Finding Reference Number: 2024-17 NH Department of Health and Human Services Aging Cluster and COVID-19 Aging Cluster (Assistance Listing #93.044, #93.045, #93.053) Federal Award Number: 2401NHOASS, 2301NHOASS Federal Award Year: 2023, 2024 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $9,048,291 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. For 2 of 7 subrecipients selected for testwork, a risk assessment was not completed. As a result, we were unable to determine if the Department had adequately monitored the subrecipient. There was no documentation provided that any monitoring procedures were performed. B. For 2 of 7 subrecipients selected for testwork, a transportation risk assessment was completed. Per review of the risk assessment, a quarterly review was to be performed to examine the expenditure detail to assess purchasing compliance with contract requirements and applicable laws or rules. There was no documentation provided that this review had taken place. In addition, a nutrition risk assessment was also completed, however there were no specified monitoring procedures. As such, we are unable to determine if the appropriate monitoring procedures were performed for this subrecipient. C. For 1 of 7 subrecipients selected for testwork, a nutrition risk assessment was completed. Based on our review of the risk assessment, a review was to be performed to examine the expenditure detail to assess purchasing compliance with contract requirements and applicable laws or rules. There was no documentation provided to support that this type of monitoring procedure was performed. D. For 1 of 7 subrecipients selected for testwork, the nutrition risk assessment that was completed did not contain any required monitoring procedures. As such, we are unable to determine if the appropriate monitoring procedures were performed for this subrecipient. E. For 1 of 7 subrecipients selected for testwork the nutrition risk assessment indicated that an onsite review should be performed annually. The risk assessment was dated July 19, 2023 and as of June 30, 2024 an on-site monitoring review was not completed. We further noted that a review was conducted in October of 2024. As the risk assessment indicated the review was to be conducted annually, it does not appear that this review was completed timely. Cause The cause of the condition found was primarily due to a lack of formal documented policies, procedures and internal controls to ensure to ensure that required monitoring procedures outlined within the subrecipient’s risk assessment is performed. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that all required award identification information is properly communicated to subrecipients, and that the prescribed monitoring procedures outlined within the risk assessment are properly performed. Written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-020 NH Department of Health and Human Services Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) and COVID-19 Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) (Assistance Listing #93.323) Federal Award Numbers: NUK50CK000522 Federal Award Year: 2019 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-011 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $3,241,196 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. We were unable to obtain documentation to support that that the Department had performed the suggested monitoring procedures for 3 of the 4 subrecipients selected for testwork based upon the subrecipients most recent risk assessment performed. For the remaining 1 subrecipient, the risk assessment form did not contain any suggested monitoring procedures. As a result, we were not able to verify that the Department had performed the appropriate monitoring procedures as outlined by the risk assessment performed for each subrecipient. B. The Department’s during the award monitoring for each of the 4 subrecipients selected for testwork consisted of the review and approval of subrecipient invoices. Per review of the invoices, the invoice contained a summary of costs incurred by the subrecipient by category of expense that it was seeking reimbursement for. The Department did not perform any other monitoring procedures to ensure the accuracy of the request made by the subrecipient through either a desk review or an on-site monitoring visit. As no further monitoring procedures were performed by the Department to ensure that the subrecipient was in compliance with the terms and conditions of its subrecipient grant agreement, the Department does not appear to have monitoring procedure in place that would allow it to timely identify noncompliance incurred at the subrecipient level. Cause The cause of the condition found was primarily due to a lack of formal policies and internal controls to ensure that all required subrecipient monitoring compliance procedures are being performed by the Department. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that the subrecipient risk assessment is routinely updated for multiyear grants and that the prescribed monitoring procedures take into consideration any additional monitoring procedures that might need to be performed, such as a desk review or on-site visit, particularly if the program is not audited as part of the subrecipient’s uniform guidance audit. In addition, written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-020 NH Department of Health and Human Services Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) and COVID-19 Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) (Assistance Listing #93.323) Federal Award Numbers: NUK50CK000522 Federal Award Year: 2019 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-011 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $3,241,196 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. We were unable to obtain documentation to support that that the Department had performed the suggested monitoring procedures for 3 of the 4 subrecipients selected for testwork based upon the subrecipients most recent risk assessment performed. For the remaining 1 subrecipient, the risk assessment form did not contain any suggested monitoring procedures. As