While Joslin Diabetes Center (the Center) has a subrecipient pre-award risk assessment process in place, for 19 of 25 subrecipients, we were unable to verify that the pre-award risk assessment procedures were fully performed. Additionally, while the Center’s risk assessment procedures correspond with a risk-based monitoring plan, for 7 of 25 subrecipients, we were unable to verify that the required monitoring activities were fully completed. We deemed this to be a significant deficiency in internal controls. Cause: As a result of turnover during the fiscal year within Research Finance there was a lack of effective operation of internal controls over subrecipient risk assessment and monitoring activities. Possible Asserted Effect: Without the proper operation of an effectively designed system of internal controls, the internal control system cannot be relied upon to effectively prevent or detect non-compliance. Questioned Costs: None. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Identification of Whether the Audit Finding was a Repeat Finding: This is not a repeat finding. Recommendation: We recommend that the Center evaluate its current Subrecipient Monitoring and Management Policy to ensure that the policy reflects each of the risk assessment and monitoring compliance requirements of the Uniform Guidance. Additionally, the results of the Center’s risk assessment and monitoring activities should be formally documented within the tracking log which should then be subject to formal review and approval by an appropriate individual within Research Finance. Views of Responsible Officials: Management acknowledges although tracking logs had been maintained, due to personnel turnover during the year, not all had been reviewed. Management has since created a shared email address to ensure communication and information sharing with all necessary parties. Management is reviewing its current policy for opportunities to strengthen internal controls and current procedures while utilizing available resources.

FY End: 2023-09-30
Beth Israel Lahey Health, Inc.
Compliance Requirement: M
BETH ISRAEL LAHEY HEALTH, INC. AND AFFILIATES Schedule of Findings and Questioned Costs Year ended September 30, 2023 Finding 2023-02 – Subrecipient Monitoring Federal Agency: United States Department of Health and Human Services Program: Research and Development Cluster Assistance Listing Number: 93.837 and 93.847 Criteria: Criteria: 2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient’s risk of non- compliance with Federal statutes, regulations, and the terms and co...

BETH ISRAEL LAHEY HEALTH, INC. AND AFFILIATES Schedule of Findings and Questioned Costs Year ended September 30, 2023 Finding 2023-02 – Subrecipient Monitoring Federal Agency: United States Department of Health and Human Services Program: Research and Development Cluster Assistance Listing Number: 93.837 and 93.847 Criteria: Criteria: 2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient’s risk of non- compliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of 200.332. Further, 200.332 (d) requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Condition: While Joslin Diabetes Center (the Center) has a subrecipient pre-award risk assessment process in place, for 19 of 25 subrecipients, we were unable to verify that the pre-award risk assessment procedures were fully performed. Additionally, while the Center’s risk assessment procedures correspond with a risk-based monitoring plan, for 7 of 25 subrecipients, we were unable to verify that the required monitoring activities were fully completed. We deemed this to be a significant deficiency in internal controls. Cause: As a result of turnover during the fiscal year within Research Finance there was a lack of effective operation of internal controls over subrecipient risk assessment and monitoring activities. Possible Asserted Effect: Without the proper operation of an effectively designed system of internal controls, the internal control system cannot be relied upon to effectively prevent or detect non-compliance. Questioned Costs: None. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Identification of Whether the Audit Finding was a Repeat Finding: This is not a repeat finding. Recommendation: We recommend that the Center evaluate its current Subrecipient Monitoring and Management Policy to ensure that the policy reflects each of the risk assessment and monitoring compliance requirements of the Uniform Guidance. Additionally, the results of the Center’s risk assessment and monitoring activities should be formally documented within the tracking log which should then be subject to formal review and approval by an appropriate individual within Research Finance. Views of Responsible Officials: Management acknowledges although tracking logs had been maintained, due to personnel turnover during the year, not all had been reviewed. Management has since created a shared email address to ensure communication and information sharing with all necessary parties. Management is reviewing its current policy for opportunities to strengthen internal controls and current procedures while utilizing available resources.

FY End: 2023-09-30
Institute for Future Intelligence, Inc.
Compliance Requirement: M
Condition: The Organization erroneously recorded a prior year subaward expense as a 2023 subaward expense. This was missed during the Chief Financial Officer's review of subaward invoices and during the Chief Executive Officer's overall review of the Statement of Expenditure of Federal Awards. Criteria: Under 2 CFR §200.332, pass through entities are required to review financial and performance reports of subawardees to ensure accurate reporting and cutoff of invoices related to subawards. Caus...

