FINDING 2024-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Subrecipient Monitoring Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): SLFRP1096 Compliance Requirement: Subrecipient Monitoring Audit Finding: Material Weakness INDIANA STATE BOARD OF ACCOUNTS 19 CITY OF ANDERSON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Condition and Context Subrecipients associated with the City's Non-profit, Affordable Housing, and Homeless Initiatives activities funded by the COVID-19 - Coronavirus State and Local Fiscal Recovery Funds were required to submit reports on program activities either quarterly or monthly. The City did not have adequate internal controls in place designed to ensure that these reports were reviewed. Responsibility for reviewing these reports rested primarily with one employee. For two of three subrecipients tested, we were not able to determine that there was a second employee involved that would ensure that the reports submitted by the subrecipients were reviewed by the City. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.332 states: "All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and include the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward notification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; INDIANA STATE BOARD OF ACCOUNTS 20 CITY OF ANDERSON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the passthrough entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). INDIANA STATE BOARD OF ACCOUNTS 21 CITY OF ANDERSON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. . . . (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. INDIANA STATE BOARD OF ACCOUNTS 22 CITY OF ANDERSON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program related matters; and (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations." Cause A system of internal controls to include oversite and review of the quarterly or monthly reports prepared by the subrecipients was not in place. One individual was primarily responsible for reviewing the subrecipient reports. Effect Not having procedures in place for oversite and review of the monitoring reports could lead to noncompliance with the requirements for subrecipient monitoring. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. INDIANA STATE BOARD OF ACCOUNTS 23 CITY OF ANDERSON SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City establish a proper system of internal controls to include oversite and review to ensure that the subrecipient report reviews are reviewed/approved by a second party. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
Department of Human Services Department of Labor and Industry Finding 2024 –¬ 009: ALN 93.558 – Temporary Assistance for Needy Families Department of Human Services Did Not Validate Financial Information as Part of Its On-Site Monitoring and the Department of Labor and Industry Did Not Perform Monitoring of Temporary Assistance for Needy Families Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2023-014) Federal Grant Number(s) and Year(s): 2401PATANF (10/01/2023 – 9/30/2024), 2301PATANF (10/01/2022 – 9/30/2023), 2201PATANF (10/01/2021 – 9/30/2022), 2101PATANF (10/01/2020 – 9/30/2021) Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Compliance Requirement: Subrecipient Monitoring Condition: During the fiscal year ended June 30, 2024, the Department of Human Services (DHS) paid $83.5 million (or 21.9 percent) in Temporary Assistance for Needy Families (TANF) funding to subrecipients within the New Directions, Cash Grants, and Alternatives to Abortion appropriations out of total federal TANF expenditures of $381.0 million reported on the June 30, 2024 Schedule of Expenditures of Federal Awards (SEFA). Our testing of DHS’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2024, disclosed that DHS performed on-site monitoring for 16 out of 16 subrecipients selected for testing. The on-site monitoring that was performed consisted of reviews of program operations including design, data entry accuracy and timeliness, and case management analysis. The on-site monitoring also included a review of a sample of TANF recipient case files to ensure that the recipients’ TANF activities were documented and accurately entered in the Commonwealth’s Workforce Development System. However, DHS’s monitoring procedures for the 16 subrecipients were not adequate as they did not include a review or monitoring of subrecipient financial records, which would provide an assessment of a subrecipient’s compliance with applicable federal regulations. Although DHS’s monitoring procedures include reviewing subrecipient completed questionnaires for selected subrecipients that had questions related to financial matters, DHS’s monitoring personnel did not review subrecipient financial records. For example, DHS did not perform procedures to ensure subrecipient invoices agreed to the books and records of the subrecipient and that the records were adequate to support the allowability of costs paid by DHS during the award period. In addition, DHS’s monitoring procedures did not include an evaluation of the operating effectiveness of DHS subrecipients’ procedures to monitor Single Audits and any related findings. Our testing also included follow-up on one subrecipient identified in the prior year finding as not being on-site monitored by DHS when the risk assessment warranted on-site monitoring. Our follow-up during the current audit period disclosed that DHS did not conduct on-site monitoring for this subrecipient during the fiscal year ended June 30, 2024. Since the on-site monitoring was not completed, internal control weaknesses, noncompliance, and questioned costs may have existed and remained undetected during the current audit period. This subrecipient received $500 thousand of TANF funds during the fiscal year ended June 30, 2024. During the fiscal year ended June 30, 2024, the Department of Labor and Industry (L&I) paid $27.1 million in TANF funding to subrecipients within the Youth Employment and Training (E&T) appropriation (or 7.1 percent) out of total federal TANF expenditures of $381.0 million reported on the June 30, 2024 SEFA. Our testing of L&I’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2024, disclosed that L&I did not perform on-site monitoring or desk reviews for seven out of seven subrecipients selected for testing. Finding 2024 –¬ 009: (continued) Criteria: 45 CFR Section 75.352, Requirements for pass-through entities, states: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 75.521 [Management decision]. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: A pass-through entity must: (f) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS considered how financial monitoring might be incorporated into on-site monitoring procedures, but updated procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2024. Therefore, DHS has not implemented adequate during-the-award monitoring procedures of subrecipients to include testing of the financial records and the subrecipients’ monitoring of Single Audits sufficient to ensure compliance with federal regulations. L&I recognized the need to perform during-the-award monitoring procedures for TANF funds passed through for the Youth E&T program, but the updated procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2024. Effect: TANF subrecipients could be operating in noncompliance with federal regulations without timely detection and correction by DHS and L&I management. Recommendation: DHS and L&I should strengthen controls to ensure during-the-award monitoring is being performed for all TANF subrecipients and that the monitoring includes procedures to ensure that subrecipients are in compliance with applicable federal regulations. This should include examining subrecipients’ financial records and ensuring that all required Single Audits were obtained by DHS and L&I subrecipients. Finding 2024 –¬ 009: (continued) DHS Response: DHS agrees with this finding. L&I Response: L&I concurs with this finding. TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct on site monitoring of the TANF YDP program in program year 2023. BWPO did begin on site monitoring in program year 2024 on a limited basis as a pilot with 3 local areas in September of 2024. BWPO plans to expand monitoring efforts in 2025. Questioned Costs: The amount of questioned costs cannot be determined.
Reference Number: 2024-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Highway Planning and Construction Assistance Listing Number: 20.205 Award Number and Year: FFY2023 – FFY2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332, the following requirements are imposed on pass-through entities: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Vermont Agency of Transportation (VTrans) omitted required federal award information from subawards it issued in the program and did not adequately monitor subrecipients. Context: Nineteen subawards were selected for testing and the following exceptions were noted: • For 16 of 19 subawards selected for testing, the federal award date was not included on the subaward agreement. • For 1 of 19 subawards selected for testing, the last on-site subrecipient monitoring visit was performed in FY 2019 and the next on-site monitoring did not take place until FY 2024. Per the VTrans subrecipient monitoring plan, on-site monitoring must be performed no less than every three years. Cause: Procedures and internal controls were not sufficient to ensure that subawards included all required federal information. Although VTrans subsequently modified its subaward issuance process, controls in effect during the audit period were not sufficient to ensure that subawards included all required information. Procedures and internal controls were also not sufficient to ensure that timely on-site monitoring visits were performed in accordance with its monitoring plan. Effect: Excluding the required federal grant award information at the time of subaward issuance may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports. Failure to conduct adequate subrecipient monitoring may result in a failure of VTrans to detect that subawards are used for unauthorized purposes, are managed in violation of the terms and conditions of the subawards, or that subaward performance goals are not achieved. There is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by VTrans personnel on a timely basis. Questioned costs: Undetermined. Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding.
Department of Human Services Department of Labor and Industry Finding 2024 –¬ 009: ALN 93.558 – Temporary Assistance for Needy Families Department of Human Services Did Not Validate Financial Information as Part of Its On-Site Monitoring and the Department of Labor and Industry Did Not Perform Monitoring of Temporary Assistance for Needy Families Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2023-014) Federal Grant Number(s) and Year(s): 2401PATANF (10/01/2023 – 9/30/2024), 2301PATANF (10/01/2022 – 9/30/2023), 2201PATANF (10/01/2021 – 9/30/2022), 2101PATANF (10/01/2020 – 9/30/2021) Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Compliance Requirement: Subrecipient Monitoring Condition: During the fiscal year ended June 30, 2024, the Department of Human Services (DHS) paid $83.5 million (or 21.9 percent) in Temporary Assistance for Needy Families (TANF) funding to subrecipients within the New Directions, Cash Grants, and Alternatives to Abortion appropriations out of total federal TANF expenditures of $381.0 million reported on the June 30, 2024 Schedule of Expenditures of Federal Awards (SEFA). Our testing of DHS’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2024, disclosed that DHS performed on-site monitoring for 16 out of 16 subrecipients selected for testing. The on-site monitoring that was performed consisted of reviews of program operations including design, data entry accuracy and timeliness, and case management analysis. The on-site monitoring also included a review of a sample of TANF recipient case files to ensure that the recipients’ TANF activities were documented and accurately entered in the Commonwealth’s Workforce Development System. However, DHS’s monitoring procedures for the 16 subrecipients were not adequate as they did not include a review or monitoring of subrecipient financial records, which would provide an assessment of a subrecipient’s compliance with applicable federal regulations. Although DHS’s monitoring procedures include reviewing subrecipient completed questionnaires for selected subrecipients that had questions related to financial matters, DHS’s monitoring personnel did not review subrecipient financial records. For example, DHS did not perform procedures to ensure subrecipient invoices agreed to the books and records of the subrecipient and that the records were adequate to support the allowability of costs paid by DHS during the award period. In addition, DHS’s monitoring procedures did not include an evaluation of the operating effectiveness of DHS subrecipients’ procedures to monitor Single Audits and any related findings. Our testing also included follow-up on one subrecipient identified in the prior year finding as not being on-site monitored by DHS when the risk assessment warranted on-site monitoring. Our follow-up during the current audit period disclosed that DHS did not conduct on-site monitoring for this subrecipient during the fiscal year ended June 30, 2024. Since the on-site monitoring was not completed, internal control weaknesses, noncompliance, and questioned costs may have existed and remained undetected during the current audit period. This subrecipient received $500 thousand of TANF funds during the fiscal year ended June 30, 2024. During the fiscal year ended June 30, 2024, the Department of Labor and Industry (L&I) paid $27.1 million in TANF funding to subrecipients within the Youth Employment and Training (E&T) appropriation (or 7.1 percent) out of total federal TANF expenditures of $381.0 million reported on the June 30, 2024 SEFA. Our testing of L&I’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2024, disclosed that L&I did not perform on-site monitoring or desk reviews for seven out of seven subrecipients selected for testing. Finding 2024 –¬ 009: (continued) Criteria: 45 CFR Section 75.352, Requirements for pass-through entities, states: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 75.521 [Management decision]. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: A pass-through entity must: (f) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS considered how financial monitoring might be incorporated into on-site monitoring procedures, but updated procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2024. Therefore, DHS has not implemented adequate during-the-award monitoring procedures of subrecipients to include testing of the financial records and the subrecipients’ monitoring of Single Audits sufficient to ensure compliance with federal regulations. L&I recognized the need to perform during-the-award monitoring procedures for TANF funds passed through for the Youth E&T program, but the updated procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2024. Effect: TANF subrecipients could be operating in noncompliance with federal regulations without timely detection and correction by DHS and L&I management. Recommendation: DHS and L&I should strengthen controls to ensure during-the-award monitoring is being performed for all TANF subrecipients and that the monitoring includes procedures to ensure that subrecipients are in compliance with applicable federal regulations. This should include examining subrecipients’ financial records and ensuring that all required Single Audits were obtained by DHS and L&I subrecipients. Finding 2024 –¬ 009: (continued) DHS Response: DHS agrees with this finding. L&I Response: L&I concurs with this finding. TANF Youth Development Program (TANF YDP) operations transitioned from the Bureau of Workforce Development Administration (BWDA) to the Bureau of Workforce Partnerships and Operations (BWPO) in January 2023. Due to this transition, BWPO did not conduct on site monitoring of the TANF YDP program in program year 2023. BWPO did begin on site monitoring in program year 2024 on a limited basis as a pilot with 3 local areas in September of 2024. BWPO plans to expand monitoring efforts in 2025. Questioned Costs: The amount of questioned costs cannot be determined.