a result, we were not able to verify that the Department had performed the appropriate monitoring procedures as outlined by the risk assessment performed for each subrecipient. B. The Department’s during the award monitoring for each of the 4 subrecipients selected for testwork consisted of the review and approval of subrecipient invoices. Per review of the invoices, the invoice contained a summary of costs incurred by the subrecipient by category of expense that it was seeking reimbursement for. The Department did not perform any other monitoring procedures to ensure the accuracy of the request made by the subrecipient through either a desk review or an on-site monitoring visit. As no further monitoring procedures were performed by the Department to ensure that the subrecipient was in compliance with the terms and conditions of its subrecipient grant agreement, the Department does not appear to have monitoring procedure in place that would allow it to timely identify noncompliance incurred at the subrecipient level. Cause The cause of the condition found was primarily due to a lack of formal policies and internal controls to ensure that all required subrecipient monitoring compliance procedures are being performed by the Department. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that the subrecipient risk assessment is routinely updated for multiyear grants and that the prescribed monitoring procedures take into consideration any additional monitoring procedures that might need to be performed, such as a desk review or on-site visit, particularly if the program is not audited as part of the subrecipient’s uniform guidance audit. In addition, written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-021 NH Department of Energy Low Income Home Energy Assistance (Assistance Listing #93.568) Federal Award Numbers: 2301NHLIEA, 2401NHLIEA Federal Award Year: 2023, 2024 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-015 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity must: • Clearly identify to the subrecipient required award information and applicable requirements described in 2 CFR section 200.332(a); • Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required through the terms and conditions of the award, subaward monitoring must include following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means; and Issuing a management decision for audit findings pertaining to federal award provided to the subrecipient from the subrecipient as required by 2 CFR section 200.521. Additionally, Title 45 U.S. Code of Federal Regulation Part 75 (45 CFR section 75), Uniform Administrative Requirements, Cost Principles, and Audit Requirements for HS Awards, section 75.303(a), Internal Controls, states the non-Federal entity must establish and maintain effective internal control over the federal award that provides reasonable assurance that the non-Federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition As part of the Low-Income Home Energy Assistance program (LIHEAP), the New Hampshire Department of Energy (the Department) enters into grant agreements with local entities to provide services related to the eligibility determination process for the LIHEAP program (including the calculation of participant benefits) and payment of benefits to fuel providers. During the year ended June 30, 2024, $38,545,693 was passed through to subrecipients. As part of our testwork over the subrecipient monitoring process, we identified the following: A. The Department communicates award information to subrecipients through the approved grant agreement. Per review of the grant agreement, for each of the 4 subrecipients selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR section 200.332. Specifically, the following elements were not communicated: a. Indirect cost rate for federal awards (including if the deminimus rate is charged per 2 CFR section 200.414) b. Identification of whether the award is R&D B. The data that is used to compile the Annual Report on Households Assisted by LIHEAP is obtained from case data that is reported to the New Hampshire Department of Energy (the Department) from its subrecipients as the Department has entered into grant agreements with third parties who are responsible for the eligibility determination and benefit payment process. The Annual Report on Households Assisted by LIHEAP contains data that is specific to benefits paid to eligible participants. As part of our subrecipient monitoring testwork, we were unable to verify that the Department had performed any monitoring procedures over the data provided by each subrecipient to ensure that the data reported within the annual report was complete and accurate. Cause The cause of the condition found was primarily due to insufficient documented subrecipient policies and procedures to ensure that award information is appropriately communicated and that there is appropriate monitoring procedures performed over the completeness and accuracy of the data submitted by the subrecipient utilized to compile federal reports. Effect The effect of the condition found is that the Department did not comply with section 2 CFR 200.332 (a) and 2 CFR 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend that the Department formalize, policies and procedures and implement the necessary internal controls to ensure that all required award identification information is communicated to subrecipients and over the monitoring of data submitted by subrecipients to be used in the Annual Report on Households Assisted by LIHEAP to ensure that the report is complete and accurate. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-025 NH Department of Health and Human Services CCDF Cluster COVID-19 CCDF Cluster (Assistance Listing #93.575, #93.596) Federal Award Number: 2101NHCDC6, 2201NHCCDD, 2301NHCCDD Federal Award Year: 2021, 2022, 2023 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $7,770,973 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. For 1 of 3 subrecipients selected for testwork, there were no suggested monitoring procedures included within the subrecipient’s risk assessment. As a result, we were unable to determine if the Department had adequately monitored the subrecipient. B. For 1 of 3 of subrecipients selected for testwork, the risk assessment indicated that a quarterly expenditure review was to be performed. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period. C. For 1 of 3 of subrecipients selected for testwork, the risk assessment indicated that a monthly expenditure review was to be performed. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period Cause The cause of the condition found was primarily due to a lack of formal documented policies, procedures and internal controls to ensure that required monitoring procedures outlined within the subrecipient’s risk assessment is performed. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that the prescribed monitoring procedures outlined within the risk assessment are properly performed. Written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-025 NH Department of Health and Human Services CCDF Cluster COVID-19 CCDF Cluster (Assistance Listing #93.575, #93.596) Federal Award Number: 2101NHCDC6, 2201NHCCDD, 2301NHCCDD Federal Award Year: 2021, 2022, 2023 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $7,770,973 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. For 1 of 3 subrecipients selected for testwork, there were no suggested monitoring procedures included within the subrecipient’s risk assessment. As a result, we were unable to determine if the Department had adequately monitored the subrecipient. B. For 1 of 3 of subrecipients selected for testwork, the risk assessment indicated that a quarterly expenditure review was to be performed. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period. C. For 1 of 3 of subrecipients selected for testwork, the risk assessment indicated that a monthly expenditure review was to be performed. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period Cause The cause of the condition found was primarily due to a lack of formal documented policies, procedures and internal controls to ensure that required monitoring procedures outlined within the subrecipient’s risk assessment is performed. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that the prescribed monitoring procedures outlined within the risk assessment are properly performed. Written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-025 NH Department of Health and Human Services CCDF Cluster COVID-19 CCDF Cluster (Assistance Listing #93.575, #93.596) Federal Award Number: 2101NHCDC6, 2201NHCCDD, 2301NHCCDD Federal Award Year: 2021, 2022, 2023 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $7,770,973 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. For 1 of 3 subrecipients selected for testwork, there were no suggested monitoring procedures included within the subrecipient’s risk assessment. As a result, we were unable to determine if the Department had adequately monitored the subrecipient. B. For 1 of 3 of subrecipients selected for testwork, the risk assessment indicated that a quarterly expenditure review was to be performed. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period. C. For 1 of 3 of subrecipients selected for testwork, the risk assessment indicated that a monthly expenditure review was to be performed. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period Cause The cause of the condition found was primarily due to a lack of formal documented policies, procedures and internal controls to ensure that required monitoring procedures outlined within the subrecipient’s risk assessment is performed. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that the prescribed monitoring procedures outlined within the risk assessment are properly performed. Written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-026 NH Department of Health and Human Services Opioid STR (Assistance Listing #93.788) Federal Award Number: H79TI081685, H79TI083326, H79TI085759 Federal Award Year: 2022, 2023, 2024 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements –Clearly identify to the subrecipient the award as a subrecipient by providing the information prescribed in 2 CFR 200.332(a) 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $21,190,358 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified the following: A. For 3 of 7 subrecipients selected for testwork, per review of the award communication, the Department did not properly communicate the indirect cost rate for the federal award. B. For 1 of 7 subrecipients selected for testwork, there were no suggested monitoring procedures included within the subrecipient’s risk assessment. As a result, we were unable to determine if the Department had adequately monitored the subrecipient. We noted that while there no monitoring procedures listed, the Department did complete a monthly expenditure detail review. C. For 1 of 7 subrecipients selected for testwork, the risk assessment indicated that an annual onsite monitoring review was to be conducted. We were unable to obtain documentation to support that an onsite monitoring review was completed or started during our audit period. Cause The cause of the condition found was primarily due to a lack of formal documented policies, procedures and internal controls to ensure that the required award identification information is communicated to all subrecipients and to ensure that required monitoring procedures outlined within the subrecipient’s risk assessment is performed. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(a), 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a), 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). This would ensure that all required award identification information is properly communicated to subrecipients, and that the prescribed monitoring procedures outlined within the risk assessment are properly performed. Written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management partially concurs with the finding above. Rejoinder: As documented in Bullet B above, the risk assessment provided by the Department for 1 of 7 subrecipients did not contain any suggested monitoring procedures. As a result, we were unable to determine if the Department had adequately monitored the subrecipient.
