Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding 2024-002: Untimely Review of Subrecipient Single Audit Reports Federal Agency: The Corporation for National and Community Service U.S. Department of Agriculture (USDA) U.S. Department of Commerce (USDOC) U.S. Department of Defense (USDOD) U.S. Department of Education (USDE) U.S. Department of Energy (USDOE) U.S. Department of Health and Human Services (USDHHS) U.S. Department of Homeland Security (USDHS) U.S. Department of Housing and Urban Development (USHUD) U.S. Department of Interior (USDOI) U.S. Department of Justice (USDOJ) U.S. Department of Transportation (USDOT) U.S. Director of National Intelligence (USDNI) U.S. Environmental Protection Agency (USEPA) National Aeronautics and Space Administration (NASA) National Endowment for the Humanities (NEH) National Science Foundation (NSF) Social Security Administration (SSA) U.S. Department of Veteran Affairs (USDVA) All Pass-Through Entities Program Name: Research and Development (R&D) Cluster ALN and Program Expenditures: Various ($539,302,615) Federal Award Numbers: Various – See schedule of award numbers Federal Award Year: Various – See schedule of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Condition Found: The University did not review single audit reports received from its subrecipients for the R&D Cluster program on a timely basis. The University’s policy requires review of the single audit reports received from its subrecipients within six months of the date of acceptance of the single audit report by the Federal Audit Clearinghouse (FAC). During our testing of a sample of single audit report reviews for 40 subrecipients (with expenditures of $31,826,626), we noted the University did not review the single audit reports for nine subrecipients (with expenditures of $4,812,867) within six months of the date of acceptance of the single audit report by the FAC. Upon further review, management evaluated all the single audit report reviews performed during fiscal year 2024 for its subrecipients of the R&D Cluster program (195 single audit reviews for subrecipients with expenditures of $81,358,862) and determined that the single audit reports for 70 subrecipients (with expenditures of $48,019,701) were not reviewed within six months of the date of acceptance of the single audit report by the FAC. Specifically, these single audit reports were reviewed 181-392 days after acceptance by the FAC. The University’s subrecipient expenditures under the R&D Cluster program for the year ended June 30, 2024 were $81,358,862. Criteria: According to 2 CFR 200.332(e), a pass-through entity is required to monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. Further, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision for audit findings pertaining to the Federal Award provided to the subrecipient from the pass-through entity within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC) and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure single audit reports are reviewed in a timely manner in accordance with University policy. Cause: In discussing these conditions with University officials, they stated this delay was an oversight due in part to limited staffing resources to review the single audits while the University was implementing a new financial system. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and grant agreements. Repeat Finding: A similar finding was not reported in the prior year audit. Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend the University establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Views of University Officials The University concurs with the finding and has already begun to address these concerns. Although there was a delay in the review of single audit reports, the University did not miss or delay any required action with said subrecipients as a result. See separate report for planned corrective action.
