2 CFR 200 § 200.501

Findings Citing § 200.501

Audit requirements.

Total Findings
1,810
Across all audits in database
Showing Page
4 of 37
50 findings per page
About this section
Non-Federal entities that spend $1,000,000 or more in Federal awards during their fiscal year must undergo a single or program-specific audit. Entities spending less than $1,000,000 are exempt from these audit requirements but must still keep their records available for review by Federal officials.
View full section details →
FY End: 2024-06-30
State of New Hampshire
Compliance Requirement: M
Finding Reference Number: 2024-005 NH Fish and Game Department Fish and Wildlife Cluster (Assistance Listing #15.605, #15.611, #15.626) Federal Award Numbers: F22AF00995-00, F22AF00929-00, F23AF03086-00, F22AF00514-01, F22AF02616-02 Federal Award Year: 2022, 2023 U.S. Department of Interior Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and wa...

Finding Reference Number: 2024-005 NH Fish and Game Department Fish and Wildlife Cluster (Assistance Listing #15.605, #15.611, #15.626) Federal Award Numbers: F22AF00995-00, F22AF00929-00, F23AF03086-00, F22AF00514-01, F22AF02616-02 Federal Award Year: 2022, 2023 U.S. Department of Interior Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements - Clearly identify to the subrecipient required award information and applicable requirements described in 2 CFR section 200.332(a). 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. 2 CFR 200.303, non-federal entities must establish and maintain effective internal control over federal awards that provide reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. This would include internal controls related to the cash management process.   Condition During the year ended June 30, 2024, the New Hampshire Fish and Game Department (the Department) passed through $484,952 of federal funding to 1 subrecipient to fund 4 different projects. As part of our testwork related subrecipient monitoring, we identified the following: A. The Department communicates award information through the approved grant agreement. For 3 of 4 projects selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR 200.332(b). Specifically, the following elements were not communicated: • Subrecipient's unique entity identifier • Identification of whether the Federal award is for research and development B. As part of the during the award monitoring testwork, we noted that the Department completes a risk assessment questionnaire for all new projects they approve for the subrecipient. As part of our testwork over the risk assessments performed, we identified the following: • For 1 of 4 projects selected for testwork, there was no risk assessment questionnaire completed. • For 3 of 4 projects selected for testwork, a risk assessment questionnaire was completed, however there were no required monitoring procedures outlined within the questionnaire. As a result, we were not able to determine what monitoring procedures should have been performed over the projects as a result of the risk assessment. C. The Department’s during the award monitoring includes the review and approval of the subrecipient’s request for reimbursement. During our testwork over the review and approval of the request for reimbursement, we noted that for all 9 invoices selected for testwork, that while the invoice appeared to be properly reviewed and approved, the level of detail included within the invoice would not allow the Department to determine the reasonableness of the costs incurred to ensure that they were incurred in accordance with the grant agreement. D. The Department’s during the award monitoring includes obtaining a progress report related to each project that the subrecipient has been granted funding for. As part of our testwork, we identified that for all 4 projects selected for testwork, while a progress report was obtained, there was no evidence provided to support that the Department had reviewed the report. As a result, we were unable to determine based on the Department’s risk assessment procedures what the type and frequency of monitoring procedures that should have been performed over each project. E. The Department does not have formal policies and procedures to review and maintain documentation to evidence the review and approval of the subrecipient’s unform guidance report. There was no documentation to support that the Department had obtained and reviewed its subrecipient’s most recent uniform guidance report issued.   Cause The cause of the condition found was primarily due to a lack of formal written policies and procedures and internal controls to ensure that all required subrecipient monitoring compliance procedures are being performed by the Department. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(a), 2 CFR section 200.332(b), 2 CFR sections 200.332(d) through (f), and 2 CFR section 200.501(h). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a), 2 CFR section 200.332(b), 2 CFR sections 200.332(d) through (f), and 2 CFR section 200.501(h). This would ensure that all subrecipient grant agreements contains all required communications, that a risk assessment is performed that will outline the types and frequency of monitoring procedures to be performed, that all during the award monitoring activities are properly documented and that the receipt and review of the subrecipient’s uniform guidance report is properly documented. View of Responsible Officials: Management partially concurs with this finding. Rejoinder: As documented within the condition found, sufficient documentation was not provided to demonstrate that the Department complied with 2 CFR section 200.332(a), 2 CFR section 200.332(b), 2 CFR sections 200.332(d) through (f), and 2 CFR section 200.501(h).