Condition: The Organization erroneously recorded a prior year subaward expense as a 2023 subaward expense. This was missed during the Chief Financial Officer's review of subaward invoices and during the Chief Executive Officer's overall review of the Statement of Expenditure of Federal Awards. Criteria: Under 2 CFR §200.332, pass through entities are required to review financial and performance reports of subawardees to ensure accurate reporting and cutoff of invoices related to subawards. Cause: The client does not have sufficient controls in place to ensure accurate reporting and cutoff of invoices related to subawards. Effect: The preliminary Statement of Expenditure of Federal Awards ("SEFA") was understated in the current period. Questioned costs: None. Recommendation: Management should review subaward invoices after year-end to determine proper recording in the proper period to which it relates. Views of responsible officials: Management of the Organization agrees with the finding. Management plans to review and revise existing policies and procedures to ensure accurate recording and proper cutoff of invoices related to subawards.

FY End: 2023-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2023-039 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of the Interior Government Department/Agency: Department of Planning and Natural Resources (DPNR) Economic, Social, and Political Development of the Territories ALN: 15.875 Award #: Various Award Period: Various Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward ...

Finding Number: 2023-039 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of the Interior Government Department/Agency: Department of Planning and Natural Resources (DPNR) Economic, Social, and Political Development of the Territories ALN: 15.875 Award #: Various Award Period: Various Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 2 of 4 subrecipients and found the following: - No supporting documentation of monitoring the subawards and evaluating the risk of noncompliance for each subrecipient. - No evidence that pass-through entity verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. - No supporting documentation if the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient. Additionally, there was no evidence of review of performance and special reports, as no supporting documentation was available for review by the pass-through entity for 1 of the 2 subrecipients tested. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements. Questioned Costs – None. Context – This is a condition identified per review of DPNR’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 were $341,920. The total amount of our sample totaled $131,920. Effect – Failure to properly adhere to policies and procedures can result in noncompliance with laws and regulations and failure to meet the program's objectives. Cause – DPNR does not have policies and procedures in place to ensure personnel adhere to the internal procedures to properly monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that DPNR implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. The GVI is currently in the process of developing a comprehensive Grants Management Overarching Standard Operating Policies and Procedures (SOPP) to establish uniform guidance for all grant-related processes, including drawdowns, documentation retention, subrecipient and compliance monitoring. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2023-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2023-048 Prior Year Finding Number: 2022-045 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury Government Department/Agency: Office of Management and Budget (OMB) COVID-19 – Coronavirus State and Local Fiscal Recovery Funds ALN: 21.027 Award #: N/A Award Period: 03/03/2021 – 12/31/2024 Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at ...

Finding Number: 2023-048 Prior Year Finding Number: 2022-045 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury Government Department/Agency: Office of Management and Budget (OMB) COVID-19 – Coronavirus State and Local Fiscal Recovery Funds ALN: 21.027 Award #: N/A Award Period: 03/03/2021 – 12/31/2024 Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 10 of 21 subrecipients and found no evidence the subrecipient monitoring workbook was reviewed by the American Rescue Plan Act (ARPA) Grants Administrator. Questioned Costs – None. Context – This is a condition identified per review of OMB’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 were $104,779,873. The total amount of our sample totaled $89,247,731. Effect – Failure to properly adhere to policies and procedures can result in noncompliance with laws and regulations and failure to meet the program’s objectives. Cause – OMB does not have policies and procedures in place to ensure personnel adhere to the internal procedures to properly monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that OMB implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. Starting FY25, OMB will identify and monitor federal awarding agencies, requesting single audit results for applicable recipients and including them in monitoring reviews. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2023-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2023-058 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Education Government Department/Agency: Department of Education (VIDE) Office of Management and Budget (OMB) COVID-19 - Education Stabilization Fund Governors (Outlying Areas) (ESF-Governor) ALN: 84.425H Award #: S425H200003, S425H210003 Award Period: 06/29/2020 - 09/30/2022 01/13/2021 - 09/30/2023 Criteria A pass-through entity (PTE) must: Identify the Award and Ap...