Finding Reference Number: 2024-028 NH Department of Health and Human Services Block Grants for Substance Use Prevention, Treatment, and Recovery Services and COVID-19 Block Grants for Substance Use Prevention, Treatment, and Recovery Services (Assistance Listing #93.959) Federal Award Numbers: 1B08TI084659-01, 1B08TI085821-01 Federal Award Year: 2022, 2023 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-017 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $7,698,389 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified that for all 9 of the subrecipients selected for testwork, the risk assessment indicated that on a monthly an examination of the expenditure detail to assess purchasing compliance with contract requirements and applicable laws and regulations was to be performed. As part of our testwork, we were unable to obtain documentation to support that this review had taken place. Cause The cause of the condition found was primarily due to a lack of formal policies and internal controls to ensure that all required subrecipient monitoring compliance procedures are being performed by the Department. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b) and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). In addition, written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-028 NH Department of Health and Human Services Block Grants for Substance Use Prevention, Treatment, and Recovery Services and COVID-19 Block Grants for Substance Use Prevention, Treatment, and Recovery Services (Assistance Listing #93.959) Federal Award Numbers: 1B08TI084659-01, 1B08TI085821-01 Federal Award Year: 2022, 2023 U.S. Department of Health and Human Services Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-017 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 2. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 45 CFR section 75 303(a) states the non-Federal entity must establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award Condition During the year ended June 30, 2024, the New Hampshire Department of Health and Human Services (the Department) passed through $7,698,389 of federal funding to subrecipients. As part of our testing related subrecipient monitoring, we identified that for all 9 of the subrecipients selected for testwork, the risk assessment indicated that on a monthly an examination of the expenditure detail to assess purchasing compliance with contract requirements and applicable laws and regulations was to be performed. As part of our testwork, we were unable to obtain documentation to support that this review had taken place. Cause The cause of the condition found was primarily due to a lack of formal policies and internal controls to ensure that all required subrecipient monitoring compliance procedures are being performed by the Department. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(b) and 2 CFR sections 200.332(d) through (f). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(b), and 2 CFR sections 200.332(d) through (f). In addition, written policies and procedures should be established to ensure that if the risk assessment has suggested a particular monitoring procedure be performed, that the Department is adequately documenting its monitoring procedures to ensure that it has performed the required procedures. View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-034 NH Department of Safety Disaster Grants – Public Assistance (Presidentially Declared Disasters) and COVID-19 Public Assistance (Presidentially Declared Disasters) (Assistance Listing #97.036) Federal Award Numbers: FEMA-4622-DR-NH, FEMA-4624-DR-NH, FEMA-4457-DR-NH, FEMA-4370-DR, FEMA-4693-DR, FEMA-4355-DR, FEMA-4329-DR, FEMA-4516-DR-NH Federal Award Year: July 17-19, 2021, July 29-30, 2021, July 11-12, 2019, March 2-8, 2018, December 22-December 25, 2022, October 29-November 1, 2017, July 1-2, 2017, January 20, 2020 U.S. Department of Homeland Security Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-023 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(1); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 2 CFR 200.303 (a) states that non-federal entities must establish and maintain effective internal control over federal awards that provide reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition As part of the Disaster Grants - Public Assistance program (DGPA), the New Hampshire Department of Safety - Homeland Security and Emergency Management (the Department) enters into grant agreements with local municipalities to provide reimbursement for expenditures incurred as a result of New Hampshire declared disasters. During the year ended June 30, 2024, $41,851,050 was passed through to 85 subrecipients. As part of our testwork over the subrecipient monitoring process, we noted the following: A. The Department communicates award information to subrecipients through the approved agreement. Per review of the agreement, for each of the 17 subrecipients selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR section 200.332(a). Specifically, the following elements were not communicated: • Identification of whether the award is R&D was not communicated for 13 of 17 subrecipients selected for testwork; and • Indirect cost rate for the federal award was not communicated