Finding 2021-010 – Lack of Internal Controls Over Schedule of Expenditures of Federal Awards PASS-THROUGH GRANTOR: Oklahoma Department of Emergency Management: Oklahoma Office of Management and Enterprise Services FEDERAL AGENCY: U.S. Department of Treasury ASSISTANCE LISTING: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund FEDERAL AWARD NUMBER: Oklahoma Cares PPE – Reimbursement 2020; 4530-DR-OK SA-2242 FEDERAL AWARD YEAR: 2020 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Costs Principles; and Period of Performance QUESTIONED COSTS: $-0- Condition: During our audit, we identified federal programs that were not listed accurately on the County’s Schedule of Expenditures of Federal Awards (SEFA). Federal expenditures were understated by $532,307. The following misstatements were noted: Expenditures: • The actual expenditures for Coronavirus Relief Fund, ALN 21.019, were $774,579, the County reported $241,966, which understated expenditures by $532,613. • The actual expenditures for Coronavirus State and Local Fiscal Recovery Funds, ALN 21.027, were $2,437, the County reported $2,807, which overstated expenditures by $370. • The actual expenditures for FEMA – Public Assistance DR-4438, Disaster Grants – Public Assistance (Presidentially Declared Disasters), ALN 97.036, were $$60,394, the County reported $46,703, which understated expenditures by $13,691. • The actual expenditures of FEMA – Category B DR-4438 ALN 97.067 were $0, the County reported $8,342, which overstated expenditures by $8,342. • The actual expenditures for FEMA – Public Assistance OEM DR – 4453 ALN 97.036 were $0, the County reported $870, which overstated expenditures by $870. • The actual expenditures for COVID-19 FEMA-Public Assistance DR-4530, Disaster Grants – Public Assistance (Presidentially Declared Disasters), ALN 97.036, were $28,063, the County reported $21,047, which understated expenditures by $7,016. • The actual expenditures for Emergency Management Performance Grant, ALN 97.042, were $45,000, the County reported $56,250, which overstated expenditures by $11,250. • The actual expenditures for Fire Management Assistance Grand, ALN 97.046, were $0, the County reported $181, which overstated expenditures by $181. Cause of Condition: Policies and procedures have not been designed and implemented to ensure an accurate reporting of expenditures for federal awards. Effect of Condition: These conditions resulted in the misstatement of the expenditures reported on the County’s SEFA and could increase the potential for material noncompliance. Recommendation: OSAI recommends county officials and department heads gain an understanding of federal programs awarded to Washington County. Internal control procedures should be designed and implemented to ensure accurate reporting of expenditures on the SEFA and to ensure compliance with federal requirements. Management Response: District 1 County Commissioner: Not by way of excuse, but truly in response, the Federal programs associated with the COVID response were unnecessarily arduous and created confusion at all levels of government. While the monetary response was accepted, the premise of these programs was nothing more than an administrative shell game. From the outset of the response, guidance was termed as “interim”, then “final interim” and finally, “final” (redundancy intentional). The intent of our national level leadership became more apparent as these programs progressed with each iteration of programming being reliant on returned funds from the previous. Without grandstanding, I will simply say that no entity, regardless of their planning with these programs, will be found as fully compliant. As these programs have a sunset in the near term, I suspect these findings will disappear. District 2 County Commissioner: I was not in office at this time; however, I will work with other elected officials, county officials and department heads to ensure there is an understanding of federal programs awarded to Washington County, and the use of internal control procedures designed and implemented to ensure accurate reporting of expenditures and revenues on the SEFA and to ensure compliance with federal requirements. District 3 County Commissioner: These programs are temporary and difficult to navigate through. I will continue to press staff to report effectively as possible and to be responsive to specific requests that are made. County Clerk: I will work with the other Elected Officials to gain a better understanding of federal programs that are awarded to our County. I will work with the other offices to implement internal controls to ensure accurate reporting on the SEFA. County Sheriff: I have and will continue to work toward compliance in these areas of SEFA. I will continue to work with the other elected officials to gain proper understanding of Federal Programs and Requirements. Criteria: Title 2 CFR 200 § 200.210(a)(b) Financial Statements reads as follows: (a) Financial statements. The auditee must prepare financial statements that reflect its financial position, results of operations or changes in net assets, and where appropriate, cash flows for the fiscal year audited. The financial statements must be for the same organizational unit and fiscal year that is chosen to meet the requirements of this part. However, non-Federal entity-wide financial statements may also include departments, agencies, and other organizational units that have separate audits in accordance with §200.514 Scope of audit, paragraph (a) and prepare separate financial statements. (b) Schedule of expenditures of federal awards. The auditee must also prepare a schedule of expenditures of Federal awards for the period covered by the auditee’s financial statement, which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended. 