Reference Number: 2024-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Highway Planning and Construction Assistance Listing Number: 20.205 Award Number and Year: FFY2023 – FFY2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332, the following requirements are imposed on pass-through entities: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Vermont Agency of Transportation (VTrans) omitted required federal award information from subawards it issued in the program and did not adequately monitor subrecipients. Context: Nineteen subawards were selected for testing and the following exceptions were noted: • For 16 of 19 subawards selected for testing, the federal award date was not included on the subaward agreement. • For 1 of 19 subawards selected for testing, the last on-site subrecipient monitoring visit was performed in FY 2019 and the next on-site monitoring did not take place until FY 2024. Per the VTrans subrecipient monitoring plan, on-site monitoring must be performed no less than every three years. Cause: Procedures and internal controls were not sufficient to ensure that subawards included all required federal information. Although VTrans subsequently modified its subaward issuance process, controls in effect during the audit period were not sufficient to ensure that subawards included all required information. Procedures and internal controls were also not sufficient to ensure that timely on-site monitoring visits were performed in accordance with its monitoring plan. Effect: Excluding the required federal grant award information at the time of subaward issuance may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports. Failure to conduct adequate subrecipient monitoring may result in a failure of VTrans to detect that subawards are used for unauthorized purposes, are managed in violation of the terms and conditions of the subawards, or that subaward performance goals are not achieved. There is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by VTrans personnel on a timely basis. Questioned costs: Undetermined. Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
2023-002 Subrecipient Monitoring Public Health Training Centers Program – Assistance Listing No. 93.516 Award Number: 1 T29HP46735‐01‐00 – Award Period: September 15, 2022 through September 14, 2025 Centers for Disease Control and Prevention Collaboration with Academia to Strengthen Public Health – Assistance Listing No. 93.967 Award Number: G2513_AG-1146 Amendment #1 – Award Period: February 1, 2023 through November 30, 2024 Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Condition: During our testing of subrecipients, we noted documentation was not maintained demonstrating the Organization checked for suspension and debarment prior to contracting with subrecipients, subrecipient vs contractor determinations, evaluation of each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring, or obtaining/reviewing the most recent single audit reports for subrecipients to address findings related to a particular subaward. Criteria: According to 2 CFR 200.331, pass-through entities must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. 2 CFR 200.332 requires every subaward agreement include certain information including the subrecipient’s unique entity identifier (see paragraph (a) for a list of all required data elements); additionally, all pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. 2 CFR 180.22 requires that contract awards not be made to parties listed on the government wide exclusions in the system for Award Management, which contains the names of parties debarred, suspended or otherwise excluded by agencies as well as parties declared ineligible under statutory or regulatory authority. Questioned Costs: None. Cause: The Organization did not have a process in place to ensure all required elements of subrecipient monitoring were documented and retained in their records. Effect: Inadequate monitoring procedures and records may not detect subrecipient noncompliance on a timely basis. This could result in the Organization entering into subrecipient agreements with organizations who are ineligible to receive federal funds or might otherwise not comply with federal laws and regulations. Recommendation: We recommend that management implement procedures to ensure that future subrecipient agreements are compared against all requirements in 2 CFR 200.331, 2 CFR 200.332, and 2 CFR 180.22 and that formal documentation of such considerations be maintained. Views of Responsible Officials and Planned Corrective Actions: Management agrees. See separately issued Corrective Action Plan.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing #93.391 County Department – Department of Public Health Finding 2023 – 005 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not adequately comply with its subrecipient monitoring requirements in accordance with federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the prior audit period, we noted 6 instances (of 27 subrecipients), whereby adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Also, we noted no evidence of the performance of subrecipients’ risk assessment and whether the subrecipients were required to have a Single audit conducted. This resulted in the 2022 audit finding and subsequent corrective action planned prepared by DPH to address the finding, which was anticipated to be completed by December 31, 2023. During the current audit period, we received DPH’s current year status of the prior audit finding, noting that risk assessment and monitoring will be ongoing during the 2023 Single audit. To assess the current year’s status, we reviewed 5 of 35 subrecipients, noting that risk assessments were conducted in April 2024. We also noted that 4 of the 5 subrecipients reviewed were subject to a Single Audit per the risk assessment documentation. However, we noted no evidence financial monitoring conducted, including whether a Single Audit report was obtained and reviewed by DPH. IDENTIFICATION OF REPEATED FINDINGS Repeated (Prior Finding No. 2022-009) RECOMMENDATION We recommend DPH implement its prior corrective action plan for any future subrecipients awarded under the federal program. Also, procedures should be in place to adequately document financial monitoring conducted, as well as the review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NU58DP006993 and 2022/2023 COVID-19 - Community Health Workers for Public Health Response and Resilient, Federal Assistance Listing #93.495 County Department – Department of Public Health Finding 2023 – 006 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the current audit period, we noted 12 subrecipients were awarded funds. During our review of three (3) subrecipients, we noted the following: For all three subrecipients, we noted that adequate documentation was not maintained to support the financial monitoring of these subrecipients. Also, no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including DPH’s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). For one subrecipient, we noted documentation was not maintained to support DPH’s evaluation of the subrecipient’s risk of noncompliance and the frequency of monitoring to be conducted by DPH based on the assessed risk. IDENTIFICATION OF REPEATED FINDINGS None. RECOMMENDATION We recommend DPH implement procedures to ensure that adequate documentation is maintained to support financial monitoring conducted, evaluation of each subrecipient’s risk of noncompliance and review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing #93.391 County Department – Department of Public Health Finding 2023 – 005 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not adequately comply with its subrecipient monitoring requirements in accordance with federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the prior audit period, we noted 6 instances (of 27 subrecipients), whereby adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Also, we noted no evidence of the performance of subrecipients’ risk assessment and whether the subrecipients were required to have a Single audit conducted. This resulted in the 2022 audit finding and subsequent corrective action planned prepared by DPH to address the finding, which was anticipated to be completed by December 31, 2023. During the current audit period, we received DPH’s current year status of the prior audit finding, noting that risk assessment and monitoring will be ongoing during the 2023 Single audit. To assess the current year’s status, we reviewed 5 of 35 subrecipients, noting that risk assessments were conducted in April 2024. We also noted that 4 of the 5 subrecipients reviewed were subject to a Single Audit per the risk assessment documentation. However, we noted no evidence financial monitoring conducted, including whether a Single Audit report was obtained and reviewed by DPH. IDENTIFICATION OF REPEATED FINDINGS Repeated (Prior Finding No. 2022-009) RECOMMENDATION We recommend DPH implement its prior corrective action plan for any future subrecipients awarded under the federal program. Also, procedures should be in place to adequately document financial monitoring conducted, as well as the review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NU58DP006993 and 2022/2023 COVID-19 - Community Health Workers for Public Health Response and Resilient, Federal Assistance Listing #93.495 County Department – Department of Public Health Finding 2023 – 006 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the current audit period, we noted 12 subrecipients were awarded funds. During our review of three (3) subrecipients, we noted the following: For all three subrecipients, we noted that adequate documentation was not maintained to support the financial monitoring of these subrecipients. Also, no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including DPH’s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). For one subrecipient, we noted documentation was not maintained to support DPH’s evaluation of the subrecipient’s risk of noncompliance and the frequency of monitoring to be conducted by DPH based on the assessed risk. IDENTIFICATION OF REPEATED FINDINGS None. RECOMMENDATION We recommend DPH implement procedures to ensure that adequate documentation is maintained to support financial monitoring conducted, evaluation of each subrecipient’s risk of noncompliance and review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Federal Program Information Funding Agency: U.S. Department of Treasury Federal ALN: 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Pass Through Agency: Tennessee Arts Commission Criteria The Uniform Guidance contains cost principles which establish guidelines for allowable charges to federal grants. According to section 2 CFR 200.425, only audit services required by, and performed in accordance with, the Single Audit Act are allowed to be charged to federal grants. Condition Out of a sample of 25 charges to the grant that were tested, 1 of the charges was unallowed. The charge was determined to be unallowed as it was for the 2022 audit, the majority of which was not required by the Single Audit Act. Cause The Organization has only in recent years began to receive federal funding and therefore did not have a clear understanding of the cost principles contained in the Uniform Guidance. Effect Improper charges, in addition to those identified above, could be submitted to grantors for reimbursement. Questioned Costs $35,125 Auditor’s Recommendation TPAC should ensure that charges to federal grants are allowable in accordance with cost principles contained in Uniform Guidance. Additional training should be obtained to gain a further understanding of these requirements. Management Response Management agrees with finding. TPAC Grants contacted the pass-through agency to offer a solution, to replace the unallowable expense with an allowable expense. The Organization will also have TPAC Grants as well as TPAC Finance take training on Uniform Guidance to gain a better understanding NEW Dof these requirements in the future.
FINDING 2023-002 Subject: COVID-19 - Education Stabilization Fund - Subrecipient Monitoring Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Number: 84.425U Federal Award Number and Year (or Other Identifying Number): S425U210013 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, material noncompliance related to the COVID-19 - Education Stabilization Fund (ESF) funds passed through to subrecipients. The School Corporation received and passed through to subrecipients $420,500 of ESF funds. The School Corporation is to clearly identify the award and applicable requirements to the subrecipients, evaluate the risk of noncompliance related to the subrecipients to determine appropriate monitoring of the subaward, and monitor the activities of the subrecipients to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. The School Corporation did not enter into an agreement with the subrecipients. As such there is no agreement between the School Corporation and the subrecipients that clearly identifies the award as a subaward or includes all the required data elements. In addition, the School Corporation did not have any policies or procedures in place to evaluate the subrecipients' risk of noncompliance or to monitor the activity of the subrecipients. Per inquiry of the School Corporation, it was determined an evaluation of the risk of noncompliance for the subrecipients was not completed, nor did the subrecipients' files support any such evaluation. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.332 states: "All pass-through entities must: INDIANA STATE BOARD OF ACCOUNTS 18 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and include the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward notification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; INDIANA STATE BOARD OF ACCOUNTS 19 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports; (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the passthrough entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. . . . (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. INDIANA STATE BOARD OF ACCOUNTS 20 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on programrelated matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. INDIANA STATE BOARD OF ACCOUNTS 21 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, the School Corporation did not properly evaluate the subrecipients risk of noncompliance or adequately monitor the subrecipients. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls, including segregation of duties, to evaluate the subrecipients risk of noncompliance and adequately monitor the subrecipients. Additionally, policies and procedures should be implemented to ensure appropriate reviews, approvals, and oversight are taking place, as needed, to evaluate and monitor its subrecipients. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
Finding # 2023-003 Program: AL 20.509 – Formula Grants for Rural Areas and Tribal Transit Program – Allowability Grant Number & Year: NE-2022-019; September 9, 2022 Federal Grantor Agency: U.S. Department of Transportation Pass-Through Entity: Nebraska Department of Transportation Criteria: The U.S. Department of Transportation adopted the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards in Title 2 CFR § 1201.10 (January 1, 2023). Title 2 CFR § 200.403 (January 1, 2023) requires costs to be reasonable, necessary, and adequately documented. Title 2 CFR § 200.425(a) (January 1, 2023) states the following regarding the allowability of audit services: A reasonably proportionate share of the costs of audits required by, and performed in accordance with, the Single Audit Act Amendments of 1996 (31 U.S.C. 7501–7507), as implemented by requirements of this part, are allowable. A good internal control plan requires procedures to ensure that all methods used to allocate costs to a Federal grant are reasonable and adequately documented. Condition: Kimball County’s allocation of audit costs between Federal and non-Federal activities was not reasonable. Repeat Finding: No Questioned Costs: $11,716 known Statistical Sample: No Context: During the fiscal year ending June 30, 2023, Kimball County paid for both the fiscal year 2021 and 2022 audits, totaling $39,987. Of this amount, the County allocated $23,987 to AL #20.509. Per the Transit Administrator, all audit costs above $8,000 each year were allocated to AL #20.509 because, prior to requiring a Single audit each year, the County paid a different CPA $8,000 for the annual audit. This CPA did not perform Single Audits; therefore, the County contracted with the Nebraska Auditor of Public Accounts (APA). This allocation was not reasonable because much of the additional audit costs incurred for the audit conducted by the APA were clearly unrelated to Single Audit Act requirements. When sending the final invoice for the audit, the APA includes a detailed breakdown of how much of the total audit cost is attributable to each section of the audit. Based on that breakdown, we calculated a more reasonable allocation, as shown in table below. Based on this more reasonable allocation, we question costs of $11,716. Cause: Procedures were not adequate to ensure that methods used to allocate costs were reasonable. Effect: Increased risk for unallowable costs to be charged to Federal awards, leading to possible Federal sanctions. Recommendation: We recommend the County implement procedures to ensure that all methods used to allocate costs to Federal grants are reasonable and adequately documented. View of Officials: The main reason the costs to be allocated the way they were, was the county would not have switched vendors if the transit had not met the threshold requiring a vendor who could provide a Single Audit. KCTS does realize the decision was based on an inaccurate understanding of other county department’s cost allocations of federal dollars and the uniform code. Moving forward, we will work to research any additional factors that may need to be considered in the cost allocation.