Finding Number: 2023-058 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Education Government Department/Agency: Department of Education (VIDE) Office of Management and Budget (OMB) COVID-19 - Education Stabilization Fund Governors (Outlying Areas) (ESF-Governor) ALN: 84.425H Award #: S425H200003, S425H210003 Award Period: 06/29/2020 - 09/30/2022 01/13/2021 - 09/30/2023 Criteria A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that nonfederal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 10 out of 27 subrecipients and noted that, all 10 samples where VIDE and OMB failed to provide the evidence of monitoring and reviewing sub-grantee to ensure effective management of sub-awards. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements or proper identification of subrecipients. Questioned Costs – None. Context – This is a condition identified per review of VIDE and OMB’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 was $4,220,685. The total amount of our sample totaled $3,051,101. Effect – VIDE and OMB are not in compliance with the stated provisions. Failure to properly identify and monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the program's objectives. Cause – VIDE and OMB do not have internal controls in place to properly identify and monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that VIDE and OMB implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. During the period under review, gaps in documentation and monitoring were impacted by staff turnover, leadership transitions, and programmatic shifts, which limited the consistency and precision of subrecipient oversight across programs. In response, Office of Federal Grants (OFG) has taken steps to reinforce its role as the pass-through entity and to formalize monitoring expectations and processes. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2023-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2023-086 Prior Year Finding Number: 2022-082 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Homeland Security Government Department/Agency: Virgin Islands Territorial Emergency Management Agency (VITEMA) Disaster Grants - Public Assistance (Presidentially Declared Disasters) ALN: 97.036 Award#: FEMA-4335-DR, FEMA-4340-DR-VI, FEMA-4513-DR Award Periods: 09/20/2017 – 09/07/2026 09/07/2017 – 09/16/2025 04/02/2020 – 05/11/2023 Criteria – A pass-through en...

Finding Number: 2023-086 Prior Year Finding Number: 2022-082 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Homeland Security Government Department/Agency: Virgin Islands Territorial Emergency Management Agency (VITEMA) Disaster Grants - Public Assistance (Presidentially Declared Disasters) ALN: 97.036 Award#: FEMA-4335-DR, FEMA-4340-DR-VI, FEMA-4513-DR Award Periods: 09/20/2017 – 09/07/2026 09/07/2017 – 09/16/2025 04/02/2020 – 05/11/2023 Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 8 of 27 subrecipients and found the following: - 4 instances where we were unable to obtain subrecipient agreements. - 8 instances with no supporting documentation that VITEMA verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements or proper identification of subrecipients. Questioned Costs – None. Context – This is a condition identified per review of VITEMA’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 was $134,242,935. The total amount of our sample totaled $124,398,401. Effect – VITEMA is not in compliance with the stated provisions. Failure to properly identify and monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the program's objectives. Cause – VITEMA does not have internal controls in place to properly identify and monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that VITEMA implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. The formal process for completing and retaining Subrecipient Agreements is now operational to ensure compliance with programmatic obligations. As the Recipient, the Territory is responsible for notifying the Subrecipient when federal funds are obligated and providing them with a subrecipient agreement outlining the program's terms and conditions. The Disaster Program Financial Specialist is responsible for ensuring that the subrecipient agreement is signed by both the Applicant and the Governor's Authorized Representative and provided to the Territorial Public Assistance Officer. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2023-09-30
Republic of the Marshall Islands
Compliance Requirement: M
Finding No.: 2023-020 Federal Agency: U.S. Department of Health and Human Services AL Program: 93.243 Substance Abuse and Mental Health Services – Projects of Regional and National Significance Federal Award No.: 5U79SP020711-04 Questioned Costs: $134,802 Area: Subrecipient Monitoring/Overpayment on Return of Federal Funds Criteria: In accordance with applicable subrecipient monitoring requirements per 2 CFR 200.332, a pass- through entity (PTE) must: 1) Monitor the activities of the subrecipien...

Finding No.: 2023-020 Federal Agency: U.S. Department of Health and Human Services AL Program: 93.243 Substance Abuse and Mental Health Services – Projects of Regional and National Significance Federal Award No.: 5U79SP020711-04 Questioned Costs: $134,802 Area: Subrecipient Monitoring/Overpayment on Return of Federal Funds Criteria: In accordance with applicable subrecipient monitoring requirements per 2 CFR 200.332, a pass- through entity (PTE) must: 1) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, is used in accordance with the terms and conditions of the subaward, and achieves performance goals. 2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies detected through audits, on-site reviews, and other means, pertaining to the subaward. 3) Issue a management decision as required by 2 CFR 200.521 for audit findings pertaining to the Federal award provided to the subrecipient from the PTE . Condition: RepMar did not perform the required monitoring activities for a subrecipient and did not issue a management decision with respect to the subrecipient’s FY2018 Single Audit report dated February 22, 2023. The Single Audit reported questioned costs of $43,335 for noncompliance with allowable costs/cost principles requirements and questioned costs of $91,467 for noncompliance with procurement and suspension and debarment requirements. Furthermore, in the grantor’s March 2023 management decision communication, RepMar was required to refund the grantor for Federal funds reported for noncompliance in the same subrecipient’s FY2016 and FY2017 Single Audit reports. RepMar has since determined that the July 2024 refund included a $267,244 overpayment due to calculation error. Cause: RepMar lacks effective internal control policies and procedures governing subrecipient monitoring. Effect: RepMar is in noncompliance with applicable subrecipient monitoring requirements and overpayment of Federal funds returned. Questioned cost of $134,802 results. Recommendation: RepMar should more closely monitor subrecipients in accordance with subrecipient monitoring requirements. Views of Responsible Officials: RepMar’s Corrective Action Plan does not indicate disagreement and provides planned corrective action.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of the Treasury Federal Program Title: Emergency Rental Assistance Program ALN: 21.023 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: 1505-0266 – 2021, 1505-0270 – 2021. January 6, 2022 – December 29, 2022 and May 5, 2021 – September 30, 2025 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncom...