FY End: 2024-06-30
State of New Hampshire
Compliance Requirement: M
Finding Reference Number: 2024-005 NH Fish and Game Department Fish and Wildlife Cluster (Assistance Listing #15.605, #15.611, #15.626) Federal Award Numbers: F22AF00995-00, F22AF00929-00, F23AF03086-00, F22AF00514-01, F22AF02616-02 Federal Award Year: 2022, 2023 U.S. Department of Interior Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and wa...

Finding Reference Number: 2024-005 NH Fish and Game Department Fish and Wildlife Cluster (Assistance Listing #15.605, #15.611, #15.626) Federal Award Numbers: F22AF00995-00, F22AF00929-00, F23AF03086-00, F22AF00514-01, F22AF02616-02 Federal Award Year: 2022, 2023 U.S. Department of Interior Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: N/A Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements - Clearly identify to the subrecipient required award information and applicable requirements described in 2 CFR section 200.332(a). 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. 2 CFR 200.303, non-federal entities must establish and maintain effective internal control over federal awards that provide reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. This would include internal controls related to the cash management process.   Condition During the year ended June 30, 2024, the New Hampshire Fish and Game Department (the Department) passed through $484,952 of federal funding to 1 subrecipient to fund 4 different projects. As part of our testwork related subrecipient monitoring, we identified the following: A. The Department communicates award information through the approved grant agreement. For 3 of 4 projects selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR 200.332(b). Specifically, the following elements were not communicated: • Subrecipient's unique entity identifier • Identification of whether the Federal award is for research and development B. As part of the during the award monitoring testwork, we noted that the Department completes a risk assessment questionnaire for all new projects they approve for the subrecipient. As part of our testwork over the risk assessments performed, we identified the following: • For 1 of 4 projects selected for testwork, there was no risk assessment questionnaire completed. • For 3 of 4 projects selected for testwork, a risk assessment questionnaire was completed, however there were no required monitoring procedures outlined within the questionnaire. As a result, we were not able to determine what monitoring procedures should have been performed over the projects as a result of the risk assessment. C. The Department’s during the award monitoring includes the review and approval of the subrecipient’s request for reimbursement. During our testwork over the review and approval of the request for reimbursement, we noted that for all 9 invoices selected for testwork, that while the invoice appeared to be properly reviewed and approved, the level of detail included within the invoice would not allow the Department to determine the reasonableness of the costs incurred to ensure that they were incurred in accordance with the grant agreement. D. The Department’s during the award monitoring includes obtaining a progress report related to each project that the subrecipient has been granted funding for. As part of our testwork, we identified that for all 4 projects selected for testwork, while a progress report was obtained, there was no evidence provided to support that the Department had reviewed the report. As a result, we were unable to determine based on the Department’s risk assessment procedures what the type and frequency of monitoring procedures that should have been performed over each project. E. The Department does not have formal policies and procedures to review and maintain documentation to evidence the review and approval of the subrecipient’s unform guidance report. There was no documentation to support that the Department had obtained and reviewed its subrecipient’s most recent uniform guidance report issued.   Cause The cause of the condition found was primarily due to a lack of formal written policies and procedures and internal controls to ensure that all required subrecipient monitoring compliance procedures are being performed by the Department. Effect The effect of the condition found is that the Department did not comply with 2 CFR section 200.332(a), 2 CFR section 200.332(b), 2 CFR sections 200.332(d) through (f), and 2 CFR section 200.501(h). Questioned Costs: None. Recommendation We recommend the Department develop written policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a), 2 CFR section 200.332(b), 2 CFR sections 200.332(d) through (f), and 2 CFR section 200.501(h). This would ensure that all subrecipient grant agreements contains all required communications, that a risk assessment is performed that will outline the types and frequency of monitoring procedures to be performed, that all during the award monitoring activities are properly documented and that the receipt and review of the subrecipient’s uniform guidance report is properly documented. View of Responsible Officials: Management partially concurs with this finding. Rejoinder: As documented within the condition found, sufficient documentation was not provided to demonstrate that the Department complied with 2 CFR section 200.332(a), 2 CFR section 200.332(b), 2 CFR sections 200.332(d) through (f), and 2 CFR section 200.501(h).