Department of Environmental Protection Finding 2023 –¬ 010: ALN 15.252 – Abandoned Mine Land Reclamation A Material Weakness and Material Noncompliance Exist at the Department of Environmental Protection Related to Subrecipient Monitoring (A Similar Condition Was Noted in Prior Year Finding 2022-005) Federal Grant Number(s) and Year(s): S22AF00017 (1/01/2022 – 12/31/2024), S21AF10015 (1/01/2021 – 12/31/2023), S20AF20092 (10/01/2020 – 9/30/2023), S20AF20006 (1/01/2020 –¬ 12/31/2022), S19AF20004 (12/01/2018 – 11/30/2023), S18AF20004 (11/01/2017 – 10/31/2023) Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Compliance Requirement: Subrecipient Monitoring Condition: The Department of Environmental Protection (DEP) administers the Abandoned Mine Land Reclamation (AMLR) program funded by the United States Department of the Interior (DOI). During the fiscal year ended June 30, 2023, DEP expended $60,055,889 within the AMLR program, of which $6,478,271 was paid to 16 subrecipient entities to provide abandoned mine land reclamation repairs and services throughout Pennsylvania. Up until the fiscal year ended June 30, 2022 timeframe, DEP considered these entities to be contractors and not subrecipients. However, once the entities were determined to be subrecipients, DEP began implementing procedures to ensure federal monitoring requirements were met to include on-site monitoring of subrecipient projects with signed Grant Manager monitoring report forms evidencing visit results. DEP also implemented subrecipient requirements of minimum quarterly Work Progress Reports and annual subrecipient Financial and Performance Reports. Our testing found these procedures were not implemented fully nor timely to ensure compliance throughout the fiscal year ended June 30, 2023. For a sample of six of the sixteen subrecipients, we reviewed relevant project correspondence and documentation to determine if DEP adequately monitored subrecipient projects and documented the results in accordance with procedures. Our testing found three of the six had sufficient documentation of on-site visits evidencing DEP oversight of the projects. However, only one included the subrecipient Work Progress Report and DEP manager signed monitoring report form; both required per DEP procedures. Due to the timing of procedure implementation, no subrecipient Financial and Performance Reports were submitted during the period. One of the six tested had project deficiencies. Sufficient evidence was available to show appropriate DEP follow-up and resolution. While Single Audits of the AMLR subrecipients may be conducted each year, this auditing activity does not compensate for during-the-award program monitoring, since the timing, focus, and scope of subrecipient auditing activities after year end are different than compliance monitoring to be performed by program officials during the year. Criteria: As part of administering the AMLR program, DEP must have policies, procedures, and controls in place to ensure compliance with federal requirements regarding pass-through entity monitoring of subrecipients. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. Finding 2023 –¬ 010: (continued) (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 [Management decision]. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. The standard contract agreement between DEP and the local grantee states, in part: Audit/Compliance Review Requirements - The contractor must comply with all applicable federal and state grant requirements including the Single Audit Act Amendments of 1996; 2 CFR Part 200 as amended; and any other applicable law or regulation, and any amendment to such other applicable law or regulation that may be enacted or promulgated by the federal government. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: Once the determination was made that the contracts with these entities represented subrecipient agreements, DEP began implementing control procedures to ensure federal requirements were met and adequately documented. However, due to the transition time needed for implementation, we found these procedures were not fully or consistently implemented during the audit period. Effect: Without sufficient subrecipient monitoring, DEP cannot ensure compliance with federal statutes, regulations, and the terms and conditions of the subrecipient agreements. In addition, DEP cannot confirm that subrecipients are performing satisfactory work, ensure the efficient use of program resources, and minimize the risk for fraud and abuse. Completing on-site monitoring activities consistently and as designed is essential for DEP to determine whether the subrecipients are complying with federal regulations and spending grant funds appropriately. Recommendation: We recommend DEP continue to implement their written procedures for performing during-the-award subrecipient monitoring to ensure timely subrecipient compliance with federal regulations. On-site monitoring visits by DEP Grant Managers should be supported by documentation to show the monitoring performed, areas examined, conclusions reached, and that the monitoring was performed in compliance with applicable regulations. Agency Response: DEP agrees with the facts presented in this finding. Questioned Costs: The amount of questioned costs cannot be determined.
Department of Human Services Finding 2023 ¬– 014: ALN 93.558 – Temporary Assistance for Needy Families (including COVID-19) Department of Human Services Did Not Validate Financial Information as Part of Its On-Site Monitoring of Temporary Assistance for Needy Families Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2022-008) Federal Grant Number(s) and Year(s): 2301PATANF (10/01/2022 – 9/30/2023), 2201PATANF (10/01/2021 – 9/30/2022), 2101PATANF (10/01/2020 – 9/30/2021), 2001PATANF (10/01/2019 – 9/30/2020), 1901PATANF (10/01/2018 – 9/30/2019), 1801PATANF (10/01/2017 – 9/30/2018), 1701PATANF (10/01/2016 – 9/30/2017) Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Compliance Requirement: Subrecipient Monitoring Condition: During the fiscal year ended June 30, 2023, the Department of Human Services (DHS) paid $82.4 million in Temporary Assistance for Needy Families (TANF) funding to subrecipients within the New Directions, Cash Grants, and Alternatives to Abortion appropriations (or 18.1 percent) out of total federal TANF expenditures of $455.7 million reported on the June 30, 2023 Schedule of Expenditures of Federal Awards. Our testing of DHS’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2023 disclosed that DHS performed on-site monitoring for 13 out of 14 subrecipients selected for testing. The on-site monitoring that was performed consisted of reviews of program operations including design, data entry accuracy and timeliness, case management analysis, and program payment performance goals. The on-site monitoring also included a review of a sample of TANF recipient case files to ensure that the recipients’ TANF activities were documented and accurately entered in the Commonwealth’s Workforce Development System. However, DHS’s monitoring procedures for the 13 subrecipients were not adequate as they did not include a review or monitoring of subrecipient financial records, which would provide an assessment of a subrecipient’s compliance with applicable federal regulations. Although DHS’s monitoring procedures include reviewing subrecipient completed questionnaires for selected subrecipients that had questions related to financial matters, DHS’s monitoring personnel did not review subrecipient financial records. For example, DHS did not perform procedures to ensure subrecipient invoices agreed to the books and records of the subrecipient and that the records were adequate to support the allowability of costs paid by DHS during the award period. In addition, DHS’s monitoring procedures did not include an evaluation of the operating effectiveness of DHS subrecipients’ procedures to monitor Single Audits and any related findings. Our testing of the 14 subrecipients noted above included follow up on one subrecipient identified in the prior year finding as not being on-site monitored by DHS when the risk assessment warranted on-site monitoring. Our follow-up during the current audit period disclosed that DHS did not conduct on-site monitoring for this subrecipient during the fiscal year ended June 30, 2023. Since the on-site monitoring was not completed, internal control weaknesses, noncompliance, and questioned costs may have existed and remained undetected during the current audit period. This subrecipient received $1 million of TANF funds during the fiscal year ended June 30, 2023. Criteria: 45 CFR Section 75.352, Requirements for pass-through entities, states: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. Finding 2023 –¬ 014: (continued) (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 75.521 [Management decision]. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: All pass-through entities must: (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing on-site reviews of the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS provided new during-the-award monitoring procedures to be used for the on-site monitoring of subrecipients, but these procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2023. Therefore, DHS has not implemented adequate during-the-award monitoring procedures of subrecipients to include testing of the financial records and the subrecipients’ monitoring of Single Audits sufficient to ensure compliance with federal regulations. Regarding the one subrecipient for which on-site monitoring was not completed, DHS personnel stated that they worked to obtain the necessary documentation to complete the on-site monitoring. However, the subrecipient had not cooperated. The grant agreement with the subrecipient expired on December 31, 2023 and the subrecipient has stopped all contact with DHS. Effect: TANF subrecipients could be operating in noncompliance with federal regulations without timely detection and correction by DHS management. Recommendation: DHS should strengthen its controls to ensure during-the-award monitoring of TANF subrecipients includes procedures to ensure that subrecipients are in compliance with applicable federal regulations. This should include examining subrecipients’ financial records and ensuring that all required Single Audits were obtained by DHS subrecipients. Agency Response: DHS agrees with this finding. Questioned Costs: The amount of questioned costs cannot be determined.
Department of Human Services Finding 2023 ¬– 014: ALN 93.558 – Temporary Assistance for Needy Families (including COVID-19) Department of Human Services Did Not Validate Financial Information as Part of Its On-Site Monitoring of Temporary Assistance for Needy Families Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2022-008) Federal Grant Number(s) and Year(s): 2301PATANF (10/01/2022 – 9/30/2023), 2201PATANF (10/01/2021 – 9/30/2022), 2101PATANF (10/01/2020 – 9/30/2021), 2001PATANF (10/01/2019 – 9/30/2020), 1901PATANF (10/01/2018 – 9/30/2019), 1801PATANF (10/01/2017 – 9/30/2018), 1701PATANF (10/01/2016 – 9/30/2017) Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Compliance Requirement: Subrecipient Monitoring Condition: During the fiscal year ended June 30, 2023, the Department of Human Services (DHS) paid $82.4 million in Temporary Assistance for Needy Families (TANF) funding to subrecipients within the New Directions, Cash Grants, and Alternatives to Abortion appropriations (or 18.1 percent) out of total federal TANF expenditures of $455.7 million reported on the June 30, 2023 Schedule of Expenditures of Federal Awards. Our testing of DHS’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2023 disclosed that DHS performed on-site monitoring for 13 out of 14 subrecipients selected for testing. The on-site monitoring that was performed consisted of reviews of program operations including design, data entry accuracy and timeliness, case management analysis, and program payment performance goals. The on-site monitoring also included a review of a sample of TANF recipient case files to ensure that the recipients’ TANF activities were documented and accurately entered in the Commonwealth’s Workforce Development System. However, DHS’s monitoring procedures for the 13 subrecipients were not adequate as they did not include a review or monitoring of subrecipient financial records, which would provide an assessment of a subrecipient’s compliance with applicable federal regulations. Although DHS’s monitoring procedures include reviewing subrecipient completed questionnaires for selected subrecipients that had questions related to financial matters, DHS’s monitoring personnel did not review subrecipient financial records. For example, DHS did not perform procedures to ensure subrecipient invoices agreed to the books and records of the subrecipient and that the records were adequate to support the allowability of costs paid by DHS during the award period. In addition, DHS’s monitoring procedures did not include an evaluation of the operating effectiveness of DHS subrecipients’ procedures to monitor Single Audits and any related findings. Our testing of the 14 subrecipients noted above included follow up on one subrecipient identified in the prior year finding as not being on-site monitored by DHS when the risk assessment warranted on-site monitoring. Our follow-up during the current audit period disclosed that DHS did not conduct on-site monitoring for this subrecipient during the fiscal year ended June 30, 2023. Since the on-site monitoring was not completed, internal control weaknesses, noncompliance, and questioned costs may have existed and remained undetected during the current audit period. This subrecipient received $1 million of TANF funds during the fiscal year ended June 30, 2023. Criteria: 45 CFR Section 75.352, Requirements for pass-through entities, states: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. Finding 2023 –¬ 014: (continued) (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 75.521 [Management decision]. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: All pass-through entities must: (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing on-site reviews of the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS provided new during-the-award monitoring procedures to be used for the on-site monitoring of subrecipients, but these procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2023. Therefore, DHS has not implemented adequate during-the-award monitoring procedures of subrecipients to include testing of the financial records and the subrecipients’ monitoring of Single Audits sufficient to ensure compliance with federal regulations. Regarding the one subrecipient for which on-site monitoring was not completed, DHS personnel stated that they worked to obtain the necessary documentation to complete the on-site monitoring. However, the subrecipient had not cooperated. The grant agreement with the subrecipient expired on December 31, 2023 and the subrecipient has stopped all contact with DHS. Effect: TANF subrecipients could be operating in noncompliance with federal regulations without timely detection and correction by DHS management. Recommendation: DHS should strengthen its controls to ensure during-the-award monitoring of TANF subrecipients includes procedures to ensure that subrecipients are in compliance with applicable federal regulations. This should include examining subrecipients’ financial records and ensuring that all required Single Audits were obtained by DHS subrecipients. Agency Response: DHS agrees with this finding. Questioned Costs: The amount of questioned costs cannot be determined.