Finding No. 2024-007: Inadequate Internal Controls over Monitoring of Subrecipient Audits Type of Finding: Significant Deficiency and Non-Compliance Assistance Listing Title: Disaster Grants - Public Assistance (Presidentially Declared Disasters) Assistance Listing Number: 97.036 Federal Award Number: 4155DRSDP00000001,4440DRSDP00000001, 4463DRSDP00000001, 4467DRSDP00000001, 4469DRSDP00000001, 4527DRSDP00000001, 4656DRSDP00000001, 4664DRSDP00000001, 4689DRSDP00000001, and 4718DRSDP00000001 Federal Award Year: 2019, 2020, 2021, 2022, 2023, and 2024 Federal Agency: Department of Homeland Security Category of Finding: Subrecipient Monitoring Criteria: 2 CFR section 200.332 requires, among other things, that a pass-through entity verify that subrecipients receive Single Audits as required by 2 CFR 200.501(a), follow-up to ensure that the subrecipient takes timely and appropriate action on audit findings, and issue a management decision on applicable audit findings pertaining to the subaward. 2 CFR 200.521(d) requires this management decision to be issued within six months of acceptance of the audit report by the Federal Audit Clearinghouse (FAC). Condition: The Department of Public Safety (DPS) receives funding under ALN 97.036, Disaster Grants - Public Assistance (Presidentially Declared Disasters) (Public Assistance) and makes subawards to local governments and private nonprofit entities to respond to and recover from presidentially declared disasters. During FY24, DPS did not have adequate controls in place to ensure that Single Audits were obtained for all applicable subrecipients within the required time frame, that those audits were reviewed to ensure timely and appropriate action was taken on any findings, and that a management decision was issued by DPS within the six-month time frame required by federal regulations. Based on our review of funding amounts passed through by DPS, there were seven subrecipients receiving Federal grant payments that would require a Single Audit for the auditee’s fiscal year 2023. These subrecipients had received the required audits and their audit reports were accepted by the FAC, however, two of the audits were not reviewed timely by DPS. Of those two subrecipient audits, one had an audit finding pertaining to the Public Assistance program and DPS had not issued a management decision within the time frame required by 2 CFR 200.521. Cause: Controls were not adequate to identify when subrecipient audits were due and obtain all required audits off the FAC in a timely manner. While DPS personnel did track expenditures to determine which subrecipients were required to have audits under 2 CFR 200.501(a), failure to monitor subrecipient year-ends and the related audit deadlines resulted in some audits not being obtained and reviewed in a timely manner. Effect: This resulted in noncompliance with subrecipient monitoring requirements and increased the risk of subrecipient audit findings not being corrected in a timely manner. Questioned Costs: None. Repeat Finding from Prior Year: No. Recommendation: We recommend the Department implement controls to ensure that audits of subrecipients are obtained and followed up on in a timely manner and that management decisions are issued within the required time frame for all audit findings pertaining to DPS subawards. Views of Responsible Officials: The Department of Public Safety concurs with the audit finding.
Assistance Listings number and name: 84.002 Adult Education—Basic Grants to States Award numbers and years: 24FABASC-412421-01A, July 1, 2023 through June 30, 2024; 24FIELCC-412421-01A, July 1, 2023 through June 30, 2024; 24FIETCO-412421-01A, July 1, 2023 through June 30, 2024; 24FPRLEC-412421-01A, July 1, 2023 through June 30, 2024; 24FIECTC-412421-01A, July 1, 2023 through June 30, 2024 Compliance requirements: Activities Allowed or Unallowed and Allowable Costs / Cost Principles Questioned costs: $52,754 Assistance Listings number and name: 84.031 Higher Education—Institutional Aid Award numbers and years: P031S160090, October 1, 2016 through September 30, 2023; P031S190167, October 1, 2019 through September 30, 2024; P031S200096, October 1, 2020 through September 30, 2025; P031S200281, October 1, 2020 through September 30, 2025; P031C210057, October 1, 2021 through September 30, 2026; P031C210077, October 1, 2021 through September 30, 2026; P031S220015, October 1, 2022 through September 30, 2027; P031S220179, October 1, 2022 through September 30, 2027; P031A230147, October 1, 2023 through September 30, 2028; P031S230158, October 1, 2023 through September 30, 2028 Compliance requirements: Activities allowed or unallowed Questioned costs: $20,411 Federal agency: U.S. Department of Education Total questioned costs: $73,165 Condition—Contrary to federal regulations, State law, and District policies, the District did not always retain documentation supporting the Adult Education—Basic Grants to States and Higher Education—Institutional Aid programs’ payroll