FY End: 2024-06-30
State of New Hampshire
Compliance Requirement: M
Finding Reference Number: 2024-034 NH Department of Safety Disaster Grants – Public Assistance (Presidentially Declared Disasters) and COVID-19 Public Assistance (Presidentially Declared Disasters) (Assistance Listing #97.036) Federal Award Numbers: FEMA-4622-DR-NH, FEMA-4624-DR-NH, FEMA-4457-DR-NH, FEMA-4370-DR, FEMA-4693-DR, FEMA-4355-DR, FEMA-4329-DR, FEMA-4516-DR-NH Federal Award Year: July 17-19, 2021, July 29-30, 2021, July 11-12, 2019, March 2-8, 2018, December 22-December 25, 2022, Octo...

Finding Reference Number: 2024-034 NH Department of Safety Disaster Grants – Public Assistance (Presidentially Declared Disasters) and COVID-19 Public Assistance (Presidentially Declared Disasters) (Assistance Listing #97.036) Federal Award Numbers: FEMA-4622-DR-NH, FEMA-4624-DR-NH, FEMA-4457-DR-NH, FEMA-4370-DR, FEMA-4693-DR, FEMA-4355-DR, FEMA-4329-DR, FEMA-4516-DR-NH Federal Award Year: July 17-19, 2021, July 29-30, 2021, July 11-12, 2019, March 2-8, 2018, December 22-December 25, 2022, October 29-November 1, 2017, July 1-2, 2017, January 20, 2020 U.S. Department of Homeland Security Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-023 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(1); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 2 CFR 200.303 (a) states that non-federal entities must establish and maintain effective internal control over federal awards that provide reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition As part of the Disaster Grants - Public Assistance program (DGPA), the New Hampshire Department of Safety - Homeland Security and Emergency Management (the Department) enters into grant agreements with local municipalities to provide reimbursement for expenditures incurred as a result of New Hampshire declared disasters. During the year ended June 30, 2024, $41,851,050 was passed through to 85 subrecipients. As part of our testwork over the subrecipient monitoring process, we noted the following: A. The Department communicates award information to subrecipients through the approved agreement. Per review of the agreement, for each of the 17 subrecipients selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR section 200.332(a). Specifically, the following elements were not communicated: • Identification of whether the award is R&D was not communicated for 13 of 17 subrecipients selected for testwork; and • Indirect cost rate for the federal award was not communicated for 13 of 17 subrecipients selected for testwork B. For 4 of 17 subrecipients selected for testwork, while a risk assessment was performed, the Department did not perform it within calendar year of when the award was obligated as outlined within their policies and procedures. C. For 1 of 17 subrecipients selected for testwork, the risk assessment form was not dated or initialed to indicted when the risk assessment procedures were performed. As such, it was unclear if the risk assessment was completed timely. D. During our testwork over the Department’s review of subrecipient uniform guidance reports, we noted there were no uniform guidance report review policies and procedures in place. For the 17 subrecipients selected for testwork, 5 subrecipients were identified in which the Department did not review the most recent uniform guidance report issued. Specifically, we noted: • For 4 of 5 subrecipients, the subrecipient’s uniform guidance report was not reviewed due to updated risk assessments not being performed in the current year. • For 1 of 5 subrecipients, the current year risk assessment was performed prior to the receipt of the subrecipient’s uniform guidance report and management did not go back to review the report. Cause The cause of the condition found was primarily due to the Department not following their sub monitoring internal controls in accordance with written formal policies and procedures. Questioned Costs: None.   Recommendation We recommend that the Department develop policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a-h) and 2 CFR section 200.501(h). View of Responsible Officials: Management concurs with the finding above.