Reference Number: 2023-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Formula Grants for Rural Areas and Tribal Transit Program Assistance Listing Number: 20.509 Award Number and Year: VT2016-007-02 (9/23/2016 – 6/20/2023), VT-2017-007-01 (8/3/2017 – 6/21/2023), VT-2019-006-01 (9/20/2017 – 9/30/2022), VT-2020-005-00 (5/26/2020 – 9/30/2022), VT-2020-011-00 (9/9/2020 – 9/30/2023), VT-2020-012-00 (9/18/2020 – 9/30/2023), VT-2021-014-01 (9/20/2021 – 9/30/2023), VT-2022-001-02 (5/12/2022 – 6/30/2028) Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332, the following requirements are imposed on pass-through entities: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Vermont Agency of Transportation (VTrans) omitted required federal award information from subawards it issued in the program and did not adequately monitor subrecipients. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: Seven subawards were selected for testing and the following exceptions were noted: • For seven of seven subawards selected for testing, the FAIN and federal award date were not included on the subaward agreement. • For three of seven subawards selected for testing, the last on-site subrecipient monitoring visits were performed in FY 2020 and the next on-site monitoring is not scheduled to take place until FY 2024. Per the VTrans subrecipient monitoring plan, on-site monitoring must be performed no less than every three years. Cause: Procedures and internal controls were not sufficient to ensure that subawards included all required federal information. Although VTrans subsequently modified its subaward issuance process, controls in effect during the audit period were not sufficient to ensure that subawards included all required information. Procedures and internal controls were also not sufficient to ensure that timely on-site monitoring visits were performed in accordance with its monitoring plan. Effect: Excluding the required federal grant award information at the time of subaward issuance may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports. Failure to conduct adequate subrecipient monitoring may result in a failure of VTrans to detect that subawards were used for unauthorized purposes, were managed in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. There is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by VTrans personnel on a timely basis. Questioned costs: Undetermined. Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2023-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Formula Grants for Rural Areas and Tribal Transit Program Assistance Listing Number: 20.509 Award Number and Year: VT2016-007-02 (9/23/2016 – 6/20/2023), VT-2017-007-01 (8/3/2017 – 6/21/2023), VT-2019-006-01 (9/20/2017 – 9/30/2022), VT-2020-005-00 (5/26/2020 – 9/30/2022), VT-2020-011-00 (9/9/2020 – 9/30/2023), VT-2020-012-00 (9/18/2020 – 9/30/2023), VT-2021-014-01 (9/20/2021 – 9/30/2023), VT-2022-001-02 (5/12/2022 – 6/30/2028) Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332, the following requirements are imposed on pass-through entities: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Vermont Agency of Transportation (VTrans) omitted required federal award information from subawards it issued in the program and did not adequately monitor subrecipients. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: Seven subawards were selected for testing and the following exceptions were noted: • For seven of seven subawards selected for testing, the FAIN and federal award date were not included on the subaward agreement. • For three of seven subawards selected for testing, the last on-site subrecipient monitoring visits were performed in FY 2020 and the next on-site monitoring is not scheduled to take place until FY 2024. Per the VTrans subrecipient monitoring plan, on-site monitoring must be performed no less than every three years. Cause: Procedures and internal controls were not sufficient to ensure that subawards included all required federal information. Although VTrans subsequently modified its subaward issuance process, controls in effect during the audit period were not sufficient to ensure that subawards included all required information. Procedures and internal controls were also not sufficient to ensure that timely on-site monitoring visits were performed in accordance with its monitoring plan. Effect: Excluding the required federal grant award information at the time of subaward issuance may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports. Failure to conduct adequate subrecipient monitoring may result in a failure of VTrans to detect that subawards were used for unauthorized purposes, were managed in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. There is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by VTrans personnel on a timely basis. Questioned costs: Undetermined. Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 - 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: • For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. • Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) • For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. • For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient.
Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 - 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: • For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. • Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) • For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. • For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient.
Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 - 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: • For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. • Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) • For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. • For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient.
FINDING REFERENCE NUMBER 2023-061 FEDERAL PROGRAMS (ALN – 93.558) TEMPORARY ASSISTANCE FOR NEEDY FAMILIES (TANF) U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES AWARD NUMBERS 2022G996117; 2023996117 (Federal Award Years: 2022 through 2023) ADMINISTRATION ADMINISTRATION FOR SOCIOECONOMIC DEVELOPMENT OF THE FAMILY (ADSEF, BY ITS SPANISH ACRONYM) COMPLIANCE REQUIREMENT SUBRECIPIENT MONITORING TYPE OF FINDING MATERIAL NONCOMPLIANCE AND MATERIAL WEAKNESS CRITERIA In accordance with 2 CFR 200.332, a pass-through entity must: (a) Verify that the subrecipient is not excluded or disqualified in accordance with § 180.300. Verification methods are provided in § 180.300, which include confirming in SAM.gov that a potential subrecipient is not suspended, debarred, or otherwise excluded from receiving Federal funds. (b) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the information provided below. A pass-through entity must provide the best available information when some of the information below is unavailable. A pass-through entity must provide the unavailable information when it is obtained. Required information includes: (1) Federal award identification. (i) Subrecipient's name (must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated in the subaward; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity, including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414). (2) All requirements of the subaward, including requirements imposed by Federal statutes, regulations, and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient for the pass-through entity to meet its responsibilities under the Federal award. This includes information and certifications (see § 200.415) required for submitting financial and performance reports that the pass-through entity must provide to the Federal agency; … (5) A requirement that the subrecipient permit the pass-through entity and auditors to access the subrecipient's records and financial statements for the pass-through entity to fulfill its monitoring requirements; and (6) Appropriate terms and conditions concerning the closeout of the subaward. (c) Evaluate each subrecipient's fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient's risk, a pass-through entity should consider the following: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (d) If appropriate, consider implementing specific conditions in a subaward as described in § 200.208 and notify the Federal agency of the specific conditions. (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to cross-cutting audit findings in accordance with section § 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Depending upon the pass-through entity's assessment of the risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (g) Verify that a subrecipient is audited as required by subpart F of this part. (h) Consider whether the results of a subrecipient's audit, site visits, or other monitoring necessitate adjustments to the pass-through entity's records. (i) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 and in program regulations. STATEMENT OF CONDITION As part of our understanding of the program, program staff were interviewed regarding the existence of subrecipients. None of the staff interviewed identified any transactions involving subrecipients. However, in our testing of internal controls and compliance with the allowable costs/cost principles requirement, transactions were selected to assess compliance with this requirement. Upon receiving documentation from a contractor, we realized that the transactions with this supplier were in the capacity of a subrecipient. In addition, the SEFA submitted by the PRDF does not identify any transaction under a subrecipient related to this program. In the final draft of the SEFA submitted for audit procedures, ADSEF reported the amount of $2,411,184, which included all transactions related to preventive services. We examined four (4) vouchers related to these services; the contract, proposal and invoices do not indicate information related to subrecipients. QUESTIONED COSTS No questioned costs identified. PERSPECTIVE INFORMATION This is a systemic deficiency. The staff in charge of administering TANF funds were unaware of the factors required to properly identify subrecipient transactions. The total expenditure reflected in the database related to subrecipient activities totaled $686,052.17 for the audited fiscal year. After providing the requirements for a subrecipient, staff were interviewed again to verify whether other providers met the subrecipient requirements, but no other entities were identified. From our testing, we identified no other subrecipients. Although, in the final draft of the SEFA submitted for audit procedures, all expenditures related to preventive services were included as pass-through expenditures. STATEMENT OF CAUSE The staff in charge of administering the program were unaware of the factors that determine whether a contractor is a subrecipient or a contractor. ADSEF has not established an adequate procedures manual that demonstrates compliance with all requirements for subrecipient activities. POSSIBLE ASSERTED EFFECT ADSEF does not have internal controls related to the identification, management, and reporting of subrecipient activities. This situation prevents compliance with all compliance requirements related to subrecipient monitoring. This situation prevented the proper presentation of Federal expenditures incurred under this program in the SEFA or other financial reports required by Federal agencies. IDENTIFICATION OF REPEAT FINDING No reported as prior audit finding. RECOMMENDATIONS The PRDF must provide training to ADSEF personnel on the requirements and regulations related to subrecipient monitoring. We recommend that management establish internal controls and compliance measures that allow for the identification, reporting, and monitoring of subrecipient activities.
Federal Program Information Funding Agency: U.S. Department of Treasury Federal ALN: 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Pass Through Agency: Tennessee Arts Commission Criteria The Uniform Guidance contains cost principles which establish guidelines for allowable charges to federal grants. According to section 2 CFR 200.425, only audit services required by, and performed in accordance with, the Single Audit Act are allowed to be charged to federal grants. Condition Out of a sample of 25 charges to the grant that were tested, 1 of the charges was unallowed. The charge was determined to be unallowed as it was for the 2022 audit, the majority of which was not required by the Single Audit Act. Cause The Organization has only in recent years began to receive federal funding and therefore did not have a clear understanding of the cost principles contained in the Uniform Guidance. Effect Improper charges, in addition to those identified above, could be submitted to grantors for reimbursement. Questioned Costs $35,125 Auditor’s Recommendation TPAC should ensure that charges to federal grants are allowable in accordance with cost principles contained in Uniform Guidance. Additional training should be obtained to gain a further understanding of these requirements. Management Response Management agrees with finding. TPAC Grants contacted the pass-through agency to offer a solution, to replace the unallowable expense with an allowable expense. The Organization will also have TPAC Grants as well as TPAC Finance take training on Uniform Guidance to gain a better understanding NEW Dof these requirements in the future.
FINDING 2023-002 Subject: COVID-19 - Education Stabilization Fund - Subrecipient Monitoring Federal Agency: Department of Education Federal Program: COVID-19 - Education Stabilization Fund Assistance Listings Number: 84.425U Federal Award Number and Year (or Other Identifying Number): S425U210013 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Condition and Context The School Corporation had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties, that would likely be effective in preventing, or detecting and correcting, material noncompliance related to the COVID-19 - Education Stabilization Fund (ESF) funds passed through to subrecipients. The School Corporation received and passed through to subrecipients $420,500 of ESF funds. The School Corporation is to clearly identify the award and applicable requirements to the subrecipients, evaluate the risk of noncompliance related to the subrecipients to determine appropriate monitoring of the subaward, and monitor the activities of the subrecipients to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. The School Corporation did not enter into an agreement with the subrecipients. As such there is no agreement between the School Corporation and the subrecipients that clearly identifies the award as a subaward or includes all the required data elements. In addition, the School Corporation did not have any policies or procedures in place to evaluate the subrecipients' risk of noncompliance or to monitor the activity of the subrecipients. Per inquiry of the School Corporation, it was determined an evaluation of the risk of noncompliance for the subrecipients was not completed, nor did the subrecipients' files support any such evaluation. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.332 states: "All pass-through entities must: INDIANA STATE BOARD OF ACCOUNTS 18 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and include the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward notification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; INDIANA STATE BOARD OF ACCOUNTS 19 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports; (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the passthrough entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. . . . (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. INDIANA STATE BOARD OF ACCOUNTS 20 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on programrelated matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. INDIANA STATE BOARD OF ACCOUNTS 21 WEST LAFAYETTE COMMUNITY SCHOOL CORPORATION SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations." Cause A proper system of internal controls was not designed by management of the School Corporation. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the School Corporation's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. As a result, the School Corporation did not properly evaluate the subrecipients risk of noncompliance or adequately monitor the subrecipients. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the School Corporation. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the School Corporation establish a proper system of internal controls, including segregation of duties, to evaluate the subrecipients risk of noncompliance and adequately monitor the subrecipients. Additionally, policies and procedures should be implemented to ensure appropriate reviews, approvals, and oversight are taking place, as needed, to evaluate and monitor its subrecipients. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
Finding # 2023-003 Program: AL 20.509 – Formula Grants for Rural Areas and Tribal Transit Program – Allowability Grant Number & Year: NE-2022-019; September 9, 2022 Federal Grantor Agency: U.S. Department of Transportation Pass-Through Entity: Nebraska Department of Transportation Criteria: The U.S. Department of Transportation adopted the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards in Title 2 CFR § 1201.10 (January 1, 2023). Title 2 CFR § 200.403 (January 1, 2023) requires costs to be reasonable, necessary, and adequately documented. Title 2 CFR § 200.425(a) (January 1, 2023) states the following regarding the allowability of audit services: A reasonably proportionate share of the costs of audits required by, and performed in accordance with, the Single Audit Act Amendments of 1996 (31 U.S.C. 7501–7507), as implemented by requirements of this part, are allowable. A good internal control plan requires procedures to ensure that all methods used to allocate costs to a Federal grant are reasonable and adequately documented. Condition: Kimball County’s allocation of audit costs between Federal and non-Federal activities was not reasonable. Repeat Finding: No Questioned Costs: $11,716 known Statistical Sample: No Context: During the fiscal year ending June 30, 2023, Kimball County paid for both the fiscal year 2021 and 2022 audits, totaling $39,987. Of this amount, the County allocated $23,987 to AL #20.509. Per the Transit Administrator, all audit costs above $8,000 each year were allocated to AL #20.509 because, prior to requiring a Single audit each year, the County paid a different CPA $8,000 for the annual audit. This CPA did not perform Single Audits; therefore, the County contracted with the Nebraska Auditor of Public Accounts (APA). This allocation was not reasonable because much of the additional audit costs incurred for the audit conducted by the APA were clearly unrelated to Single Audit Act requirements. When sending the final invoice for the audit, the APA includes a detailed breakdown of how much of the total audit cost is attributable to each section of the audit. Based on that breakdown, we calculated a more reasonable allocation, as shown in table below. Based on this more reasonable allocation, we question costs of $11,716. Cause: Procedures were not adequate to ensure that methods used to allocate costs were reasonable. Effect: Increased risk for unallowable costs to be charged to Federal awards, leading to possible Federal sanctions. Recommendation: We recommend the County implement procedures to ensure that all methods used to allocate costs to Federal grants are reasonable and adequately documented. View of Officials: The main reason the costs to be allocated the way they were, was the county would not have switched vendors if the transit had not met the threshold requiring a vendor who could provide a Single Audit. KCTS does realize the decision was based on an inaccurate understanding of other county department’s cost allocations of federal dollars and the uniform code. Moving forward, we will work to research any additional factors that may need to be considered in the cost allocation.