Subrecipient Monitoring Federal Agency: U.S. Department of the Treasury Federal Program Title: Emergency Rental Assistance Program ALN: 21.023 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: 1505-0266 – 2021, 1505-0270 – 2021. January 6, 2022 – December 29, 2022 and May 5, 2021 – September 30, 2025 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non_x0002_Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR sections 200.332 (d) through (f), all pass-through entities must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Condition: TDHCA maintains a Master Planning Summary (MPS) to track all active subrecipient contracts that have expenditures in the planning phase, which are to be considered for sampling and potential selection for review. During our testing, we noted one subrecipient contract with expenditures during the fiscal year that was not included in the MPS for potential selection for a review. Questioned costs: None. Context: See “Condition.” Cause: Management is not adhering to the subrecipient monitoring procedures to ensure all active subrecipient contracts with expenditures incurred during the fiscal year are at least considered for review by being included in the MPS. Effect: Failure to complete proper monitoring over subrecipients may lead to noncompliance with grant terms and conditions. Repeat finding: No Recommendation: We recommend that TDHCA strengthen its internal controls to ensure that all subrecipients are included in the MPS and subject to review. Views of responsible officials: The Department’s Compliance Subrecipient Monitoring (CMSM) staff acknowledges that a subrecipient was erroneously not included in the Master Planning Summary. However, the Department’s procedures for risk assessment and monitoring activities for this review period remain compliant with 2 CFR section 200.303(a) as well as 2 CFR section 200.331(6)(b). Risk assessment for non-formula funded contracts is 100% risk based. Both risk assessment and subsequent monitoring functions represent a snapshot of the Department’s pass-through activities and 100% review is not required. It is the Department’s stance that this error does not materially impact the risk assessment process or the scope of this audit.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Education Federal Program Title: Adult Education- Basic Grants to States ALN: 84.002 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: V002A200044, V002A210044, V002A220044, V002A230044 July 1, 2020 – September 30, 2021, July 1, 2021 – September 30, 2022, July 1, 2022 – September 30, 2023, July 1, 2023 – September 30, 2024 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type...

Subrecipient Monitoring Federal Agency: U.S. Department of Education Federal Program Title: Adult Education- Basic Grants to States ALN: 84.002 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: V002A200044, V002A210044, V002A220044, V002A230044 July 1, 2020 – September 30, 2021, July 1, 2021 – September 30, 2022, July 1, 2022 – September 30, 2023, July 1, 2023 – September 30, 2024 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non_x0002_Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR sections 200.332 (d) through (f), TWC must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Condition: Per review of TWC's Subrecipient Monitoring Department's (SRM) Annual Monitoring Plan, the Adult Education and Literacy (AEL) program is designed to meet the education and training needs of adults. SRM will continue to work closely with the Workforce Development Division to identify the fiscal and program areas that present the highest risk to the Agency. SRM will also conduct data validation reviews of all AEL providers, once during each five-year grant period. During our testing, we noted seven AEL subrecipients were excluded from the SRM Plan and no reviews or data validations were performed within the previous five years. Questioned costs: None. Context: See “Condition.” Cause: Management is not adhering to the subrecipient monitoring procedures to ensure all Adult Education and Literacy subrecipients have a data validation review once during each five-year granting period. Effect: Failure to complete proper monitoring over subrecipients may lead to noncompliance with grant terms and conditions. Repeat Finding: No Recommendation: We recommend that TWC strengthen its internal controls to ensure that monitoring over all subrecipients is completed. Views of responsible officials: The Texas Workforce Commission acknowledges and agrees with the finding with one observation. Follow-up review indicates that only 6 of 7 AEL subrecipients tested were not included in the risk assessment. ‘Restore Education’ was, in fact, assessed. It was SRM’s understanding from prior guidance that the types of AEL subrecipients tested as part of this audit were not applicable to SRM’s risk assessment process. We have confirmed with TWC’s AEL program staff that they should have been in scope for SRM’s annual and mid-year risk assessments.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
Texas Council on Family Violence, INC
Compliance Requirement: M
Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award ...

Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The contracts between the Council and its subrecipients did not identify the correct federal find source to its subrecipient as prescribed by 2 CFR Section 200.332. Cause: Historically, the Council has always received funding from the Department of Justice through the State of Texas. During 2023, grant award notifications indicated that the source of funding was the Department of Treasury under Assistance Listing Number 21.027, identified as Coronavirus State Fiscal Recovery Fund (Victims of Crime -SB 8). Controls in place did not allow the Council to notice that the funding source had changed and continued to inform its subrecipients that the federal funds came from the Department of Justice. Effect: The Council's subrecipients may not have timely or accurate information to determine the applicability of certain compliance requirements under the Uniform Guidance specific to the applicable Assistance Listing Number. Recommendation: Management should update policies and procedures to ensure that relevant staff are aware of funding sources and compliance requirements with respect to those sources. Management should update its sub-grant templates to ensure that required information is communicated to subrecipients. Management Response: See management’s corrective action plan.

FY End: 2023-08-31
Texas Council on Family Violence, INC
Compliance Requirement: M
Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award ...

Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The contracts between the Council and its subrecipients did not identify the correct federal find source to its subrecipient as prescribed by 2 CFR Section 200.332. Cause: Historically, the Council has always received funding from the Department of Justice through the State of Texas. During 2023, grant award notifications indicated that the source of funding was the Department of Treasury under Assistance Listing Number 21.027, identified as Coronavirus State Fiscal Recovery Fund (Victims of Crime -SB 8). Controls in place did not allow the Council to notice that the funding source had changed and continued to inform its subrecipients that the federal funds came from the Department of Justice. Effect: The Council's subrecipients may not have timely or accurate information to determine the applicability of certain compliance requirements under the Uniform Guidance specific to the applicable Assistance Listing Number. Recommendation: Management should update policies and procedures to ensure that relevant staff are aware of funding sources and compliance requirements with respect to those sources. Management should update its sub-grant templates to ensure that required information is communicated to subrecipients. Management Response: See management’s corrective action plan.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of the Treasury Federal Program Title: Emergency Rental Assistance Program ALN: 21.023 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: 1505-0266 – 2021, 1505-0270 – 2021. January 6, 2022 – December 29, 2022 and May 5, 2021 – September 30, 2025 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncom...

Subrecipient Monitoring Federal Agency: U.S. Department of the Treasury Federal Program Title: Emergency Rental Assistance Program ALN: 21.023 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: 1505-0266 – 2021, 1505-0270 – 2021. January 6, 2022 – December 29, 2022 and May 5, 2021 – September 30, 2025 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non_x0002_Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR sections 200.332 (d) through (f), all pass-through entities must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Condition: TDHCA maintains a Master Planning Summary (MPS) to track all active subrecipient contracts that have expenditures in the planning phase, which are to be considered for sampling and potential selection for review. During our testing, we noted one subrecipient contract with expenditures during the fiscal year that was not included in the MPS for potential selection for a review. Questioned costs: None. Context: See “Condition.” Cause: Management is not adhering to the subrecipient monitoring procedures to ensure all active subrecipient contracts with expenditures incurred during the fiscal year are at least considered for review by being included in the MPS. Effect: Failure to complete proper monitoring over subrecipients may lead to noncompliance with grant terms and conditions. Repeat finding: No Recommendation: We recommend that TDHCA strengthen its internal controls to ensure that all subrecipients are included in the MPS and subject to review. Views of responsible officials: The Department’s Compliance Subrecipient Monitoring (CMSM) staff acknowledges that a subrecipient was erroneously not included in the Master Planning Summary. However, the Department’s procedures for risk assessment and monitoring activities for this review period remain compliant with 2 CFR section 200.303(a) as well as 2 CFR section 200.331(6)(b). Risk assessment for non-formula funded contracts is 100% risk based. Both risk assessment and subsequent monitoring functions represent a snapshot of the Department’s pass-through activities and 100% review is not required. It is the Department’s stance that this error does not materially impact the risk assessment process or the scope of this audit.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Education Federal Program Title: Adult Education- Basic Grants to States ALN: 84.002 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: V002A200044, V002A210044, V002A220044, V002A230044 July 1, 2020 – September 30, 2021, July 1, 2021 – September 30, 2022, July 1, 2022 – September 30, 2023, July 1, 2023 – September 30, 2024 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type...