FY End: 2024-06-30
State of New Hampshire
Compliance Requirement: M
Finding Reference Number: 2024-034 NH Department of Safety Disaster Grants – Public Assistance (Presidentially Declared Disasters) and COVID-19 Public Assistance (Presidentially Declared Disasters) (Assistance Listing #97.036) Federal Award Numbers: FEMA-4622-DR-NH, FEMA-4624-DR-NH, FEMA-4457-DR-NH, FEMA-4370-DR, FEMA-4693-DR, FEMA-4355-DR, FEMA-4329-DR, FEMA-4516-DR-NH Federal Award Year: July 17-19, 2021, July 29-30, 2021, July 11-12, 2019, March 2-8, 2018, December 22-December 25, 2022, Octo...

Finding Reference Number: 2024-034 NH Department of Safety Disaster Grants – Public Assistance (Presidentially Declared Disasters) and COVID-19 Public Assistance (Presidentially Declared Disasters) (Assistance Listing #97.036) Federal Award Numbers: FEMA-4622-DR-NH, FEMA-4624-DR-NH, FEMA-4457-DR-NH, FEMA-4370-DR, FEMA-4693-DR, FEMA-4355-DR, FEMA-4329-DR, FEMA-4516-DR-NH Federal Award Year: July 17-19, 2021, July 29-30, 2021, July 11-12, 2019, March 2-8, 2018, December 22-December 25, 2022, October 29-November 1, 2017, July 1-2, 2017, January 20, 2020 U.S. Department of Homeland Security Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness and Material Noncompliance Prior Year Finding: 2023-023 Statistically Valid Sample: The sample was not intended to be, and was not, a statistically valid sample. Criteria A pass-through entity (PTE) must: 1. Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.332(a)(1); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.332(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.332(a)(3)). 2. Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). 3. Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: a. Reviewing financial and programmatic (performance and special reports) required by the PTE. b. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. c. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Additionally, 2 CFR 200.303 (a) states that non-federal entities must establish and maintain effective internal control over federal awards that provide reasonable assurance that the non-federal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition As part of the Disaster Grants - Public Assistance program (DGPA), the New Hampshire Department of Safety - Homeland Security and Emergency Management (the Department) enters into grant agreements with local municipalities to provide reimbursement for expenditures incurred as a result of New Hampshire declared disasters. During the year ended June 30, 2024, $41,851,050 was passed through to 85 subrecipients. As part of our testwork over the subrecipient monitoring process, we noted the following: A. The Department communicates award information to subrecipients through the approved agreement. Per review of the agreement, for each of the 17 subrecipients selected for testwork, the Department did not communicate all the required award information as outlined in 2 CFR section 200.332(a). Specifically, the following elements were not communicated: • Identification of whether the award is R&D was not communicated for 13 of 17 subrecipients selected for testwork; and • Indirect cost rate for the federal award was not communicated for 13 of 17 subrecipients selected for testwork B. For 4 of 17 subrecipients selected for testwork, while a risk assessment was performed, the Department did not perform it within calendar year of when the award was obligated as outlined within their policies and procedures. C. For 1 of 17 subrecipients selected for testwork, the risk assessment form was not dated or initialed to indicted when the risk assessment procedures were performed. As such, it was unclear if the risk assessment was completed timely. D. During our testwork over the Department’s review of subrecipient uniform guidance reports, we noted there were no uniform guidance report review policies and procedures in place. For the 17 subrecipients selected for testwork, 5 subrecipients were identified in which the Department did not review the most recent uniform guidance report issued. Specifically, we noted: • For 4 of 5 subrecipients, the subrecipient’s uniform guidance report was not reviewed due to updated risk assessments not being performed in the current year. • For 1 of 5 subrecipients, the current year risk assessment was performed prior to the receipt of the subrecipient’s uniform guidance report and management did not go back to review the report. Cause The cause of the condition found was primarily due to the Department not following their sub monitoring internal controls in accordance with written formal policies and procedures. Questioned Costs: None.   Recommendation We recommend that the Department develop policies and procedures and implement internal controls to ensure that the Department complies with 2 CFR section 200.332(a-h) and 2 CFR section 200.501(h). View of Responsible Officials: Management concurs with the finding above.

FY End: 2024-06-30
State of Louisiana
Compliance Requirement: M
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did no...