Department of Environmental Protection Finding 2023 –¬ 010: ALN 15.252 – Abandoned Mine Land Reclamation A Material Weakness and Material Noncompliance Exist at the Department of Environmental Protection Related to Subrecipient Monitoring (A Similar Condition Was Noted in Prior Year Finding 2022-005) Federal Grant Number(s) and Year(s): S22AF00017 (1/01/2022 – 12/31/2024), S21AF10015 (1/01/2021 – 12/31/2023), S20AF20092 (10/01/2020 – 9/30/2023), S20AF20006 (1/01/2020 –¬ 12/31/2022), S19AF20004 (12/01/2018 – 11/30/2023), S18AF20004 (11/01/2017 – 10/31/2023) Type of Finding: Material Weakness in Internal Control over Compliance, Material Noncompliance Compliance Requirement: Subrecipient Monitoring Condition: The Department of Environmental Protection (DEP) administers the Abandoned Mine Land Reclamation (AMLR) program funded by the United States Department of the Interior (DOI). During the fiscal year ended June 30, 2023, DEP expended $60,055,889 within the AMLR program, of which $6,478,271 was paid to 16 subrecipient entities to provide abandoned mine land reclamation repairs and services throughout Pennsylvania. Up until the fiscal year ended June 30, 2022 timeframe, DEP considered these entities to be contractors and not subrecipients. However, once the entities were determined to be subrecipients, DEP began implementing procedures to ensure federal monitoring requirements were met to include on-site monitoring of subrecipient projects with signed Grant Manager monitoring report forms evidencing visit results. DEP also implemented subrecipient requirements of minimum quarterly Work Progress Reports and annual subrecipient Financial and Performance Reports. Our testing found these procedures were not implemented fully nor timely to ensure compliance throughout the fiscal year ended June 30, 2023. For a sample of six of the sixteen subrecipients, we reviewed relevant project correspondence and documentation to determine if DEP adequately monitored subrecipient projects and documented the results in accordance with procedures. Our testing found three of the six had sufficient documentation of on-site visits evidencing DEP oversight of the projects. However, only one included the subrecipient Work Progress Report and DEP manager signed monitoring report form; both required per DEP procedures. Due to the timing of procedure implementation, no subrecipient Financial and Performance Reports were submitted during the period. One of the six tested had project deficiencies. Sufficient evidence was available to show appropriate DEP follow-up and resolution. While Single Audits of the AMLR subrecipients may be conducted each year, this auditing activity does not compensate for during-the-award program monitoring, since the timing, focus, and scope of subrecipient auditing activities after year end are different than compliance monitoring to be performed by program officials during the year. Criteria: As part of administering the AMLR program, DEP must have policies, procedures, and controls in place to ensure compliance with federal requirements regarding pass-through entity monitoring of subrecipients. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. Finding 2023 –¬ 010: (continued) (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 [Management decision]. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. The standard contract agreement between DEP and the local grantee states, in part: Audit/Compliance Review Requirements - The contractor must comply with all applicable federal and state grant requirements including the Single Audit Act Amendments of 1996; 2 CFR Part 200 as amended; and any other applicable law or regulation, and any amendment to such other applicable law or regulation that may be enacted or promulgated by the federal government. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: Once the determination was made that the contracts with these entities represented subrecipient agreements, DEP began implementing control procedures to ensure federal requirements were met and adequately documented. However, due to the transition time needed for implementation, we found these procedures were not fully or consistently implemented during the audit period. Effect: Without sufficient subrecipient monitoring, DEP cannot ensure compliance with federal statutes, regulations, and the terms and conditions of the subrecipient agreements. In addition, DEP cannot confirm that subrecipients are performing satisfactory work, ensure the efficient use of program resources, and minimize the risk for fraud and abuse. Completing on-site monitoring activities consistently and as designed is essential for DEP to determine whether the subrecipients are complying with federal regulations and spending grant funds appropriately. Recommendation: We recommend DEP continue to implement their written procedures for performing during-the-award subrecipient monitoring to ensure timely subrecipient compliance with federal regulations. On-site monitoring visits by DEP Grant Managers should be supported by documentation to show the monitoring performed, areas examined, conclusions reached, and that the monitoring was performed in compliance with applicable regulations. Agency Response: DEP agrees with the facts presented in this finding. Questioned Costs: The amount of questioned costs cannot be determined.
Department of Human Services Finding 2023 ¬– 014: ALN 93.558 – Temporary Assistance for Needy Families (including COVID-19) Department of Human Services Did Not Validate Financial Information as Part of Its On-Site Monitoring of Temporary Assistance for Needy Families Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2022-008) Federal Grant Number(s) and Year(s): 2301PATANF (10/01/2022 – 9/30/2023), 2201PATANF (10/01/2021 – 9/30/2022), 2101PATANF (10/01/2020 – 9/30/2021), 2001PATANF (10/01/2019 – 9/30/2020), 1901PATANF (10/01/2018 – 9/30/2019), 1801PATANF (10/01/2017 – 9/30/2018), 1701PATANF (10/01/2016 – 9/30/2017) Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Compliance Requirement: Subrecipient Monitoring Condition: During the fiscal year ended June 30, 2023, the Department of Human Services (DHS) paid $82.4 million in Temporary Assistance for Needy Families (TANF) funding to subrecipients within the New Directions, Cash Grants, and Alternatives to Abortion appropriations (or 18.1 percent) out of total federal TANF expenditures of $455.7 million reported on the June 30, 2023 Schedule of Expenditures of Federal Awards. Our testing of DHS’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2023 disclosed that DHS performed on-site monitoring for 13 out of 14 subrecipients selected for testing. The on-site monitoring that was performed consisted of reviews of program operations including design, data entry accuracy and timeliness, case management analysis, and program payment performance goals. The on-site monitoring also included a review of a sample of TANF recipient case files to ensure that the recipients’ TANF activities were documented and accurately entered in the Commonwealth’s Workforce Development System. However, DHS’s monitoring procedures for the 13 subrecipients were not adequate as they did not include a review or monitoring of subrecipient financial records, which would provide an assessment of a subrecipient’s compliance with applicable federal regulations. Although DHS’s monitoring procedures include reviewing subrecipient completed questionnaires for selected subrecipients that had questions related to financial matters, DHS’s monitoring personnel did not review subrecipient financial records. For example, DHS did not perform procedures to ensure subrecipient invoices agreed to the books and records of the subrecipient and that the records were adequate to support the allowability of costs paid by DHS during the award period. In addition, DHS’s monitoring procedures did not include an evaluation of the operating effectiveness of DHS subrecipients’ procedures to monitor Single Audits and any related findings. Our testing of the 14 subrecipients noted above included follow up on one subrecipient identified in the prior year finding as not being on-site monitored by DHS when the risk assessment warranted on-site monitoring. Our follow-up during the current audit period disclosed that DHS did not conduct on-site monitoring for this subrecipient during the fiscal year ended June 30, 2023. Since the on-site monitoring was not completed, internal control weaknesses, noncompliance, and questioned costs may have existed and remained undetected during the current audit period. This subrecipient received $1 million of TANF funds during the fiscal year ended June 30, 2023. Criteria: 45 CFR Section 75.352, Requirements for pass-through entities, states: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. Finding 2023 –¬ 014: (continued) (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 75.521 [Management decision]. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: All pass-through entities must: (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing on-site reviews of the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS provided new during-the-award monitoring procedures to be used for the on-site monitoring of subrecipients, but these procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2023. Therefore, DHS has not implemented adequate during-the-award monitoring procedures of subrecipients to include testing of the financial records and the subrecipients’ monitoring of Single Audits sufficient to ensure compliance with federal regulations. Regarding the one subrecipient for which on-site monitoring was not completed, DHS personnel stated that they worked to obtain the necessary documentation to complete the on-site monitoring. However, the subrecipient had not cooperated. The grant agreement with the subrecipient expired on December 31, 2023 and the subrecipient has stopped all contact with DHS. Effect: TANF subrecipients could be operating in noncompliance with federal regulations without timely detection and correction by DHS management. Recommendation: DHS should strengthen its controls to ensure during-the-award monitoring of TANF subrecipients includes procedures to ensure that subrecipients are in compliance with applicable federal regulations. This should include examining subrecipients’ financial records and ensuring that all required Single Audits were obtained by DHS subrecipients. Agency Response: DHS agrees with this finding. Questioned Costs: The amount of questioned costs cannot be determined.
Department of Human Services Finding 2023 ¬– 014: ALN 93.558 – Temporary Assistance for Needy Families (including COVID-19) Department of Human Services Did Not Validate Financial Information as Part of Its On-Site Monitoring of Temporary Assistance for Needy Families Subrecipients (A Similar Condition Was Noted in Prior Year Finding 2022-008) Federal Grant Number(s) and Year(s): 2301PATANF (10/01/2022 – 9/30/2023), 2201PATANF (10/01/2021 – 9/30/2022), 2101PATANF (10/01/2020 – 9/30/2021), 2001PATANF (10/01/2019 – 9/30/2020), 1901PATANF (10/01/2018 – 9/30/2019), 1801PATANF (10/01/2017 – 9/30/2018), 1701PATANF (10/01/2016 – 9/30/2017) Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Compliance Requirement: Subrecipient Monitoring Condition: During the fiscal year ended June 30, 2023, the Department of Human Services (DHS) paid $82.4 million in Temporary Assistance for Needy Families (TANF) funding to subrecipients within the New Directions, Cash Grants, and Alternatives to Abortion appropriations (or 18.1 percent) out of total federal TANF expenditures of $455.7 million reported on the June 30, 2023 Schedule of Expenditures of Federal Awards. Our testing of DHS’s during-the-award monitoring of subrecipients for the fiscal year ended June 30, 2023 disclosed that DHS performed on-site monitoring for 13 out of 14 subrecipients selected for testing. The on-site monitoring that was performed consisted of reviews of program operations including design, data entry accuracy and timeliness, case management analysis, and program payment performance goals. The on-site monitoring also included a review of a sample of TANF recipient case files to ensure that the recipients’ TANF activities were documented and accurately entered in the Commonwealth’s Workforce Development System. However, DHS’s monitoring procedures for the 13 subrecipients were not adequate as they did not include a review or monitoring of subrecipient financial records, which would provide an assessment of a subrecipient’s compliance with applicable federal regulations. Although DHS’s monitoring procedures include reviewing subrecipient completed questionnaires for selected subrecipients that had questions related to financial matters, DHS’s monitoring personnel did not review subrecipient financial records. For example, DHS did not perform procedures to ensure subrecipient invoices agreed to the books and records of the subrecipient and that the records were adequate to support the allowability of costs paid by DHS during the award period. In addition, DHS’s monitoring procedures did not include an evaluation of the operating effectiveness of DHS subrecipients’ procedures to monitor Single Audits and any related findings. Our testing of the 14 subrecipients noted above included follow up on one subrecipient identified in the prior year finding as not being on-site monitored by DHS when the risk assessment warranted on-site monitoring. Our follow-up during the current audit period disclosed that DHS did not conduct on-site monitoring for this subrecipient during the fiscal year ended June 30, 2023. Since the on-site monitoring was not completed, internal control weaknesses, noncompliance, and questioned costs may have existed and remained undetected during the current audit period. This subrecipient received $1 million of TANF funds during the fiscal year ended June 30, 2023. Criteria: 45 CFR Section 75.352, Requirements for pass-through entities, states: All pass-through entities must: (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. Finding 2023 –¬ 014: (continued) (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 75.521 [Management decision]. 2 CFR Section 200.332, Requirements for pass-through entities, states in part: All pass-through entities must: (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing on-site reviews of the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in §200.425 [Audit services]. Management Directive 325.12, Amended – Standards for Enterprise Risk Management in Commonwealth Agencies, adopted the internal control framework outlined in the United States Government Accountability Office’s Standards for Internal Control in the Federal Government (Green Book). The Green Book states in part: Management should establish and operate monitoring activities to monitor the internal control system and evaluate the results. Management should remediate identified internal control deficiencies on a timely basis. Cause: DHS provided new during-the-award monitoring procedures to be used for the on-site monitoring of subrecipients, but these procedures were not in place for monitoring conducted during the fiscal year ended June 30, 2023. Therefore, DHS has not implemented adequate during-the-award monitoring procedures of subrecipients to include testing of the financial records and the subrecipients’ monitoring of Single Audits sufficient to ensure compliance with federal regulations. Regarding the one subrecipient for which on-site monitoring was not completed, DHS personnel stated that they worked to obtain the necessary documentation to complete the on-site monitoring. However, the subrecipient had not cooperated. The grant agreement with the subrecipient expired on December 31, 2023 and the subrecipient has stopped all contact with DHS. Effect: TANF subrecipients could be operating in noncompliance with federal regulations without timely detection and correction by DHS management. Recommendation: DHS should strengthen its controls to ensure during-the-award monitoring of TANF subrecipients includes procedures to ensure that subrecipients are in compliance with applicable federal regulations. This should include examining subrecipients’ financial records and ensuring that all required Single Audits were obtained by DHS subrecipients. Agency Response: DHS agrees with this finding. Questioned Costs: The amount of questioned costs cannot be determined.