for 13 of 17 subrecipients selected for testwork B. For 4 of 17 subrecipients selected for testwork, while a risk assessment was performed, the Department did not perform it within calendar year of when the award was obligated as outlined within their policies and procedures. C. For 1 of 17 subrecipients selected for testwork, the risk assessment form was not dated or initialed to indicted when the risk assessment procedures were performed. As such, it was unclear if the risk assessment was completed timely. D. During our testwork over the Department’s review of subrecipient uniform guidance reports, we noted there were no uniform guidance report review policies and procedures in place. For the 17 subrecipients selected for testwork, 5 subrecipients were identified in which the Department did not review the most recent uniform guidance report issued. Specifically, we noted: • For 4 of 5 subrecipients, the subrecipient’s uniform guidance report was not reviewed due to updated risk assessments not being performed in the current year. • For 1 of 5 subrecipients, the current year risk assessment was performed prior to the receipt of the subrecipient’s uniform guidance report and management did not go back to review the report. Cause The cause of the condition found was primarily due to the Department not following their sub monitoring internal controls in accordance with written formal policies and procedures. Questioned Costs: None. Recommendation We recommend that the Department develop policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a-h) and 2 CFR section 200.501(h). View of Responsible Officials: Management concurs with the finding above.
Finding Reference Number: 2024-034 NH Department of Safety Disaster Grants – Public Assistance (Presidentially Declared Disasters) and COVID-19 Public Assistance (Presidentially Declared Disasters) (Assistance Listing #97.036) Federal Award Numbers: FEMA-4622-DR-NH, FEMA-4624-DR-NH, FEMA-4457-DR-NH, FEMA-4370-DR, FEMA-4693-DR, FEMA-4355-DR, FEMA-4329-DR, FEMA-4516-DR-NH Federal Award Year: July 17-19, 2021, July 29-30, 2021, July 11-12, 2019, March 2-8, 2018, December 22-December 25, 2022, October 29-November 1, 2017, July 1-2, 2017, January 20, 2020 U.S. Department of Homeland Security Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-023 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(1); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 2 CFR 200.303 (a) states that non-federal entities must establish and maintain effective internal control over federal awards that provide reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition As part of the Disaster Grants - Public Assistance program (DGPA), the New Hampshire Department of Safety - Homeland Security and Emergency Management (the Department) enters into grant agreements with local municipalities to provide reimbursement for expenditures incurred as a result of New Hampshire declared disasters. During the year ended June 30, 2024, $41,851,050 was passed through to 85 subrecipients. As part of our testwork over the subrecipient monitoring process, we noted the following: A. The Department communicates award information to subrecipients through the approved agreement. Per review of the agreement, for each of the 17 subrecipients selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR section 200.332(a). Specifically, the following elements were not communicated: • Identification of whether the award is R&D was not communicated for 13 of 17 subrecipients selected for testwork; and • Indirect cost rate for the federal award was not communicated for 13 of 17 subrecipients selected for testwork B. For 4 of 17 subrecipients selected for testwork, while a risk assessment was performed, the Department did not perform it within calendar year of when the award was obligated as outlined within their policies and procedures. C. For 1 of 17 subrecipients selected for testwork, the risk assessment form was not dated or initialed to indicted when the risk assessment procedures were performed. As such, it was unclear if the risk assessment was completed timely. D. During our testwork over the Department’s review of subrecipient uniform guidance reports, we noted there were no uniform guidance report review policies and procedures in place. For the 17 subrecipients selected for testwork, 5 subrecipients were identified in which the Department did not review the most recent uniform guidance report issued. Specifically, we noted: • For 4 of 5 subrecipients, the subrecipient’s uniform guidance report was not reviewed due to updated risk assessments not being performed in the current year. • For 1 of 5 subrecipients, the current year risk assessment was performed prior to the receipt of the subrecipient’s uniform guidance report and management did not go back to review the report. Cause The cause of the condition found was primarily due to the Department not following their sub monitoring internal controls in accordance with written formal policies and procedures. Questioned Costs: None. Recommendation We recommend that the Department develop policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a-h) and 2 CFR section 200.501(h). View of Responsible Officials: Management concurs with the finding above.