2 CFR § 200.303(a) Internal Controls reads as follows: The non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). 2 CFR § 200.508(b) Auditee responsibilities reads as follows: The auditee must: Prepare appropriate financial statements, including the schedule of expenditures of Federal awards in accordance with §200.510 Financial statements. 2 CFR § 200.510 (b) Financial statements reads as follows: Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of Federal awards for the period covered by the auditee's financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended. [….] Additionally, GAO Standards – Section 2 – Establishing an Effective Internal Control System – OV2.23 states in part: Objectives of an Entity – Compliance Objectives Management conducts activities in accordance with applicable laws and regulations. As part of specifying compliance objectives, the entity determines which laws and regulations apply to the entity. Management is expected to set objectives that incorporate these requirements. Furthermore, GAO Standards – Principle 6 – Define Objectives and Risk Tolerances – 6.05 states: Definitions of Objectives Management considers external requirements and internal expectations when defining objectives to enable the design of internal control. Legislators, regulators, and standardsetting bodies set external requirements by establishing the laws, regulations, and standards with which the entity is required to comply. Management identifies, understands, and incorporates these requirements into the entity’s objectives. Management sets internal expectations and requirements through the established standards of conduct, oversight structure, organizational structure, and expectations of competence as part of the control environment.
Criteria The A-102 Common Rule, OMB Circular A-110 and 2 CFR section 200.303 require that non-Federal entities receiving Federal awards establish and maintain internal control designed to reasonably ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. 2 CFR section 200.514 requires auditors to obtain an understanding of the non-Federal entity’s internal control over Federal programs sufficient to plan the audit to support a low assessed level of control risk of noncompliance for major programs, and, unless internal control is likely to be ineffective, plan the testing of internal control over major programs to support a low assessed level of control risk for the assertions relevant to the compliance requirements for each major program and perform testing of internal control as planned. Condition As noted in finding 2021-004, the City informed the auditors of a significant break down of internal controls resulting in them to be ineffective through most of the fiscal year. Cause Due to personnel turnover and the recent implementation of a new accounting system, the City did not have adequate controls and oversight in place to ensure accounting transactions were being processed accurately and timely. Unfamiliarity with the financial accounting system lead to inconsistencies in how transactions were being recorded Effect The City lacked internal controls to support a low assessed level of control risk for the assertions relevant to compliance requirements for the major program tested. Recommendation We recommend that the City institute a program to methodically identify and document its significant operational and accounting processes as they relate to Federal grants and compliance. Documenting a process involves identifying and gaining an understanding of the required compliance requirements, the automated or manual procedures used in performing the required processes, the person(s) or position(s) responsible for performing the procedures, the source documents used or generated, the procedures for approval and review and correction of any errors detected, and the financial or operational entries or reports summarizing the result of the process. View of Responsible Officials Management informed the auditors of this condition and agrees with the comment. Management also acknowledges that this occurred due to the staff turnover and subsequent difficulties in hiring mentioned in comments 2021-001, 002, and 003. In 2021-2022 the foundational processes have been stabilized (accounts payable, payroll, deposits) allowing staff to focus on reconciliations, procedures, and audit. As processes are brought current or accounts are reconciled, staff will document procedures and ensure that internal controls are incorporated into the procedures.