Reference Number: 2023-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Formula Grants for Rural Areas and Tribal Transit Program Assistance Listing Number: 20.509 Award Number and Year: VT2016-007-02 (9/23/2016 – 6/20/2023), VT-2017-007-01 (8/3/2017 – 6/21/2023), VT-2019-006-01 (9/20/2017 – 9/30/2022), VT-2020-005-00 (5/26/2020 – 9/30/2022), VT-2020-011-00 (9/9/2020 – 9/30/2023), VT-2020-012-00 (9/18/2020 – 9/30/2023), VT-2021-014-01 (9/20/2021 – 9/30/2023), VT-2022-001-02 (5/12/2022 – 6/30/2028) Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332, the following requirements are imposed on pass-through entities: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Vermont Agency of Transportation (VTrans) omitted required federal award information from subawards it issued in the program and did not adequately monitor subrecipients. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: Seven subawards were selected for testing and the following exceptions were noted: • For seven of seven subawards selected for testing, the FAIN and federal award date were not included on the subaward agreement. • For three of seven subawards selected for testing, the last on-site subrecipient monitoring visits were performed in FY 2020 and the next on-site monitoring is not scheduled to take place until FY 2024. Per the VTrans subrecipient monitoring plan, on-site monitoring must be performed no less than every three years. Cause: Procedures and internal controls were not sufficient to ensure that subawards included all required federal information. Although VTrans subsequently modified its subaward issuance process, controls in effect during the audit period were not sufficient to ensure that subawards included all required information. Procedures and internal controls were also not sufficient to ensure that timely on-site monitoring visits were performed in accordance with its monitoring plan. Effect: Excluding the required federal grant award information at the time of subaward issuance may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports. Failure to conduct adequate subrecipient monitoring may result in a failure of VTrans to detect that subawards were used for unauthorized purposes, were managed in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. There is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by VTrans personnel on a timely basis. Questioned costs: Undetermined. Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2023-011 Prior Year Finding: No Federal Agency: U.S. Department of Transportation State Agency: Agency of Transportation Federal Program: Formula Grants for Rural Areas and Tribal Transit Program Assistance Listing Number: 20.509 Award Number and Year: VT2016-007-02 (9/23/2016 – 6/20/2023), VT-2017-007-01 (8/3/2017 – 6/21/2023), VT-2019-006-01 (9/20/2017 – 9/30/2022), VT-2020-005-00 (5/26/2020 – 9/30/2022), VT-2020-011-00 (9/9/2020 – 9/30/2023), VT-2020-012-00 (9/18/2020 – 9/30/2023), VT-2021-014-01 (9/20/2021 – 9/30/2023), VT-2022-001-02 (5/12/2022 – 6/30/2028) Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Criteria or specific requirement: Compliance – Per 2 CFR section 200.332, the following requirements are imposed on pass-through entities: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. Control – Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The Vermont Agency of Transportation (VTrans) omitted required federal award information from subawards it issued in the program and did not adequately monitor subrecipients. Section III – Findings and Questioned Costs – Major Federal Programs (Continued) Context: Seven subawards were selected for testing and the following exceptions were noted: • For seven of seven subawards selected for testing, the FAIN and federal award date were not included on the subaward agreement. • For three of seven subawards selected for testing, the last on-site subrecipient monitoring visits were performed in FY 2020 and the next on-site monitoring is not scheduled to take place until FY 2024. Per the VTrans subrecipient monitoring plan, on-site monitoring must be performed no less than every three years. Cause: Procedures and internal controls were not sufficient to ensure that subawards included all required federal information. Although VTrans subsequently modified its subaward issuance process, controls in effect during the audit period were not sufficient to ensure that subawards included all required information. Procedures and internal controls were also not sufficient to ensure that timely on-site monitoring visits were performed in accordance with its monitoring plan. Effect: Excluding the required federal grant award information at the time of subaward issuance may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports. Failure to conduct adequate subrecipient monitoring may result in a failure of VTrans to detect that subawards were used for unauthorized purposes, were managed in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. There is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by VTrans personnel on a timely basis. Questioned costs: Undetermined. Recommendation: VTrans should review and enhance internal controls and procedures to ensure that all required federal award information is included in subawards and that on-site subrecipient monitoring is conducted timely per the terms of its subrecipient monitoring plan. Views of responsible officials: Management agrees with the finding.
Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 - 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: • For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. • Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) • For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. • For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient.
Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 - 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: • For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. • Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) • For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. • For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient.
Reference Number: 2023-003 Prior Year Finding: No Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: ARP17SL1 (5/23/2021 - 12/31/2026) Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control Over Compliance, Material Noncompliance (Modified Opinion) Criteria or specific requirement: Compliance: 2 CFR §200.332 - Requirements for Pass-Through Entities states, in part, that all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: i. Subrecipient name (which must match the name associated with its unique entity identifier); ii. Subrecipient's unique entity identifier; iii. Federal Award Identification Number (FAIN); iv. Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; v. Subaward Period of Performance Start and End Date; vi. Subaward Budget Period Start and End Date; vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation; ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; xiii. Identification of whether the award is R&D; and xiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters. (2) Performing on-site reviews of the subrecipient's program operations. (3) Arranging for agreed-upon-procedures engagements as described in § 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Control: Per 2 CFR Section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should comply with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: Prince George’s County (the County) was unable to provide support that subawards it issued contained all required federal information nor that it properly monitored its subrecipients. Context: Five subrecipients were selected for testing, and the following exceptions were noted: • For one of five subrecipients, the County did not have a subaward agreement in place with the subrecipient. As such, all required information was not furnished to the subrecipient. • Five of five subaward agreements were missing the following required information: o Federal Award Identification Number (FAIN) • For two of five subrecipients, the County was unable to provide support that it conducted during the award monitoring. • For one of five subrecipients, the County was unable to provide support that it had verified that the subrecipients were audited as required by Subpart F. Questioned costs: Undetermined. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance. Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved. Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis. Recommendation: The County should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed. Views of responsible officials: The Office of Community Relations (OCR) is reviewing and working to enhance internal controls and procedures to ensure all required information is included in the subaward, that proper subrecipient monitoring is conducted, and the evaluation of independent audits are performed. OCR is working with the subrecipient to gather payroll receipts and proof of the disbursement of funds to grantees selected through the RFPs managed by the subrecipient.
FINDING REFERENCE NUMBER 2023-061 FEDERAL PROGRAMS (ALN – 93.558) TEMPORARY ASSISTANCE FOR NEEDY FAMILIES (TANF) U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES AWARD NUMBERS 2022G996117; 2023996117 (Federal Award Years: 2022 through 2023) ADMINISTRATION ADMINISTRATION FOR SOCIOECONOMIC DEVELOPMENT OF THE FAMILY (ADSEF, BY ITS SPANISH ACRONYM) COMPLIANCE REQUIREMENT SUBRECIPIENT MONITORING TYPE OF FINDING MATERIAL NONCOMPLIANCE AND MATERIAL WEAKNESS CRITERIA In accordance with 2 CFR 200.332, a pass-through entity must: (a) Verify that the subrecipient is not excluded or disqualified in accordance with § 180.300. Verification methods are provided in § 180.300, which include confirming in SAM.gov that a potential subrecipient is not suspended, debarred, or otherwise excluded from receiving Federal funds. (b) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the information provided below. A pass-through entity must provide the best available information when some of the information below is unavailable. A pass-through entity must provide the unavailable information when it is obtained. Required information includes: (1) Federal award identification. (i) Subrecipient's name (must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated in the subaward; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity, including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414). (2) All requirements of the subaward, including requirements imposed by Federal statutes, regulations, and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient for the pass-through entity to meet its responsibilities under the Federal award. This includes information and certifications (see § 200.415) required for submitting financial and performance reports that the pass-through entity must provide to the Federal agency; … (5) A requirement that the subrecipient permit the pass-through entity and auditors to access the subrecipient's records and financial statements for the pass-through entity to fulfill its monitoring requirements; and (6) Appropriate terms and conditions concerning the closeout of the subaward. (c) Evaluate each subrecipient's fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient's risk, a pass-through entity should consider the following: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (d) If appropriate, consider implementing specific conditions in a subaward as described in § 200.208 and notify the Federal agency of the specific conditions. (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to cross-cutting audit findings in accordance with section § 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Depending upon the pass-through entity's assessment of the risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (g) Verify that a subrecipient is audited as required by subpart F of this part. (h) Consider whether the results of a subrecipient's audit, site visits, or other monitoring necessitate adjustments to the pass-through entity's records. (i) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 and in program regulations. STATEMENT OF CONDITION As part of our understanding of the program, program staff were interviewed regarding the existence of subrecipients. None of the staff interviewed identified any transactions involving subrecipients. However, in our testing of internal controls and compliance with the allowable costs/cost principles requirement, transactions were selected to assess compliance with this requirement. Upon receiving documentation from a contractor, we realized that the transactions with this supplier were in the capacity of a subrecipient. In addition, the SEFA submitted by the PRDF does not identify any transaction under a subrecipient related to this program. In the final draft of the SEFA submitted for audit procedures, ADSEF reported the amount of $2,411,184, which included all transactions related to preventive services. We examined four (4) vouchers related to these services; the contract, proposal and invoices do not indicate information related to subrecipients. QUESTIONED COSTS No questioned costs identified. PERSPECTIVE INFORMATION This is a systemic deficiency. The staff in charge of administering TANF funds were unaware of the factors required to properly identify subrecipient transactions. The total expenditure reflected in the database related to subrecipient activities totaled $686,052.17 for the audited fiscal year. After providing the requirements for a subrecipient, staff were interviewed again to verify whether other providers met the subrecipient requirements, but no other entities were identified. From our testing, we identified no other subrecipients. Although, in the final draft of the SEFA submitted for audit procedures, all expenditures related to preventive services were included as pass-through expenditures. STATEMENT OF CAUSE The staff in charge of administering the program were unaware of the factors that determine whether a contractor is a subrecipient or a contractor. ADSEF has not established an adequate procedures manual that demonstrates compliance with all requirements for subrecipient activities. POSSIBLE ASSERTED EFFECT ADSEF does not have internal controls related to the identification, management, and reporting of subrecipient activities. This situation prevents compliance with all compliance requirements related to subrecipient monitoring. This situation prevented the proper presentation of Federal expenditures incurred under this program in the SEFA or other financial reports required by Federal agencies. IDENTIFICATION OF REPEAT FINDING No reported as prior audit finding. RECOMMENDATIONS The PRDF must provide training to ADSEF personnel on the requirements and regulations related to subrecipient monitoring. We recommend that management establish internal controls and compliance measures that allow for the identification, reporting, and monitoring of subrecipient activities.