costs or approve employee time sheets after the work was performed for these programs. Specifically, the District could not provide documentation to support employees’ pay rates and authorization to perform work for these programs, such as offer letters, contracts, and personnel action forms, or did not approve employee time sheets after the work was performed for 22 of 54 payroll transactions we tested totaling $73,165. See finding 2024-01 in our Report on Internal Controls and Compliance for a similar finding related to the District not reviewing or approving employee timesheets.1 Also, see Table 1 on the next page for further information. Table 1 Summary of the $73,165 of payroll costs the District did not properly support or approve Fiscal year 2024 84.002 Adult Education—Basic Grants to States 84.031 Higher Education—Institutional Aid Total for both programs Total employees tested 35 19 54 Total employees with unsupported pay rates and lack of authorization to perform work for the programs 7 1 8 Total unsupported payroll costs $52,366 $9,636 $62,002 Total employee time sheets lacking approval after the work was performed2 2 12 14 Total unapproved payroll costs $388 $10,775 $11,163 Total number of employees with unsupported or unapproved payroll costs 9 13 22 Total salaries not supported $52,754 $20,411 $73,165 Effect—The District’s failure to retain documentation supporting payroll costs and approve time sheets increased the risk that the $52,754 for the Adult Education—Basic Grants to States and $20,411 for the Higher Education—Institutional Aid programs may not have been spent in accordance with their award terms and conditions. Consequently, the District may be required to return these monies to the federal agency in accordance with federal requirements.3 Further, see Table 2 for information on the overall payroll costs per program during fiscal year 2024 that are at an increased risk of not being spent in accordance with the award terms and conditions. Finally, the District is at risk that this finding applies to other federal programs it administers. Table 2 Calculation of percent of payroll costs to total program expenditures Fiscal year 2024 84.002 Adult Education—Basic Grants to States 84.031 Higher Education—Institutional Aid Total number of employees 279 214 Total payroll costs $3,613,133 $1,984,462 Total program costs $5,026,228 $6,696,263 % of payroll costs to total program costs 72% 30% Cause—The District’s management reported that it did not retain documentation to support employees’ pay rates and authorization to perform work for the federal programs for employees hired prior to 2018 as they were archived and support was no longer available, and some offers for temporary employees were made verbally over the phone and never documented. The District’s policies and procedures lack requirements to document all employment offers, including temporary employment offers. Additionally, as discussed in finding 2024-01 in our Report on Internal Controls and Compliance, some supervisors did not follow District policies and procedures requiring employees’ time sheets to be reviewed and approved either before processing payroll or within 3 business days after receiving a payroll email notification that the employee’s time sheet needed approval.1 Finally, District management did not sufficiently monitor whether each college’s Human Resources Department was enforcing these policies and procedures or verifying that supervisors reviewed and approved employees’ time sheets, as required. Criteria—Federal regulation requires the District to maintain records for salaries and wages charged to federal awards that accurately reflect the work performed to ensure they are accurate, allowable, and properly allocated (2 CFR §200.430[g][1][i]). Also, federal regulation, similar to State law and the District’s record retention policies, requires the District to retain all public records, including those contained in personnel files, related to a federal program for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or pass-through grantor (2 CFR §200.334).4,5 Further, the District’s written procedures require each employee’s time sheet to be reviewed and approved by the employee’s supervisor either before processing payroll or within 3 business days from receiving a payroll email notification that the employee’s time sheet needs approval. Additionally, each college’s Human Resources Department is responsible for verifying that supervisors review and approve time sheets timely.6 Finally, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations—The District should: 1. Retain documentation for all payroll costs, such as employment agreements or acceptance letters, to demonstrate employees’ salaries and wages are authorized to be charged to federal programs and spent in accordance with the programs’ award terms and conditions. 