Reference Number: 2024-014 Prior Year Finding: 2023-025 Federal Agency: U.S. Department of Health and Human Services State Agency: Department of Human Services Federal Program: Opioid STR Assistance Listing Number: 93.788 Award Number and Year: H79T1083317 (9/3/2020 – 9/29/2023), H79T1085743 (9/30/2022 – 9/29/2024) Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control Over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Department of Human Services (Department) did not include all required information in subaward agreements. Context: For 1 of 13 subawards selected for testing, the subrecipient’s unique identifier and the Federal Award Identification Number (FAIN) were omitted from the subaward agreement. Questioned costs: None noted. Cause: The Department’s procedures were not effective to ensure that subawards were issued in compliance with Federal requirements. Internal controls did not prevent or detect the errors. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Recommendation: The Department should review and enhance internal controls and procedures to ensure that all required information is included in subaward agreements. Views of responsible officials: DMHAS acknowledges that the FAIN was omitted in a single notice of sub recipient award that predates the implementation date of its FY 2023 Corrective Action Plan (CAP). The award at issue relates to a “special County” add-on contract (one (1) of a total of nineteen (19)) that is tracked manually and in the DMHAS Contract Information Management System (CIMS) on which it currently relies to relay the data components required by 2 CFR 200.332. The single omission of the FAIN was due to a clerical error, whereby CIMS was not updated consistent with the manual record of the 2024 County contract renewal. DMHAS acknowledged in its FY 2023 CAP that CIMS was being replaced with SAGE in order to automate sub recipient notices, reduce administrative burden and decrease clerical errors that result from manual data entry. DMHAS notes that the original 2025 SAGE go-live date has been delayed and moved to Summer 2026. Therefore, DMHAS made improvements to CIMS (that is available to Providers). In addition to identifying the federal funding source in the program column and in the notes, CIMS now includes a federal drop down box that links the federal NOAs to the subrecipient agreement. DMHAS is compliant with its FY 2023 CAP which included a July 1, 2024 implementation date. Beginning July 1, 2024, DMHAS starting using a new Subaward template that includes the requisite data elements. DMHAS created a contract policy update and completed template trainings in-person and remotely. The DMHAS Compliance Unit audited the use of the new template to ensure Subaward include the requisite data elements.
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).
2024-033 - Noncompliance with and Inadequate Controls over Subrecipient Monitoring Requirements at Pennington Biomedical Research Center State Entity: Louisiana State University and Related Campuses Award Years: 2021, 2022, 2023 Award Numbers: 1P50MD017338-01, 1R01DK132011-01A1, 1U01AG073204-01, 1U01CA271279-01 Compliance Requirement: Subrecipient Monitoring Pass-Through Entity: University of Alabama at Birmingham Repeat Finding: No See Schedule of Findings and Questioned Costs for chart/table. Condition: The Pennington Biomedical Research Center (PBRC) did not adequately monitor subrecipients of the Research and Development (R&D) Cluster programs. In a non-statistical sample of nine grants to subrecipients, out of a population of 61 grants, it was noted that for five (56%) of the grants evaluated, PBRC could not provide evidence that the required risk analyses were performed to evaluate the subrecipient’s fraud risk and risk of noncompliance with the subaward agreement. Criteria: 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient’s fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for the purpose of determining the appropriate subrecipient monitoring. Cause: PBRC did not follow established controls to ensure that R&D Cluster award subrecipients were monitored in accordance with federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal grantor. Recommendation: PBRC should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-38).