2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).

FY End: 2024-06-30
State of Louisiana
Compliance Requirement: M
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did no...

2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).

FY End: 2024-06-30
State of Louisiana
Compliance Requirement: M
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did no...

2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).

FY End: 2024-06-30
State of Louisiana
Compliance Requirement: M
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did no...

2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).

FY End: 2024-06-30
State of Louisiana
Compliance Requirement: M
2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did no...

2024-008 - Noncompliance with Subrecipient Monitoring Requirements State Entity: University of Louisiana at Lafayette (UL Lafayette) Award Years: 2019 - 2023 Award Numbers: DE-EE0009421, FA9550-21-1-0215, M19AC00015, OIA-1920858, OIA-2019511, OIA-2119688, U19AI142636 Compliance Requirement: Subrecipient Monitoring Repeat Finding: Yes (Prior Year Finding No. 2023-008) See Schedule of Findings and Questioned Costs for chart/table. Condition: For the fourth consecutive year, UL Lafayette did not adequately monitor subrecipients of the Research and Development (R&D) Cluster Programs. In a non-statistical sample of seven subawards out of a population of 50 subawards, it was noted that for six (85.7%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the financial and performance reports required by the subaward agreement were obtained and reviewed by UL Lafayette. For three (42.9%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients’ fraud risk and risk of noncompliance with federal regulations and the terms of the subaward. For two of the subrecipients reviewed (28.6%), UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit and that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards, as required by federal regulations. Additionally, for one (14.3%) of the subrecipients evaluated, the subaward documents did not contain the federal award date as required by federal regulations. Criteria: Per 2 CFR 200.332(b)(1)(iv), all pass-through entities must ensure that every subaward includes the federal award date. 2 CFR 200.332(c) requires pass through entities to evaluate each subrecipient's fraud risk and risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. 2 CFR 200.332(e)(1) requires that pass-through monitoring include reviewing financial and performance reports required by the pass-through entity. 2 CFR 200.332(e)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings, in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient’s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings. Per 2 CFR 200.332(g), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient’s fiscal year. Cause: UL Lafayette did not have sufficient controls in place to adequately monitor subrecipients as required by federal regulations. Effect: Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency. Recommendation: UL Lafayette should strengthen controls to ensure that all required financial and performance reports are obtained and reviewed and that all required subrecipient audit reports are obtained and reviewed in order to evaluate the impact of any findings noted by the audit and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure that required information is included in the subaward documents and that risk assessments are performed and documented on all subrecipients in accordance with federal regulations. Management’s Response and Corrective Action Plan: Management concurred with the finding and provided a corrective action plan (B-64).

FY End: 2024-06-30
State of South Dakota
Compliance Requirement: M
Finding No. 2024-007: Inadequate Internal Controls over Monitoring of Subrecipient Audits Type of Finding: Significant Deficiency and Non-Compliance Assistance Listing Title: Disaster Grants - Public Assistance (Presidentially Declared Disasters) Assistance Listing Number: 97.036 Federal Award Number: 4155DRSDP00000001,4440DRSDP00000001, 4463DRSDP00000001, 4467DRSDP00000001, 4469DRSDP00000001, 4527DRSDP00000001, 4656DRSDP00000001, 4664DRSDP00000001, 4689DRSDP00000001, and 4718DRSDP000000...

