2 CFR 200 § 200.332

Findings Citing § 200.332

Requirements for pass-through entities.

Total Findings
10,202
Across all audits in database
Showing Page
173 of 205
50 findings per page
About this section
Section 200.332 requires pass-through entities to verify that subrecipients are eligible for federal funding and to clearly identify subawards with specific information, such as the subrecipient's name, federal award details, and funding amounts. This affects organizations that distribute federal funds to ensure compliance and transparency in funding processes.
View full section details →
FY End: 2022-09-30
City of Oxford, Alabama
Compliance Requirement: M
Criteria: According to ? 200.303 Internal controls of Title 2 U.S. Code of Federal Regulations (CFR) Part 200, the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. According to ? 200.332 Requirements for pass-through entities of 2 CFR Part 200, all pass-thro...

Criteria: According to ? 200.303 Internal controls of Title 2 U.S. Code of Federal Regulations (CFR) Part 200, the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. According to ? 200.332 Requirements for pass-through entities of 2 CFR Part 200, all pass-through entities must: ? Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. ? Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. ? Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. ? Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Condition: During our testing, it was noted that the City did not follow federal subrecipient monitoring regarding evaluating the subrecipients risk of noncompliance and performing monitoring activities which includes on-site reviews and audits, follow-up audits, review of financial and performance reports, and keeping written documentation of monitoring activities and written corrective action plans. The risk assessment of subrecipients? risk of noncompliance was done informally and without written documentation. The City did not perform any monitoring activities and management regulation on subrecipients. Auditing procedures were expanded to included testing subrecipients for allowed and unallowed activities; allowable cost and cost principles; period of performance; and procurement, suspension, and debarment. During our testing, we noted that for one subrecipient tested, documentation supporting the expenditure was missing for 3 of 63 transactions tested. Cause: The City lacks policies and procedures regarding preforming monitoring activities on subrecipients. Effect: Lack of policies and procedures did not ensure that the subrecipients of the Coronavirus State and Local Fiscal Recovery Funds were properly monitored.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Polk County, Florida
Compliance Requirement: M
2022-007-Subrecipient Monitoring Federal Agency: U.S. Department of the Treasury Federal Program Name: Covid-19 Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Identification Number: Z1890 Award Period: March 3, 2021, through December 31, 2026 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: 2 CFR section 200.332(a) notes pass-through entities such as Polk County,...

2022-007-Subrecipient Monitoring Federal Agency: U.S. Department of the Treasury Federal Program Name: Covid-19 Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Federal Award Identification Number: Z1890 Award Period: March 3, 2021, through December 31, 2026 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: 2 CFR section 200.332(a) notes pass-through entities such as Polk County, Florida need to ensure that every subaward is clearly identified to the subrecipient as a subaward and includes required information at the time of the subaward sufficient for the subrecipient to comply with federal statutes, regulation, and the terms and conditions of the award. If any of the data elements change the impact should be updated in subsequent subaward modification. 2 CFR section 200.332(b)-(f) covers required monitoring activities and management of subrecipient relationships that should be performed by the pass-through entity. Condition: During the testing of quarterly Project and Expenditure Reports submitted to the Treasury, information included for contracts and subawards was not agreeing to information reported on the Schedule of Expenditures of Federal Awards (SEFA). Auditors selected reported subrecipients, beneficiaries, and contractors to determine the validity of assigned category. A subrecipient is an entity that receives a subaward to carry out a project funded by Fiscal Recovery Funds on behalf of a recipient. Individuals or entities that are direct beneficiaries of a project funded by Fiscal Recovery Funds are not considered subrecipients. Households, communities, small businesses, nonprofits, and impacted industries are all potential beneficiaries of projects carried out with SLFRF funds. The terms and conditions of Federal awards flow down to subawards to subrecipients, requiring subrecipients to comply with all requirements of recipients such as the treatment of eligible uses of funds, procurement, and reporting requirements. Beneficiaries are not subject to the requirements placed on subrecipients in the Uniform Guidance. The distinction between a subrecipient and a beneficiary, therefore, is contingent upon the rationale for why a recipient is providing funds to the individual or entity. If the recipient is providing funds to the individual or entity for the purpose of carrying out a SLFRF program or project on behalf of the recipient, the individual or entity is acting as a subrecipient. Acting as a subrecipient, the individual or entity is subject to subrecipient monitoring and reporting requirements. Questioned costs: N/A Context: A statistically valid sample of 10 organizations listed on each of the quarterly Treasury reports (40 total items tested) was selected and tested against the entity-type determination criteria. In the sample of 40 entity types reported, there were twenty-three exceptions (23) which resulted in a conclusion that only one (1) Organization reported was truly a subrecipient. This subrecipient was not captured on the SEFA and the elements of monitoring were not in place. The review of the contract agreement between Polk County and this subrecipient did not meet all requirements under 2 CFR section 200.332(a). Cause: The distinction between the entity types receiving this federal funding was not fully understood by personnel. Effect: Recipients and subrecipients are the first line of defense and responsible for ensuring the SLFRF award funds are not used for ineligible purposes, and there is no fraud, waste, or abuse associated with their SLFRF award. The terms and conditions of Federal awards flow down to subawards to subrecipients, requiring subrecipients to comply with all requirements of recipients such as the treatment of eligible uses of funds, procurement, and reporting requirements. A lack of monitoring can lead to noncompliance by the subrecipient which ultimately impacts the compliance of the pass-through entity. Repeat Finding: No. Recommendation: We recommend an amended subrecipient contract that complies with all guidelines under 2 CFR section 200.332(a) be put into place between Polk County and the identified subrecipient. In addition, we recommend a risk assessment of this subrecipient be performed and depending on the results of the assessment, determine a planned schedule of monitoring that matches frequency and intensity that aligns with the risk assessment. Views of responsible officials: There is no disagreement with the audit finding.

« 1 171 172 174 175 205 »