2024-033 - Noncompliance with and Inadequate Controls over Subrecipient Monitoring Requirements at Pennington Biomedical Research Center State Entity: Louisiana State University and Related Campuses Award Years: 2021, 2022, 2023 Award Numbers: 1P50MD017338-01, 1R01DK132011-01A1, 1U01AG073204-01, 1U01CA271279-01 Compliance Requirement: Subrecipient Monitoring Pass-Through Entity: University of Alabama at Birmingham Repeat Finding: No See Schedule of Findings and Questioned Costs for chart/table. Condition: The Pennington Biomedical Research Center (PBRC) did not adequately monitor subrecipients of the Research and Development (R&D) Cluster programs. In a non-statistical sample of nine grants to subrecipients, out of a population of 61 grants, it was noted that for five (56%) of the grants evaluated, PBRC could not provide evidence that the required risk analyses were performed to evaluate the subrecipient’s fraud risk and risk of noncompliance with the subaward agreement. Criteria: 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient’s fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for the purpose of determining the appropriate subrecipient monitoring. Cause: PBRC did not follow established controls to ensure that R&D Cluster award subrecipients were monitored in accordance with federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal grantor. Recommendation: PBRC should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-38).
2024-033 - Noncompliance with and Inadequate Controls over Subrecipient Monitoring Requirements at Pennington Biomedical Research Center State Entity: Louisiana State University and Related Campuses Award Years: 2021, 2022, 2023 Award Numbers: 1P50MD017338-01, 1R01DK132011-01A1, 1U01AG073204-01, 1U01CA271279-01 Compliance Requirement: Subrecipient Monitoring Pass-Through Entity: University of Alabama at Birmingham Repeat Finding: No See Schedule of Findings and Questioned Costs for chart/table. Condition: The Pennington Biomedical Research Center (PBRC) did not adequately monitor subrecipients of the Research and Development (R&D) Cluster programs. In a non-statistical sample of nine grants to subrecipients, out of a population of 61 grants, it was noted that for five (56%) of the grants evaluated, PBRC could not provide evidence that the required risk analyses were performed to evaluate the subrecipient’s fraud risk and risk of noncompliance with the subaward agreement. Criteria: 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient’s fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for the purpose of determining the appropriate subrecipient monitoring. Cause: PBRC did not follow established controls to ensure that R&D Cluster award subrecipients were monitored in accordance with federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal grantor. Recommendation: PBRC should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-38).
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).
2024-033 - Noncompliance with and Inadequate Controls over Subrecipient Monitoring Requirements at Pennington Biomedical Research Center State Entity: Louisiana State University and Related Campuses Award Years: 2021, 2022, 2023 Award Numbers: 1P50MD017338-01, 1R01DK132011-01A1, 1U01AG073204-01, 1U01CA271279-01 Compliance Requirement: Subrecipient Monitoring Pass-Through Entity: University of Alabama at Birmingham Repeat Finding: No See Schedule of Findings and Questioned Costs for chart/table. Condition: The Pennington Biomedical Research Center (PBRC) did not adequately monitor subrecipients of the Research and Development (R&D) Cluster programs. In a non-statistical sample of nine grants to subrecipients, out of a population of 61 grants, it was noted that for five (56%) of the grants evaluated, PBRC could not provide evidence that the required risk analyses were performed to evaluate the subrecipient’s fraud risk and risk of noncompliance with the subaward agreement. Criteria: 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient’s fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for the purpose of determining the appropriate subrecipient monitoring. Cause: PBRC did not follow established controls to ensure that R&D Cluster award subrecipients were monitored in accordance with federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal grantor. Recommendation: PBRC should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-38).
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.