Finding No. 2024-007: Inadequate Internal Controls over Monitoring of Subrecipient Audits Type of Finding: Significant Deficiency and Non-Compliance Assistance Listing Title: Disaster Grants - Public Assistance (Presidentially Declared Disasters) Assistance Listing Number: 97.036 Federal Award Number: 4155DRSDP00000001,4440DRSDP00000001, 4463DRSDP00000001, 4467DRSDP00000001, 4469DRSDP00000001, 4527DRSDP00000001, 4656DRSDP00000001, 4664DRSDP00000001, 4689DRSDP00000001, and 4718DRSDP00000001 Federal Award Year: 2019, 2020, 2021, 2022, 2023, and 2024 Federal Agency: Department of Homeland Security Category of Finding: Subrecipient Monitoring Criteria: 2 CFR section 200.332 requires, among other things, that a pass-through entity verify that subrecipients receive Single Audits as required by 2 CFR 200.501(a), follow-up to ensure that the subrecipient takes timely and appropriate action on audit findings, and issue a management decision on applicable audit findings pertaining to the subaward. 2 CFR 200.521(d) requires this management decision to be issued within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC). Condition: The Department of Public Safety (DPS) receives funding under ALN 97.036, Disaster Grants - Public Assistance (Presidentially Declared Disasters) (Public Assistance) and makes subawards to local governments and private nonprofit entities to respond to and recover from presidentially declared disasters. During FY24, DPS did not have adequate controls in place to ensure that Single Audits were obtained for all applicable subrecipients within the required time frame, that those audits were reviewed to ensure timely and appropriate action was taken on any findings, and that a management decision was issued by DPS within the six-month time frame required by federal regulations. Based on our review of funding amounts passed through by DPS, there were seven subrecipients receiving Federal grant payments that would require a Single Audit for the auditee’s fiscal year 2023. These subrecipients had received the required audits and their audit reports were accepted by the FAC, however, two of the audits were not reviewed timely by DPS. Of those two subrecipient audits, one had an audit finding pertaining to the Public Assistance program and DPS had not issued a management decision within the time frame required by 2 CFR 200.521. Cause: Controls were not adequate to identify when subrecipient audits were due and obtain all required audits off the FAC in a timely manner. While DPS personnel did track expenditures to determine which subrecipients were required to have audits under 2 CFR 200.501(a), failure to monitor subrecipient year-ends and the related audit deadlines resulted in some audits not being obtained and reviewed in a timely manner. Effect: This resulted in noncompliance with subrecipient monitoring requirements and increased the risk of subrecipient audit findings not being corrected in a timely manner. Questioned Costs: None. Repeat Finding from Prior Year: No. Recommendation: We recommend the Department implement controls to ensure that audits of subrecipients are obtained and followed up on in a timely manner and that management decisions are issued within the required time frame for all audit findings pertaining to DPS subawards. Views of Responsible Officials: The Department of Public Safety concurs with the audit finding.

FY End: 2024-06-30
Baltimore County, Maryland
Compliance Requirement: M
Reference Number: 2024-002 Prior Year Finding: 2023-007 Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: 2021 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Controls over Compliance, Other Matters Criteria or Specific Requirement: Compliance - 2 CFR Section 200.332 – Requirements for Pass-Through Entities states in ...

Reference Number: 2024-002 Prior Year Finding: 2023-007 Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: 2021 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Controls over Compliance, Other Matters Criteria or Specific Requirement: Compliance - 2 CFR Section 200.332 – Requirements for Pass-Through Entities states in part, that all pass-through entities must: (a) Verify that every subrecipient is audited as required by Subpart F – Audit Requirements of this part when it is expected that the subrecipient’s Federal award expended during the respective fiscal year equaled or exceeded the threshold set forth in section 200.501 Audit requirements. Control - Per 2 CDF 200.303(a), a non-Federal entity must: Establish a maintain effective internal control over the federal award that provides reasonable assurance that the non-Federal entity is managing the federal award in compliance with federal statues, regulations, and the terms and conditions of the federal awards. These internal controls should comply with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The County was not able to provide documentation to show it ensured its subrecipients were audited as required by 2 CFR Part 200 Subpart F – Audit Requirements (Subpart F). Context: Exceptions were noted for 7 of 7 subrecipients selected for testing: • The County was unable to provide support that it ensured the subrecipient was audited as required by Subpart F. The County could not produce evidence of verification that the subrecipient’s Federal awards expended during the fiscal year were below the threshold set forth in section 200.501 Audit Requirements. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple years, and these discrepancies may not be properly monitored, detected, and corrected by the County personnel on a timely basis. Questioned Costs: Undetermined. Recommendation: The County should review and enhance internal controls and procedures to ensure that evaluation of independent audits is performed. Views of Responsible Officials: The County agrees with this finding. See separate Correction Action Plan related to this finding.