Subrecipient Monitoring Federal Agency: U.S. Department of Education Federal Program Title: Adult Education- Basic Grants to States ALN: 84.002 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: V002A200044, V002A210044, V002A220044, V002A230044 July 1, 2020 – September 30, 2021, July 1, 2021 – September 30, 2022, July 1, 2022 – September 30, 2023, July 1, 2023 – September 30, 2024 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non_x0002_Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR sections 200.332 (d) through (f), TWC must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Condition: Per review of TWC's Subrecipient Monitoring Department's (SRM) Annual Monitoring Plan, the Adult Education and Literacy (AEL) program is designed to meet the education and training needs of adults. SRM will continue to work closely with the Workforce Development Division to identify the fiscal and program areas that present the highest risk to the Agency. SRM will also conduct data validation reviews of all AEL providers, once during each five-year grant period. During our testing, we noted seven AEL subrecipients were excluded from the SRM Plan and no reviews or data validations were performed within the previous five years. Questioned costs: None. Context: See “Condition.” Cause: Management is not adhering to the subrecipient monitoring procedures to ensure all Adult Education and Literacy subrecipients have a data validation review once during each five-year granting period. Effect: Failure to complete proper monitoring over subrecipients may lead to noncompliance with grant terms and conditions. Repeat Finding: No Recommendation: We recommend that TWC strengthen its internal controls to ensure that monitoring over all subrecipients is completed. Views of responsible officials: The Texas Workforce Commission acknowledges and agrees with the finding with one observation. Follow-up review indicates that only 6 of 7 AEL subrecipients tested were not included in the risk assessment. ‘Restore Education’ was, in fact, assessed. It was SRM’s understanding from prior guidance that the types of AEL subrecipients tested as part of this audit were not applicable to SRM’s risk assessment process. We have confirmed with TWC’s AEL program staff that they should have been in scope for SRM’s annual and mid-year risk assessments.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
State of Texas C/o Comptroller of Public Accounts
Compliance Requirement: M
Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR a...

Subrecipient Monitoring Federal Agency: U.S. Department of Health and Human Services Federal Program Title: Temporary Assistance for Needy Families Social Services Block Grant Block Grants for Community Mental Health Services ALN: 93.558 93.667 93.958 Pass-Through Agency: N/A Pass-Through Number(s): N/A Award Number and Period: TANF 2301TXTANF, 2301TXTAN3, 2201TXTANF, and 2201TXTAN3 October 1, 2022 – September 30, 2023 and October 1, 2021 – September 30, 2022 SSBG 2301TXSOSR, 2201TXSOSR and 2101TXSOSR October 1, 2022 – September 30, 2024, October 1, 2021 – September 30, 2023, and October 1, 2020 – September 30, 2022 MHBG 1B09SM087345, 6B09SM087345-01M001, 6B09SM087345-01M002, 6B09SM087345-01M003, 1B09SM087322-01,1B09SM085994-01, 6B09SM085994-01M001, 6B09SM085994-01M002, 6B09SM085994-01M003, 1B09SM083999 -01, 6B09SM083999-01M001, 1B09SM083830-01, 6B09SM083830- 01M001 October 1, 2022 – September 30, 2024, October 17, 2022 – October 16, 2024, October 1, 2021 – September 30, 2023, March 15, 2021 – March 14, 2024, March 15, 2021 – March 14, 2023, and October 1, 2020 – September 30, 2022 Statistically Valid Sample: No, and not intended to be a statistically valid sample Type of Finding: Significant Deficiency in Internal Control over Compliance and Noncompliance Criteria or specific requirement: Per 2 CFR 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that it is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. These internal controls should be in compliance with guidance in the “Internal Control Integrated Framework” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes certain information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes:  Subrecipient’s unique entity identifier (UEI)  Federal award identification number (FAIN)  Federal award date of award to the recipient by the federal agency  Assistance listings number and title  Indirect cost rate for the federal award (including if the de minimis rate is charged) Condition: Audit procedures included a review of a sample of subrecipient contracts for required information with the following results noted: TANF – For a sample of 17, the contracts did not include:  UEI (one sample)  FAIN (four samples)  Federal award date (four samples)  Assistance listings numbers and title (four samples)  Indirect cost rate, including if the de minimis rate is charged (four samples) SSBG – For 11 of 19 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. MHBG – For 7 of 8 samples, the contract did not include neither the FAIN nor the federal award date of award to the recipient by the federal agency. Questioned costs: None. Context: See “Condition.” Cause: Current internal controls in place to ensure a review of subaward agreements is taking place to verify that all required elements are included per 2 CFR 200 §200.332 are not at the correct precision level. Effect: Providing incomplete information to subrecipients may result in inaccurate reporting by the subrecipients and ultimately by HHSC. Repeat Finding: No Recommendation: We recommend management enhance existing controls around the review of all subaward agreements to ensure that all pass-through agreements include each of the required elements by 2 CFR §200.332. Views of responsible officials: Temporary Assistance for Needy Families (TANF) - HHSC concurs with the finding. Social Services Block Grants (SSBG)/ Mental Health Block Grants (MHBG) - HHSC concurs with the finding.

FY End: 2023-08-31
Texas Council on Family Violence, INC
Compliance Requirement: M
Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award ...

Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The contracts between the Council and its subrecipients did not identify the correct federal find source to its subrecipient as prescribed by 2 CFR Section 200.332. Cause: Historically, the Council has always received funding from the Department of Justice through the State of Texas. During 2023, grant award notifications indicated that the source of funding was the Department of Treasury under Assistance Listing Number 21.027, identified as Coronavirus State Fiscal Recovery Fund (Victims of Crime -SB 8). Controls in place did not allow the Council to notice that the funding source had changed and continued to inform its subrecipients that the federal funds came from the Department of Justice. Effect: The Council's subrecipients may not have timely or accurate information to determine the applicability of certain compliance requirements under the Uniform Guidance specific to the applicable Assistance Listing Number. Recommendation: Management should update policies and procedures to ensure that relevant staff are aware of funding sources and compliance requirements with respect to those sources. Management should update its sub-grant templates to ensure that required information is communicated to subrecipients. Management Response: See management’s corrective action plan.

FY End: 2023-08-31
Texas Council on Family Violence, INC
Compliance Requirement: M
Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award ...

Reference Number: 2023-002 – Significant Deficiency, Subrecipient Monitoring Criteria: Pass through entities must clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(l); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). Condition: The contracts between the Council and its subrecipients did not identify the correct federal find source to its subrecipient as prescribed by 2 CFR Section 200.332. Cause: Historically, the Council has always received funding from the Department of Justice through the State of Texas. During 2023, grant award notifications indicated that the source of funding was the Department of Treasury under Assistance Listing Number 21.027, identified as Coronavirus State Fiscal Recovery Fund (Victims of Crime -SB 8). Controls in place did not allow the Council to notice that the funding source had changed and continued to inform its subrecipients that the federal funds came from the Department of Justice. Effect: The Council's subrecipients may not have timely or accurate information to determine the applicability of certain compliance requirements under the Uniform Guidance specific to the applicable Assistance Listing Number. Recommendation: Management should update policies and procedures to ensure that relevant staff are aware of funding sources and compliance requirements with respect to those sources. Management should update its sub-grant templates to ensure that required information is communicated to subrecipients. Management Response: See management’s corrective action plan.

FY End: 2023-06-30
City of Charlotte
Compliance Requirement: M
Department of Treasury Program Name: Emergency Rental Assistance Program Federal Assistance Listing Number: 21.023 Nonmaterial Noncompliance, Material Weakness – Subrecipient Monitoring Finding 2023-001 Criteria: An effective system of internal control contemplates that management properly review and assess the subrecipient through monitoring procedures and document the results of the procedures performed. This includes ensuring the subrecipient is following all direct and material compliance re...

Department of Treasury Program Name: Emergency Rental Assistance Program Federal Assistance Listing Number: 21.023 Nonmaterial Noncompliance, Material Weakness – Subrecipient Monitoring Finding 2023-001 Criteria: An effective system of internal control contemplates that management properly review and assess the subrecipient through monitoring procedures and document the results of the procedures performed. This includes ensuring the subrecipient is following all direct and material compliance requirements applicable to each federal program. Condition: It was discovered while testing the program that the City did not monitor the activity of its subrecipient for the Emergency Rental Assistance Program and did not have a plan to complete monitoring for fiscal year 2023. However, the City did properly obtain and review the subrecipients single audit report for fiscal year 2022. Effect: The subrecipient could provide federal funds to ineligible individuals resulting in questioned costs that could go undetected by the City. Questioned Costs: No questioned costs were identified as a result of our procedures. Cause: The City has an overall policy on monitoring subrecipients but individual departments do not have formal policies or guidelines in place for specific monitoring plans on each of their subrecipients/programs. Recommendation: We recommend the City require, as part of their subrecipient policy, that departments have written monitoring plans for each program that utilizes subrecipients that includes, but is not limited to, an annual risk assessment of the subrecipient, timeline for monitoring (monthly, quarterly, semi-annually, annually) to take place and how it will communicate and follow up with any findings identified from the monitoring. Furthermore, management should further utilize 2 CFR 200.332 to ensure all monitoring requirements are met. Views of responsible officials: Management agrees with the finding and is implementing procedures to correct this which is further discussed in the corrective action plan. Corrective Action Plan: See Corrective Action Plan prepared by the City.

FY End: 2023-06-30
City of Charlotte
Compliance Requirement: M
Department of Treasury Program Name: Emergency Rental Assistance Program Federal Assistance Listing Number: 21.023 Nonmaterial Noncompliance, Material Weakness – Subrecipient Monitoring Finding 2023-001 Criteria: An effective system of internal control contemplates that management properly review and assess the subrecipient through monitoring procedures and document the results of the procedures performed. This includes ensuring the subrecipient is following all direct and material compliance re...