Criteria The A-102 Common Rule, OMB Circular A-110 and 2 CFR section 200.303 require that non-Federal entities receiving Federal awards establish and maintain internal control designed to reasonably ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. 2 CFR section 200.514 requires auditors to obtain an understanding of the non-Federal entity’s internal control over Federal programs sufficient to plan the audit to support a low assessed level of control risk of noncompliance for major programs, and, unless internal control is likely to be ineffective, plan the testing of internal control over major programs to support a low assessed level of control risk for the assertions relevant to the compliance requirements for each major program and perform testing of internal control as planned. Condition As noted in finding 2021-004, the City informed the auditors of a significant break down of internal controls resulting in them to be ineffective through most of the fiscal year. Cause Due to personnel turnover and the recent implementation of a new accounting system, the City did not have adequate controls and oversight in place to ensure accounting transactions were being processed accurately and timely. Unfamiliarity with the financial accounting system lead to inconsistencies in how transactions were being recorded Effect The City lacked internal controls to support a low assessed level of control risk for the assertions relevant to compliance requirements for the major program tested. Recommendation We recommend that the City institute a program to methodically identify and document its significant operational and accounting processes as they relate to Federal grants and compliance. Documenting a process involves identifying and gaining an understanding of the required compliance requirements, the automated or manual procedures used in performing the required processes, the person(s) or position(s) responsible for performing the procedures, the source documents used or generated, the procedures for approval and review and correction of any errors detected, and the financial or operational entries or reports summarizing the result of the process. View of Responsible Officials Management informed the auditors of this condition and agrees with the comment. Management also acknowledges that this occurred due to the staff turnover and subsequent difficulties in hiring mentioned in comments 2021-001, 002, and 003. In 2021-2022 the foundational processes have been stabilized (accounts payable, payroll, deposits) allowing staff to focus on reconciliations, procedures, and audit. As processes are brought current or accounts are reconciled, staff will document procedures and ensure that internal controls are incorporated into the procedures.
Finding 2021-010 – Lack of Internal Controls over the Schedule of Expenditures of Federal Awards PASS-THROUGH GRANTOR: Oklahoma Office of Management and Enterprise Services FEDERAL AGENCY: U.S. Department of Treasury ASSISTANCE LISTING: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund FEDERAL AWARD YEAR: 2021 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance QUESTIONED COSTS: $0 Condition: During the review of 100% of federal expenditures reported on the Schedule of Expenditures of Federal Awards (SEFA), federal programs were identified that were not accurately reported. Actual federal expenditures for the major federal program Assistance Listing 21.019 - Coronavirus Relief Fund were $2,024,981 and the County reported $193,762. Therefore, expenditures were understated $1,831,219 for the major federal program Coronavirus Relief Fund. Further, actual federal expenditures for Assistance Listing 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) FEMA DR-4438 were $0 and the County reported $109,550. Therefore, the expenditures were overstated by $109,550. Actual federal expenditures for Assistance Listing 97.042 - Emergency Management Performance Grants were $7,177 and the County reported $15,000. Therefore, expenditures were overstated by $7,823. Additionally, the county reported expenditures of the Social Security Administration, overstating expenditures $1,200, although considered federally sourced, expenditures should not be reported on the SEFA. Reported Total Expenditures of Federal Awards $ 343,373 Add: Coronavirus Relief Fund (21.019) 1,831,219 Less: Disaster Grants – Public Assistance (Presidentially Declared Disasters) FEMA DR-4438 (97.036) (109,550) Less: Emergency Management Performance Grants (97.042) ( 7,823) Less: Social Security Administration ( 1,200) Actual Federal Expenditures of Federal Awards $2,056,019 SEFA Understated $1,712,646 Cause of Condition: Policies and procedures have not been designed and implemented to ensure accurate reporting