FINDING NO: 2023-098 STATE AGENCY: State of Oklahoma and Office of Management and Enterprise Services (OMES) FEDERAL AGENCY: US Department of the Treasury ALN: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund (CRF) FEDERAL AWARD NUMBER: N/A FEDERAL AWARD YEAR: 2023 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting QUESTIONED COSTS: $157,186 Criteria: 2 CFR §200.1 defines Financial obligations as “orders placed for property and services, contracts and subawards made, and similar transactions that require payment by a recipient or subrecipient under a Federal award that will result in expenditures by a recipient or subrecipient under a Federal award.” 2 CFR §200.303 - Internal controls provides that the Non-Federal entity must: “Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “for a cost to be considered to have been incurred, performance or delivery must occur during the covered period, but payment of funds need not be made during that time.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “As previously stated in FAQ B.11, recipients are permitted to use payments from the Fund to cover the expenses of an audit conducted under the Single Audit Act, subject to the limitations set forth in 2 CFR 200.425. Pursuant to that provision of the Uniform Guidance, recipients and subrecipients subject to the Single Audit Act may use payments from the Fund to cover a reasonably proportionate share of the costs of audits attributable to the Fund. To the extent a cost is incurred by December 31, 2021, for an eligible use consistent with section 601 of the Social Security Act and Treasury's guidance, a necessary administrative compliance expense that relates to such underlying cost may be incurred after December 31, 2021. Such an expense would include, for example, expenses incurred to comply with the Single Audit Act and reporting and recordkeeping requirements imposed by the Office of Inspector General. A recipient with such necessary administrative expenses, such as an ongoing audit continuing past December 31, 2021, that relates to Fund expenditures incurred during the covered period, must report to the Treasury Office of Inspector General by the quarter ending September 2022 an estimate of the amount of such necessary administrative expenses. Revision to Guidance Regarding When a Cost is Considered Incurred December 14, 2021, states in part, “The CARES Act provides that payments from the Fund may only be used to cover costs that were incurred during the period that begins on March 1, 2020, and ends on December 31, 2021 (the “covered period”). A cost associated with a necessary expenditure incurred due to the public health emergency is considered to have been incurred by December 31, 2021, if the recipient has incurred an obligation with respect to such cost by December 31, 2021. Treasury defines obligation for this purpose as an order placed for property and services and entry into contracts, subawards, and similar transactions that require payment. Recipients are required to expend their funds received from the CRF to cover these obligations by September 30, 2022.” Condition and Context: The State of Oklahoma recorded $867,541.99 in final administrative closeout costs per 2023 Schedule of Expenditures of Federal Awards (SEFA), since this was the last year of the grant. The expenses were shown as cash basis expenditures. However, these costs were not paid by 6/30/2023, and therefore should have been recorded as an Accounts Payable expense. Finally, only $652,141.40 has been paid out to date for final administrative closeout costs. These expenses were a result of the interest revenue earned over the entirety of CRF grant. Upon review of the final closeout administrative costs totaling $652,141.40 the State of Oklahoma CARES FORWARD3 team expended related to the CRF grant in SFY 2023, we noted: training costs of $7,871.54 that had already been recorded as a CRF expenditure in a prior period a payment of $116,402.36 for software license was made on 4/10/2023, which was outside of the liquidation period of the grant, was not an administrative closeout expenditure; therefore, it was not a necessary or allowable expenditure due to the public health emergency two payments to the State Auditor and Inspector’s Office totaling $32,912.50 related to the SFY 2023 Annual Comprehensive Financial Report (ACFR), and therefore not incurred for necessary and allowable expenditures due to the public health emergency for CRF program. Cause: OMES did not have proper controls in place over their SEFA to ensure costs were reported on the correct basis of accounting. CARES FORWARD failed to perform an adequate review of transactions at the time of reimbursement to ensure the costs were for necessary administrative closeout expenses that were also allowable COVID-19 expenditures due to the public health emergency. Effect: CARES FORWARD reimbursed unallowable CRF costs totaling $157,186.40. Also, the final administrative closeout costs per OMES’s SEFA were reported on the wrong basis of accounting. Recommendation: We recommend CARES FORWARD strengthen its review process to ensure all relevant supporting documentation is present to support allowability of the administrative closeout expenditures, and to prevent potential recoupment by the Department of the Treasury. In addition, we recommend the State of Oklahoma strengthen its review process over SEFA to ensure expenditures are recorded under the correct basis of accounting. Views of Responsible Official(s) Contact Person: Brandy Manek Anticipated Completion Date: September 2022 Corrective Action Planned: The State of Oklahoma/Office of Management and Enterprise Services agrees with this finding. See corrective action plan located in the corrective action plan section of the report.
FINDING NO: 2023-098 STATE AGENCY: State of Oklahoma and Office of Management and Enterprise Services (OMES) FEDERAL AGENCY: US Department of the Treasury ALN: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund (CRF) FEDERAL AWARD NUMBER: N/A FEDERAL AWARD YEAR: 2023 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting QUESTIONED COSTS: $157,186 Criteria: 2 CFR §200.1 defines Financial obligations as “orders placed for property and services, contracts and subawards made, and similar transactions that require payment by a recipient or subrecipient under a Federal award that will result in expenditures by a recipient or subrecipient under a Federal award.” 2 CFR §200.303 - Internal controls provides that the Non-Federal entity must: “Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “for a cost to be considered to have been incurred, performance or delivery must occur during the covered period, but payment of funds need not be made during that time.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “As previously stated in FAQ B.11, recipients are permitted to use payments from the Fund to cover the expenses of an audit conducted under the Single Audit Act, subject to the limitations set forth in 2 CFR 200.425. Pursuant to that provision of the Uniform Guidance, recipients and subrecipients subject to the Single Audit Act may use payments from the Fund to cover a reasonably proportionate share of the costs of audits attributable to the Fund. To the extent a cost is incurred by December 31, 2021, for an eligible use consistent with section 601 of the Social Security Act and Treasury's guidance, a necessary administrative compliance expense that relates to such underlying cost may be incurred after December 31, 2021. Such an expense would include, for example, expenses incurred to comply with the Single Audit Act and reporting and recordkeeping requirements imposed by the Office of Inspector General. A recipient with such necessary administrative expenses, such as an ongoing audit continuing past December 31, 2021, that relates to Fund expenditures incurred during the covered period, must report to the Treasury Office of Inspector General by the quarter ending September 2022 an estimate of the amount of such necessary administrative expenses. Revision to Guidance Regarding When a Cost is Considered Incurred December 14, 2021, states in part, “The CARES Act provides that payments from the Fund may only be used to cover costs that were incurred during the period that begins on March 1, 2020, and ends on December 31, 2021 (the “covered period”). A cost associated with a necessary expenditure incurred due to the public health emergency is considered to have been incurred by December 31, 2021, if the recipient has incurred an obligation with respect to such cost by December 31, 2021. Treasury defines obligation for this purpose as an order placed for property and services and entry into contracts, subawards, and similar transactions that require payment. Recipients are required to expend their funds received from the CRF to cover these obligations by September 30, 2022.” Condition and Context: The State of Oklahoma recorded $867,541.99 in final administrative closeout costs per 2023 Schedule of Expenditures of Federal Awards (SEFA), since this was the last year of the grant. The expenses were shown as cash basis expenditures. However, these costs were not paid by 6/30/2023, and therefore should have been recorded as an Accounts Payable expense. Finally, only $652,141.40 has been paid out to date for final administrative closeout costs. These expenses were a result of the interest revenue earned over the entirety of CRF grant. Upon review of the final closeout administrative costs totaling $652,141.40 the State of Oklahoma CARES FORWARD3 team expended related to the CRF grant in SFY 2023, we noted: training costs of $7,871.54 that had already been recorded as a CRF expenditure in a prior period a payment of $116,402.36 for software license was made on 4/10/2023, which was outside of the liquidation period of the grant, was not an administrative closeout expenditure; therefore, it was not a necessary or allowable expenditure due to the public health emergency two payments to the State Auditor and Inspector’s Office totaling $32,912.50 related to the SFY 2023 Annual Comprehensive Financial Report (ACFR), and therefore not incurred for necessary and allowable expenditures due to the public health emergency for CRF program. Cause: OMES did not have proper controls in place over their SEFA to ensure costs were reported on the correct basis of accounting. CARES FORWARD failed to perform an adequate review of transactions at the time of reimbursement to ensure the costs were for necessary administrative closeout expenses that were also allowable COVID-19 expenditures due to the public health emergency. Effect: CARES FORWARD reimbursed unallowable CRF costs totaling $157,186.40. Also, the final administrative closeout costs per OMES’s SEFA were reported on the wrong basis of accounting. Recommendation: We recommend CARES FORWARD strengthen its review process to ensure all relevant supporting documentation is present to support allowability of the administrative closeout expenditures, and to prevent potential recoupment by the Department of the Treasury. In addition, we recommend the State of Oklahoma strengthen its review process over SEFA to ensure expenditures are recorded under the correct basis of accounting. Views of Responsible Official(s) Contact Person: Brandy Manek Anticipated Completion Date: September 2022 Corrective Action Planned: The State of Oklahoma/Office of Management and Enterprise Services agrees with this finding. See corrective action plan located in the corrective action plan section of the report.
FINDING NO: 2023-098 STATE AGENCY: State of Oklahoma and Office of Management and Enterprise Services (OMES) FEDERAL AGENCY: US Department of the Treasury ALN: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund (CRF) FEDERAL AWARD NUMBER: N/A FEDERAL AWARD YEAR: 2023 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting QUESTIONED COSTS: $157,186 Criteria: 2 CFR §200.1 defines Financial obligations as “orders placed for property and services, contracts and subawards made, and similar transactions that require payment by a recipient or subrecipient under a Federal award that will result in expenditures by a recipient or subrecipient under a Federal award.” 2 CFR §200.303 - Internal controls provides that the Non-Federal entity must: “Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “for a cost to be considered to have been incurred, performance or delivery must occur during the covered period, but payment of funds need not be made during that time.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “As previously stated in FAQ B.11, recipients are permitted to use payments from the Fund to cover the expenses of an audit conducted under the Single Audit Act, subject to the limitations set forth in 2 CFR 200.425. Pursuant to that provision of the Uniform Guidance, recipients and subrecipients subject to the Single Audit Act may use payments from the Fund to cover a reasonably proportionate share of the costs of audits attributable to the Fund. To the extent a cost is incurred by December 31, 2021, for an eligible use consistent with section 601 of the Social Security Act and Treasury's guidance, a necessary administrative compliance expense that relates to such underlying cost may be incurred after December 31, 2021. Such an expense would include, for example, expenses incurred to comply with the Single Audit Act and reporting and recordkeeping requirements imposed by the Office of Inspector General. A recipient with such necessary administrative expenses, such as an ongoing audit continuing past December 31, 2021, that relates to Fund expenditures incurred during the covered period, must report to the Treasury Office of Inspector General by the quarter ending September 2022 an estimate of the amount of such necessary administrative expenses. Revision to Guidance Regarding When a Cost is Considered Incurred December 14, 2021, states in part, “The CARES Act provides that payments from the Fund may only be used to cover costs that were incurred during the period that begins on March 1, 2020, and ends on December 31, 2021 (the “covered period”). A cost associated with a necessary expenditure incurred due to the public health emergency is considered to have been incurred by December 31, 2021, if the recipient has incurred an obligation with respect to such cost by December 31, 2021. Treasury defines obligation for this purpose as an order placed for property and services and entry into contracts, subawards, and similar transactions that require payment. Recipients are required to expend their funds received from the CRF to cover these obligations by September 30, 2022.” Condition and Context: The State of Oklahoma recorded $867,541.99 in final administrative closeout costs per 2023 Schedule of Expenditures of Federal Awards (SEFA), since this was the last year of the grant. The expenses were shown as cash basis expenditures. However, these costs were not paid by 6/30/2023, and therefore should have been recorded as an Accounts Payable expense. Finally, only $652,141.40 has been paid out to date for final administrative closeout costs. These expenses were a result of the interest revenue earned over the entirety of CRF grant. Upon review of the final closeout administrative costs totaling $652,141.40 the State of Oklahoma CARES FORWARD3 team expended related to the CRF grant in SFY 2023, we noted: training costs of $7,871.54 that had already been recorded as a CRF expenditure in a prior period a payment of $116,402.36 for software license was made on 4/10/2023, which was outside of the liquidation period of the grant, was not an administrative closeout expenditure; therefore, it was not a necessary or allowable expenditure due to the public health emergency two payments to the State Auditor and Inspector’s Office totaling $32,912.50 related to the SFY 2023 Annual Comprehensive Financial Report (ACFR), and therefore not incurred for necessary and allowable expenditures due to the public health emergency for CRF program. Cause: OMES did not have proper controls in place over their SEFA to ensure costs were reported on the correct basis of accounting. CARES FORWARD failed to perform an adequate review of transactions at the time of reimbursement to ensure the costs were for necessary administrative closeout expenses that were also allowable COVID-19 expenditures due to the public health emergency. Effect: CARES FORWARD reimbursed unallowable CRF costs totaling $157,186.40. Also, the final administrative closeout costs per OMES’s SEFA were reported on the wrong basis of accounting. Recommendation: We recommend CARES FORWARD strengthen its review process to ensure all relevant supporting documentation is present to support allowability of the administrative closeout expenditures, and to prevent potential recoupment by the Department of the Treasury. In addition, we recommend the State of Oklahoma strengthen its review process over SEFA to ensure expenditures are recorded under the correct basis of accounting. Views of Responsible Official(s) Contact Person: Brandy Manek Anticipated Completion Date: September 2022 Corrective Action Planned: The State of Oklahoma/Office of Management and Enterprise Services agrees with this finding. See corrective action plan located in the corrective action plan section of the report.