FY End: 2024-06-30
Baltimore County, Maryland
Compliance Requirement: M
Reference Number: 2024-002 Prior Year Finding: 2023-007 Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: 2021 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Controls over Compliance, Other Matters Criteria or Specific Requirement: Compliance - 2 CFR Section 200.332 – Requirements for Pass-Through Entities states in ...

Reference Number: 2024-002 Prior Year Finding: 2023-007 Federal Agency: U.S. Department of Treasury Federal Program: COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Assistance Listing Number: 21.027 Award Number and Year: 2021 Compliance Requirement: Subrecipient Monitoring Type of Finding: Significant Deficiency in Internal Controls over Compliance, Other Matters Criteria or Specific Requirement: Compliance - 2 CFR Section 200.332 – Requirements for Pass-Through Entities states in part, that all pass-through entities must: (a) Verify that every subrecipient is audited as required by Subpart F – Audit Requirements of this part when it is expected that the subrecipient’s Federal award expended during the respective fiscal year equaled or exceeded the threshold set forth in section 200.501 Audit requirements. Control - Per 2 CDF 200.303(a), a non-Federal entity must: Establish a maintain effective internal control over the federal award that provides reasonable assurance that the non-Federal entity is managing the federal award in compliance with federal statues, regulations, and the terms and conditions of the federal awards. These internal controls should comply with guidance in "Standards for Internal Control in the Federal Government" issued by the Comptroller General of the United States or the "Internal Control Integrated Framework", issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Condition: The County was not able to provide documentation to show it ensured its subrecipients were audited as required by 2 CFR Part 200 Subpart F – Audit Requirements (Subpart F). Context: Exceptions were noted for 7 of 7 subrecipients selected for testing: • The County was unable to provide support that it ensured the subrecipient was audited as required by Subpart F. The County could not produce evidence of verification that the subrecipient’s Federal awards expended during the fiscal year were below the threshold set forth in section 200.501 Audit Requirements. Cause: The County did not establish effective internal controls and procedures over subrecipient monitoring. Effect: Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple years, and these discrepancies may not be properly monitored, detected, and corrected by the County personnel on a timely basis. Questioned Costs: Undetermined. Recommendation: The County should review and enhance internal controls and procedures to ensure that evaluation of independent audits is performed. Views of Responsible Officials: The County agrees with this finding. See separate Correction Action Plan related to this finding.

FY End: 2024-06-30
Big Horn County
Compliance Requirement: M
NONCOMPLIANCE WITH SUBRECIPIENT MONITORING REQUIREMENTS, CORONAVIRUS STATE AND LOCAL FISCAL RECOVERY FUNDS, AL No. 21.027, GRANT No. AM-23-0211 Criteria: Per the 2024 OMB compliance supplement, subrecipient monitoring is required by pass-through entities for all SLFRF funded projects. Among other activities, Treasury considers the following activities to be part of subrecipient monitoring: • Ensuring that the subrecipient has access to information about public programs relevant to the subreci...

NONCOMPLIANCE WITH SUBRECIPIENT MONITORING REQUIREMENTS, CORONAVIRUS STATE AND LOCAL FISCAL RECOVERY FUNDS, AL No. 21.027, GRANT No. AM-23-0211 Criteria: Per the 2024 OMB compliance supplement, subrecipient monitoring is required by pass-through entities for all SLFRF funded projects. Among other activities, Treasury considers the following activities to be part of subrecipient monitoring: • Ensuring that the subrecipient has access to information about public programs relevant to the subrecipient’s duties necessary to ensure that subaward performance goals are achieved. • Ensuring that the subrecipient has access to information about projects operated by other subrecipients, necessary to ensure that subaward performance goals are achieved. • Ensuring deliverables and payment are within the approved scope of the subaward. • Responding to inquiries about the interpretation of subrecipient responsibilities under the subaward • Processing and correcting invoices. • Taking remedial action necessary to prevent the subrecipient from failing to perform its responsibilities under the subaward. Condition: The county did perform subrecipient monitoring activities over the program as required by Treasury guidelines. Cause: The county does not have policies and procedures in place that allow it to comply with subrecipient monitoring requirements outlined in the Uniform Guidance and Treasury guidelines. Effect: Non-compliance with program terms and conditions. Questioned Costs: None Recommendation: The requirements for subrecipient monitoring for the subaward are contained in 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.332, and 200.501(h); federal awarding agency regulations; and the terms and conditions of the award. Management should develop procedures that will ensure compliance with the requirements. Views of responsible officials and planned corrective action: The government agrees with this finding and will adhere to the attached corrective action plan.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of a...