of expenditures for federal awards. Effect of Condition: This resulted in a material misstatement of the County’s Schedule of Expenditures of Federal Awards and could increase the potential for material noncompliance. Recommendation: OSAI recommends the County design and implement internal controls to ensure accurate reporting of federal expenditures on the SEFA. Management Response: Chairman of the Board of County Commissioners: The BOCC will work to design and implement internal controls to ensure accurate reporting of federal expenditures on the SEFA and ensure compliance with federal requirements. Criteria: The GAO Standards – Section 1 – Fundamental Concepts of Internal Control – OV1.01 states in part: Definition of Internal Control Internal control is a process effected by an entity’s oversight body, management, and other personnel that provides reasonable assurance that the objectives of an entity will be achieved. Further, Title 2 CFR 200 § 200.510(a)(b) Financial Statements reads as follows: (a) Financial statements. The auditee must prepare financial statements that reflect its financial position, results of operations or changes in net assets, and, where appropriate, cash flows for the fiscal year audited. The financial statements must be for the same organizational unit and fiscal year that is chosen to meet the requirements of this part. However, non-Federal entity-wide financial statements may also include departments, agencies, and other organizational units that have separate audits in accordance with §200.514 Scope of audit, paragraph (a) and prepare separate financial statements. (b) Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of Federal awards for the period covered by the auditee's financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended.
Finding 2021-010 – Lack of Internal Controls Over Schedule of Expenditures of Federal Awards PASS-THROUGH GRANTOR: Oklahoma Department of Emergency Management: Oklahoma Office of Management and Enterprise Services FEDERAL AGENCY: U.S. Department of Treasury ASSISTANCE LISTING: 21.019 FEDERAL PROGRAM NAME: Coronavirus Relief Fund FEDERAL AWARD NUMBER: Oklahoma Cares PPE – Reimbursement 2020; 4530-DR-OK SA-2242 FEDERAL AWARD YEAR: 2020 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Costs Principles; and Period of Performance QUESTIONED COSTS: $-0- Condition: During our audit, we identified federal programs that were not listed accurately on the County’s Schedule of Expenditures of Federal Awards (SEFA). Federal expenditures were understated by $532,307. The following misstatements were noted: Expenditures: • The actual expenditures for Coronavirus Relief Fund, ALN 21.019, were $774,579, the County reported $241,966, which understated expenditures by $532,613. • The actual expenditures for Coronavirus State and Local Fiscal Recovery Funds, ALN 21.027, were $2,437, the County reported $2,807, which overstated expenditures by $370. • The actual expenditures for FEMA – Public Assistance DR-4438, Disaster Grants – Public Assistance (Presidentially Declared Disasters), ALN 97.036, were $$60,394, the County reported $46,703, which understated expenditures by $13,691. • The actual expenditures of FEMA – Category B DR-4438 ALN 97.067 were $0, the County reported $8,342, which overstated expenditures by $8,342. • The actual expenditures for FEMA – Public Assistance OEM DR – 4453 ALN 97.036 were $0, the County reported $870, which overstated expenditures by $870. • The actual expenditures for COVID-19 FEMA-Public Assistance DR-4530, Disaster Grants – Public Assistance (Presidentially Declared Disasters), ALN 97.036, were $28,063, the County reported $21,047, which understated expenditures by $7,016. • The actual expenditures for Emergency Management Performance Grant, ALN 97.042, were $45,000, the County reported $56,250, which overstated expenditures by $11,250. • The actual expenditures for Fire Management Assistance Grand, ALN 97.046, were $0, the County reported $181, which overstated expenditures by $181. Cause of Condition: Policies and procedures have not been designed and implemented to ensure an accurate reporting of expenditures for federal awards. Effect of Condition: These conditions resulted in the misstatement of the expenditures reported on the County’s SEFA and could increase the potential for material noncompliance. Recommendation: OSAI recommends county officials and department heads gain an understanding of federal programs awarded to Washington County. Internal control procedures should be designed and implemented to ensure accurate reporting of expenditures on the SEFA and to ensure compliance with federal requirements. Management Response: District 1 County Commissioner: Not by way of excuse, but truly in