FINDING NO: 2023-098 STATE AGENCY: State of Oklahoma and Office of Management and Enterprise Services (OMES) FEDERAL AGENCY: US Department of the Treasury ALN: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund (CRF) FEDERAL AWARD NUMBER: N/A FEDERAL AWARD YEAR: 2023 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting QUESTIONED COSTS: $157,186 Criteria: 2 CFR §200.1 defines Financial obligations as “orders placed for property and services, contracts and subawards made, and similar transactions that require payment by a recipient or subrecipient under a Federal award that will result in expenditures by a recipient or subrecipient under a Federal award.” 2 CFR §200.303 - Internal controls provides that the Non-Federal entity must: “Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “for a cost to be considered to have been incurred, performance or delivery must occur during the covered period, but payment of funds need not be made during that time.” Treasury Federal Register, Vol. 86, No. 10 also states in part, “As previously stated in FAQ B.11, recipients are permitted to use payments from the Fund to cover the expenses of an audit conducted under the Single Audit Act, subject to the limitations set forth in 2 CFR 200.425. Pursuant to that provision of the Uniform Guidance, recipients and subrecipients subject to the Single Audit Act may use payments from the Fund to cover a reasonably proportionate share of the costs of audits attributable to the Fund. To the extent a cost is incurred by December 31, 2021, for an eligible use consistent with section 601 of the Social Security Act and Treasury's guidance, a necessary administrative compliance expense that relates to such underlying cost may be incurred after December 31, 2021. Such an expense would include, for example, expenses incurred to comply with the Single Audit Act and reporting and recordkeeping requirements imposed by the Office of Inspector General. A recipient with such necessary administrative expenses, such as an ongoing audit continuing past December 31, 2021, that relates to Fund expenditures incurred during the covered period, must report to the Treasury Office of Inspector General by the quarter ending September 2022 an estimate of the amount of such necessary administrative expenses. Revision to Guidance Regarding When a Cost is Considered Incurred December 14, 2021, states in part, “The CARES Act provides that payments from the Fund may only be used to cover costs that were incurred during the period that begins on March 1, 2020, and ends on December 31, 2021 (the “covered period”). A cost associated with a necessary expenditure incurred due to the public health emergency is considered to have been incurred by December 31, 2021, if the recipient has incurred an obligation with respect to such cost by December 31, 2021. Treasury defines obligation for this purpose as an order placed for property and services and entry into contracts, subawards, and similar transactions that require payment. Recipients are required to expend their funds received from the CRF to cover these obligations by September 30, 2022.” Condition and Context: The State of Oklahoma recorded $867,541.99 in final administrative closeout costs per 2023 Schedule of Expenditures of Federal Awards (SEFA), since this was the last year of the grant. The expenses were shown as cash basis expenditures. However, these costs were not paid by 6/30/2023, and therefore should have been recorded as an Accounts Payable expense. Finally, only $652,141.40 has been paid out to date for final administrative closeout costs. These expenses were a result of the interest revenue earned over the entirety of CRF grant. Upon review of the final closeout administrative costs totaling $652,141.40 the State of Oklahoma CARES FORWARD3 team expended related to the CRF grant in SFY 2023, we noted: training costs of $7,871.54 that had already been recorded as a CRF expenditure in a prior period a payment of $116,402.36 for software license was made on 4/10/2023, which was outside of the liquidation period of the grant, was not an administrative closeout expenditure; therefore, it was not a necessary or allowable expenditure due to the public health emergency two payments to the State Auditor and Inspector’s Office totaling $32,912.50 related to the SFY 2023 Annual Comprehensive Financial Report (ACFR), and therefore not incurred for necessary and allowable expenditures due to the public health emergency for CRF program. Cause: OMES did not have proper controls in place over their SEFA to ensure costs were reported on the correct basis of accounting. CARES FORWARD failed to perform an adequate review of transactions at the time of reimbursement to ensure the costs were for necessary administrative closeout expenses that were also allowable COVID-19 expenditures due to the public health emergency. Effect: CARES FORWARD reimbursed unallowable CRF costs totaling $157,186.40. Also, the final administrative closeout costs per OMES’s SEFA were reported on the wrong basis of accounting. Recommendation: We recommend CARES FORWARD strengthen its review process to ensure all relevant supporting documentation is present to support allowability of the administrative closeout expenditures, and to prevent potential recoupment by the Department of the Treasury. In addition, we recommend the State of Oklahoma strengthen its review process over SEFA to ensure expenditures are recorded under the correct basis of accounting. Views of Responsible Official(s) Contact Person: Brandy Manek Anticipated Completion Date: September 2022 Corrective Action Planned: The State of Oklahoma/Office of Management and Enterprise Services agrees with this finding. See corrective action plan located in the corrective action plan section of the report.
Criteria: 2CFR 200.403, Factors affecting allowability of costs, states that in order for a cost to be allowable under Federal awards it must be accorded consistent treatment. 2CFR 200.412 states that each item of cost for the same purpose must be treated consistently in like circumstances as either a direct or an indirect cost in order to avoid double-charging of Federal awards. Appendix IV to Part 200 4, Direct Allocation Method, all costs are treated as direct costs except general administration and general expenses. Under this method indirect costs consist exclusively of general administration and general expenses. 2CFR 200.425, Audit services, states the audit costs of auditing a non-federal entity that is exempted from having an audit conducted under the Single Audit Act and subpart F of this part because its expenditures under Federal awards are less than $750,000 during the non-Federal entity?s fiscal year are unallowable. 2CFR200.432, Conferences, defines allowable conferences as those necessary and reasonable for successful performance under the Federal award. Condition: A portion of the audit fee for the December 31, 2021 audit was charged as a direct expense ($423). The Council was not required to have a Single Audit for 2021, so this would not be considered allowable. A portion of the fees to send the finance director and a Board member to a conference ($750) were charged as a direct expense. Neither of these attendees were involved in the direct performance of the Federal program, so this would not be considered allowable. Costs for QuickBooks accounting software and payroll services, HR related software, and website costs ($4,047) were charged as direct costs. These are general administration expenses that should have been classified as indirect costs. Further, costs were not treated consistently within the accounting system. A portion of the audit costs, conference fees and software/computer costs were recorded as direct costs to the Federal program and a portion were recorded as indirect costs to other programs. The Organization did not have internal controls in place to meet the costs principles contained in the Uniform Guidance due to the issue discussed in Comment 2022-001. Cause: The Organization was not aware the grants received were Federal awards and they were not familiar with the cost principles contained in the Uniform Guidance. They were relying on the budget accepted by the Agency that passed them the awards. Effect: Since the 10% de minimis indirect cost rate was used, any unallowable costs that were reported as direct costs would cause the calculated indirect costs to be overstated. The grantor could request that any direct costs considered unallowable be repaid. Context: The unallowable costs noted were a minor portion of the direct costs charged to the Federal program. The program was charged approximately $463,000 of direct costs. Approximately 83% ($384,000) of the direct costs were wages, benefits and independent contractor fees for providers that worked directly for the Opiod STR program and direct rent for the program space. No exceptions we noted during our testing of these. The remaining 17% of the direct costs (approximately $79,000) were for a variety of expenses. We separated these items into 2 categories: recurring/annual charges allocated to the program of approximately $24,000 and other various costs. We tested the Organization?s allocation methodology for the identifiable recurring/annual costs. The results of this testing identified items that should have been classified as general administration indirect costs, as described above, which amounted to approximately $4,500. Testing was also done on the other various direct costs. There were 177 of these items totaling approximately $55,000. We tested a sample of 20 of these items. $750 of directly allocated costs for a conference were considered unallowable out of this testing. Questioned Costs: As a result of our testing, we concluded that the potentially unallowable costs and change in the indirect calculation would not be significantly different than the amounts discussed above and would not approach the $25,000 threshold for questioned costs. As a result, no costs have been questioned. Recommendation: We recommend that personnel involved in grant management and recordkeeping receive training on the Uniform Guidance cost principles and other pertinent Federal regulations. We recommend that a system and review process be implemented to insure that all costs are treated consistently and classified properly and that costs charged to Federal awards are appropriate. The Organization should follow the cost principles when designing budgets for future programs.
Federal Program Information Funding Agency: U.S. Department of Treasury Federal ALN: 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Pass Through Agency: Tennessee Arts Commission Criteria The Uniform Guidance contains cost principles which establish guidelines for allowable charges to federal grants. According to section 2 CFR 200.425, only audit services required by, and performed in accordance with, the Single Audit Act are allowed to be charged to federal grants. Condition Out of a sample of 15 charges to the grant that were tested, 1 of the charges was unallowed. The charge was determined to be unallowed as it was for the 2021 audit, which was not required by the Single Audit Act. This resulted in questioned costs totaling $23,768. Cause FAM had not received federal funding previously and therefore did not have a clear understanding of the cost principles contained in the Uniform Guidance. Effect Improper charges, in addition to those identified above, could be remitted to grantors for reimbursement. Auditor's Recommendation FAM should ensure that charges to federal grants are allowable in accordance with cost principles contained in Uniform Guidance. Additional training should be obtained to gain a further understanding of these requirements. Management Response Management agrees with the auditor?s recommendation. Because the grant period is still open, we will subtract the 2021 audit cost of $23,768 from the final period report and replace it with an allowed cost. This will enable us to close out the grant with only allowable costs.
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.
Criteria: 2CFR 200.403, Factors affecting allowability of costs, states that in order for a cost to be allowable under Federal awards it must be accorded consistent treatment. 2CFR 200.412 states that each item of cost for the same purpose must be treated consistently in like circumstances as either a direct or an indirect cost in order to avoid double-charging of Federal awards. Appendix IV to Part 200 4, Direct Allocation Method, all costs are treated as direct costs except general administration and general expenses. Under this method indirect costs consist exclusively of general administration and general expenses. 2CFR 200.425, Audit services, states the audit costs of auditing a non-federal entity that is exempted from having an audit conducted under the Single Audit Act and subpart F of this part because its expenditures under Federal awards are less than $750,000 during the non-Federal entity?s fiscal year are unallowable. 2CFR200.432, Conferences, defines allowable conferences as those necessary and reasonable for successful performance under the Federal award. Condition: A portion of the audit fee for the December 31, 2021 audit was charged as a direct expense ($423). The Council was not required to have a Single Audit for 2021, so this would not be considered allowable. A portion of the fees to send the finance director and a Board member to a conference ($750) were charged as a direct expense. Neither of these attendees were involved in the direct performance of the Federal program, so this would not be considered allowable. Costs for QuickBooks accounting software and payroll services, HR related software, and website costs ($4,047) were charged as direct costs. These are general administration expenses that should have been classified as indirect costs. Further, costs were not treated consistently within the accounting system. A portion of the audit costs, conference fees and software/computer costs were recorded as direct costs to the Federal program and a portion were recorded as indirect costs to other programs. The Organization did not have internal controls in place to meet the costs principles contained in the Uniform Guidance due to the issue discussed in Comment 2022-001. Cause: The Organization was not aware the grants received were Federal awards and they were not familiar with the cost principles contained in the Uniform Guidance. They were relying on the budget accepted by the Agency that passed them the awards. Effect: Since the 10% de minimis indirect cost rate was used, any unallowable costs that were reported as direct costs would cause the calculated indirect costs to be overstated. The grantor could request that any direct costs considered unallowable be repaid. Context: The unallowable costs noted were a minor portion of the direct costs charged to the Federal program. The program was charged approximately $463,000 of direct costs. Approximately 83% ($384,000) of the direct costs were wages, benefits and independent contractor fees for providers that worked directly for the Opiod STR program and direct rent for the program space. No exceptions we noted during our testing of these. The remaining 17% of the direct costs (approximately $79,000) were for a variety of expenses. We separated these items into 2 categories: recurring/annual charges allocated to the program of approximately $24,000 and other various costs. We tested the Organization?s allocation methodology for the identifiable recurring/annual costs. The results of this testing identified items that should have been classified as general administration indirect costs, as described above, which amounted to approximately $4,500. Testing was also done on the other various direct costs. There were 177 of these items totaling approximately $55,000. We tested a sample of 20 of these items. $750 of directly allocated costs for a conference were considered unallowable out of this testing. Questioned Costs: As a result of our testing, we concluded that the potentially unallowable costs and change in the indirect calculation would not be significantly different than the amounts discussed above and would not approach the $25,000 threshold for questioned costs. As a result, no costs have been questioned. Recommendation: We recommend that personnel involved in grant management and recordkeeping receive training on the Uniform Guidance cost principles and other pertinent Federal regulations. We recommend that a system and review process be implemented to insure that all costs are treated consistently and classified properly and that costs charged to Federal awards are appropriate. The Organization should follow the cost principles when designing budgets for future programs.
Federal Program Information Funding Agency: U.S. Department of Treasury Federal ALN: 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery Funds Pass Through Agency: Tennessee Arts Commission Criteria The Uniform Guidance contains cost principles which establish guidelines for allowable charges to federal grants. According to section 2 CFR 200.425, only audit services required by, and performed in accordance with, the Single Audit Act are allowed to be charged to federal grants. Condition Out of a sample of 15 charges to the grant that were tested, 1 of the charges was unallowed. The charge was determined to be unallowed as it was for the 2021 audit, which was not required by the Single Audit Act. This resulted in questioned costs totaling $23,768. Cause FAM had not received federal funding previously and therefore did not have a clear understanding of the cost principles contained in the Uniform Guidance. Effect Improper charges, in addition to those identified above, could be remitted to grantors for reimbursement. Auditor's Recommendation FAM should ensure that charges to federal grants are allowable in accordance with cost principles contained in Uniform Guidance. Additional training should be obtained to gain a further understanding of these requirements. Management Response Management agrees with the auditor?s recommendation. Because the grant period is still open, we will subtract the 2021 audit cost of $23,768 from the final period report and replace it with an allowed cost. This will enable us to close out the grant with only allowable costs.
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.