Finding 2024-014 U.S. Department of Housing and Urban Development (HUD) AL No. 14.241 Housing Opportunities for Persons with AIDS Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-011 Condition: For 2 out of 2 selections, there is no evidence that the subrecipients were monitored during the fiscal year. For 2 out 2 selections, various information related to the funding source and the pass through entity were missing on the notice of award (E.g. FAIN number, UEI, indirect cost). Criteria: In accordance with 2 CFR §200.303: The non-federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Pursuant to 31 USC 7502(f)(2) (Single Audit Act Amendments of 1996 (Pub. L. No. 104-156)), 2 CFR sections 200.330, .331, and .501(h), a pass-through entity must identify the award and applicable requirements, evaluate risk, monitor, and ensure accountability of subrecipients. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved.(f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: MOHS did not maintain adequate documentation of the requirements included in Uniform Guidance related to procedures required for subrecipient monitoring. Effect: The City may not be in compliance with the Uniform Guidance. Questioned Costs: Unknown. Recommendation: We recommend that MOHS establish and implement controls for the program and prepare and maintain a written plan to perform risk assessments on potential subrecipients. Additionally, we recommend that MOHS provides training on the Uniform Guidance requirements related to subrecipient monitoring. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: I...

Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: I...

Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: I...

Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: I...

Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: I...

Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: I...

Finding 2024-022 U.S. Department of Health and Human Services AL No. 93.686 Ending the HIV Epidemic: A Plan for America Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-017 Condition: For 1 out of 1 selection, management was unable to provide evidence that subrecipient monitoring was performed to ensure compliance with accounting requirements. For 1 out of 1 selection, management was unable to provide the notice of award. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

FY End: 2024-06-30
City of Baltimore, Maryland
Compliance Requirement: M
Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, ...

Finding 2024-025 U.S. Department of Health and Human Services AL No. 93.914 HIV Emergency Relief Project Grants Material Weakness in Internal Controls and Noncompliance over Subrecipient Monitoring Repeat Finding: Yes; 2023-021 Condition: For 6 out of 6 selections, we were unable to verify the subrecipient's active registration on SAM.gov. For 6 out of 6 selections, various information related to the funding source and the pass through entity is missing on the notice of award (E.g. FAIN number, UEI, CFDA and name of pass-through and indirect cost). For 3 out of 6 selections, there were either findings identified during site visit or on the fiscal year 2023 single audit report of the subrecipient. However, no documentation was provided to evidence follow-up or other documentation to ensure that the identified issues were resolved. Criteria: In accordance with 2 CFR 200.303: Internal Control, The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. In accordance with 2 CFR §25.300: (a) A recipient may not make a subaward to a subrecipient unless that subrecipient has obtained and provided to the recipient a unique entity identifier. Subrecipients are not required to complete full SAM registration to obtain a unique entity identifier. (b) A recipient must notify any potential subrecipients that the recipient cannot make a subaward unless the subrecipient has obtained a unique entity identifier as described in paragraph (a) of this section. According to 2 CFR §200.332, all pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the Federal award identification including the subrecipient's unique entity identifier, Federal Award Identification Number (FAIN), identification of whether the award is R&D and indirect cost rate for the Federal award. (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit. d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. (f) Verify that every subrecipient is audited as required by 2 CFR § 200.331 when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. Cause: BCHD did not have proper controls in place to ensure the subrecipient monitoring requirements of the grant were met. Effect: BCHD may not be in compliance with the subrecipient monitoring requirements of the grant. Questioned Costs: Unknown. Recommendation: We recommend the City establish and implement controls to maintain compliance with subrecipient monitoring requirements. Auditee Response and Corrective Action Plan: Management agrees with the finding. Refer to the corrective action plan on current findings in Part V of this report. Auditor’s Conclusion: Finding remains as stated.

« 1 2 3 5 6 37 »