response, the Federal programs associated with the COVID response were unnecessarily arduous and created confusion at all levels of government. While the monetary response was accepted, the premise of these programs was nothing more than an administrative shell game. From the outset of the response, guidance was termed as “interim”, then “final interim” and finally, “final” (redundancy intentional). The intent of our national level leadership became more apparent as these programs progressed with each iteration of programming being reliant on returned funds from the previous. Without grandstanding, I will simply say that no entity, regardless of their planning with these programs, will be found as fully compliant. As these programs have a sunset in the near term, I suspect these findings will disappear. District 2 County Commissioner: I was not in office at this time; however, I will work with other elected officials, county officials and department heads to ensure there is an understanding of federal programs awarded to Washington County, and the use of internal control procedures designed and implemented to ensure accurate reporting of expenditures and revenues on the SEFA and to ensure compliance with federal requirements. District 3 County Commissioner: These programs are temporary and difficult to navigate through. I will continue to press staff to report effectively as possible and to be responsive to specific requests that are made. County Clerk: I will work with the other Elected Officials to gain a better understanding of federal programs that are awarded to our County. I will work with the other offices to implement internal controls to ensure accurate reporting on the SEFA. County Sheriff: I have and will continue to work toward compliance in these areas of SEFA. I will continue to work with the other elected officials to gain proper understanding of Federal Programs and Requirements. Criteria: Title 2 CFR 200 § 200.210(a)(b) Financial Statements reads as follows: (a) Financial statements. The auditee must prepare financial statements that reflect its financial position, results of operations or changes in net assets, and where appropriate, cash flows for the fiscal year audited. The financial statements must be for the same organizational unit and fiscal year that is chosen to meet the requirements of this part. However, non-Federal entity-wide financial statements may also include departments, agencies, and other organizational units that have separate audits in accordance with §200.514 Scope of audit, paragraph (a) and prepare separate financial statements. (b) Schedule of expenditures of federal awards. The auditee must also prepare a schedule of expenditures of Federal awards for the period covered by the auditee’s financial statement, which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended. 2 CFR § 200.303(a) Internal Controls reads as follows: The non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). 2 CFR § 200.508(b) Auditee responsibilities reads as follows: The auditee must: Prepare appropriate financial statements, including the schedule of expenditures of Federal awards in accordance with §200.510 Financial statements. 2 CFR § 200.510 (b) Financial statements reads as follows: Schedule of expenditures of Federal awards. The auditee must also prepare a schedule of expenditures of Federal awards for the period covered by the auditee's financial statements which must include the total Federal awards expended as determined in accordance with §200.502 Basis for determining Federal awards expended. [….] Additionally, GAO Standards – Section 2 – Establishing an Effective Internal Control System – OV2.23 states in part: Objectives of an Entity – Compliance Objectives Management conducts activities in accordance with applicable laws and regulations. As part of specifying compliance objectives, the entity determines which laws and regulations apply to the entity. Management is expected to set objectives that incorporate these requirements. Furthermore, GAO Standards – Principle 6 – Define Objectives and Risk Tolerances – 6.05 states: Definitions of Objectives Management considers external requirements and internal expectations when defining objectives to enable the design of internal control. Legislators, regulators, and standardsetting bodies set external requirements by establishing the laws, regulations, and standards with which the entity is required to comply. Management identifies, understands, and incorporates these requirements into the entity’s objectives. Management sets internal expectations and requirements through the established standards of conduct, oversight structure, organizational structure, and expectations of competence as part of the control environment.