Department of Treasury Program Name: Emergency Rental Assistance Program Federal Assistance Listing Number: 21.023 Nonmaterial Noncompliance, Material Weakness – Subrecipient Monitoring Finding 2023-001 Criteria: An effective system of internal control contemplates that management properly review and assess the subrecipient through monitoring procedures and document the results of the procedures performed. This includes ensuring the subrecipient is following all direct and material compliance requirements applicable to each federal program. Condition: It was discovered while testing the program that the City did not monitor the activity of its subrecipient for the Emergency Rental Assistance Program and did not have a plan to complete monitoring for fiscal year 2023. However, the City did properly obtain and review the subrecipients single audit report for fiscal year 2022. Effect: The subrecipient could provide federal funds to ineligible individuals resulting in questioned costs that could go undetected by the City. Questioned Costs: No questioned costs were identified as a result of our procedures. Cause: The City has an overall policy on monitoring subrecipients but individual departments do not have formal policies or guidelines in place for specific monitoring plans on each of their subrecipients/programs. Recommendation: We recommend the City require, as part of their subrecipient policy, that departments have written monitoring plans for each program that utilizes subrecipients that includes, but is not limited to, an annual risk assessment of the subrecipient, timeline for monitoring (monthly, quarterly, semi-annually, annually) to take place and how it will communicate and follow up with any findings identified from the monitoring. Furthermore, management should further utilize 2 CFR 200.332 to ensure all monitoring requirements are met. Views of responsible officials: Management agrees with the finding and is implementing procedures to correct this which is further discussed in the corrective action plan. Corrective Action Plan: See Corrective Action Plan prepared by the City.

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

FY End: 2023-06-30
Trustees of Tufts College D/b/a Tufts University
Compliance Requirement: M
2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to enteri...

2023-001 Subrecipient Monitoring Cluster: Research and Development Cluster (“R&D Cluster”) Grantor: Various - All R&D Cluster awards with subrecipients Award Name: Various - All R&D Cluster awards with subrecipients Award Year: FY2023 Pass-through entities and ID Number: Various - All R&D Cluster awards with subrecipients Assistance Listing Number: Various – All R&D Cluster awards with subrecipients Condition While the University has a detailed pre-award risk assessment process prior to entering into a subrecipient relationship, which includes review of subrecipient Uniform Guidance reports, subsequent review of Uniform Guidance reports for monitoring purposes is not consistently completed. Subsequent review of Uniform Guidance reports for monitoring purposes is completed at the time of a subaward amendment, or no less frequently than an annual basis per University policy, however, for 4 out of 25 subaward selections, the subawards were not amended within a year. As such, over a year passed since a Uniform Guidance report was reviewed for these subrecipients for monitoring purposes. Additionally, given the risk assessments are used to cover certain post-award subrecipient monitoring requirements, we noted the following: • 4 out of 25 selections did not have clear documentation as to which Uniform Guidance report had been specifically reviewed • 3 out of 25 subrecipients had findings/deficiencies in their Uniform Guidance reports and there was no documentation for how the University concluded these were not relevant to their subawards • 1 out of 5 subrecipients without Uniform Guidance reports did not have notations on alternative support that was reviewed in lieu of Uniform Guidance reports, as required by University policy. Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: • Reviewing financial and performance reports required by the pass-through entity. • Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. • Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Cause Review of Uniform Guidance reports for post-award monitoring purposes is dependent upon a subaward amendment being executed. If an annual amendment is not executed, there is a gap in the monitoring process as the latest Uniform Guidance reports did not get reviewed. While the University expected all subrecipients to have a subaward amendment processed within a year, the testing noted above identified instances where no amendment was processed, and as such, a Uniform Guidance report was not reviewed within that period of time. Additionally, in regard to the completeness of documentation within the risk assessments, while individuals executing the subaward agreements are required to review the risk assessment form in conjunction with the agreement, there is no formal secondary review required to be evidenced and as such, certain elements were overlooked. Effect The lack of an annual review of subrecipient Uniform Guidance reports may result in potential compliance issues not being identified and management not addressing findings and issuing a management decision, as required under the Uniform Guidance. In addition, the lack of review of the risk assessment form may result in missing information not being identified. Questioned Costs There are no questioned costs associated with this finding. Recommendation We recommend the University review their policies and procedures specific to reviewing Uniform Guidance reports of subrecipients for post-award monitoring purposes to ensure all subrecipient reports are reviewed annually. Additionally, we recommend a formal secondary sign-off be included on the risk assessment form to ensure completeness and agreement with conclusions reached. Management’s Views and Corrective Action Plan Management’s response is included in “Management’s Views and Corrective Action Plan” included at the end of this report after the summary schedule of status of prior audit findings

« 1 126 127 129 130 201 »