2. Review the fiscal year 2024 payroll costs for the Adult Education—Basic Grants to States and Higher Education—Institutional Aid programs to ensure they were properly supported and spent in accordance with the award terms and conditions and coordinate with the U.S. Department of Education, as necessary, to adjust future federal reimbursement requests or repay any unallowable costs the District charged to the programs. 3. Enforce and train employees on District written procedures and requirements to: a. Retain all public records, including those contained in personnel files, related to a federal program for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or pass-through grantor. b. Ensure supervisors review and approve employees’ time sheets, either before payroll is processed or within 3 business days from receiving the payroll email notification that a time sheet needs approval, to verify employees accurately reported their time worked. This review should be performed after the employee performed the work to ensure the payroll costs charged to the programs accurately reflect the work performed and are accurate, allowable, and properly allocated. 4. Update District written procedures to require documentation of all employment offers, including offers for temporary employees. The District’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. 1 Arizona Auditor General. (2024). Report on Internal Control and Compliance, June 30, 2024. Phoenix, AZ. https://www.azauditor.gov/sites/default/files/2025-02/MaricopaCountyCommunityCollegeDistrictJune30_2024ReportOnInternalControlAndCompliance.pdf 2 The 14 employee time sheets lacking approval after the work was performed includes 5 time sheets totaling $6,917 for the Higher Education—Institutional Aid program that were never approved by a supervisor and 2 time sheets totaling $388 for the Adult Education—Basic Grants to States program and 7 time sheets totaling $3,858 for the Higher Education—Institutional Aid program that were approved by a supervisor between 1 and 7 days prior to the work being performed by the employee. 3 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the District, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 4 Maricopa County Community College District (MCCCD). (2023). Staff Policy Manual. 5 Arizona State Library, Archives and Public Records. (2023) General Retention Schedule Created for All Public Bodies. Retrieved 3/12/25 from https://apps.azlibrary.gov/files/docs/all_general_schedules_searchable.pdf 6 Maricopa County Community College District (MCCCD). Version 1.1 (2019). Monitoring Time Approvals: Monitoring Procedures.
Assistance Listings number and name: 84.002 Adult Education—Basic Grants to States Award numbers and years: 24FABASC-412421-01A, July 1, 2023 through June 30, 2024; 24FIELCC-412421-01A, July 1, 2023 through June 30, 2024; 24FIETCO-412421-01A, July 1, 2023 through June 30, 2024; 24FPRLEC-412421-01A, July 1, 2023 through June 30, 2024; 24FIECTC-412421-01A, July 1, 2023 through June 30, 2024 Compliance requirements: Activities Allowed or Unallowed and Allowable Costs / Cost Principles Questioned costs: $52,754 Assistance Listings number and name: 84.031 Higher Education—Institutional Aid Award numbers and years: P031S160090, October 1, 2016 through September 30, 2023; P031S190167, October 1, 2019 through September 30, 2024; P031S200096, October 1, 2020 through September 30, 2025; P031S200281, October 1, 2020 through September 30, 2025; P031C210057, October 1, 2021 through September 30, 2026; P031C210077, October 1, 2021 through September 30, 2026; P031S220015, October 1, 2022 through September 30, 2027; P031S220179, October 1, 2022 through September 30, 2027; P031A230147, October 1, 2023 through September 30, 2028; P031S230158, October 1, 2023 through September 30, 2028 Compliance requirements: Activities allowed or unallowed Questioned costs: $20,411 Federal agency: U.S. Department of Education Total questioned costs: $73,165 Condition—Contrary to federal regulations, State law, and District policies, the District did not always retain documentation supporting the Adult Education—Basic Grants to States and Higher Education—Institutional Aid programs’ payroll costs or approve employee time sheets after the work was performed for these programs. Specifically, the District could not provide documentation to support employees’ pay rates and authorization to perform work for these programs, such as offer letters, contracts, and personnel action forms, or did not approve employee time sheets after the work was performed for 22 of 54 payroll transactions we tested totaling $73,165. See finding 2024-01 in our Report on Internal Controls and Compliance for a similar finding related to the District not reviewing or approving employee timesheets.1 Also, see Table 1 on the next page for further information. Table 1 Summary of the $73,165 of payroll costs the District did not properly support or approve Fiscal year 2024 84.002 Adult Education—Basic Grants to States 84.031 Higher Education—Institutional Aid Total for both programs Total employees tested 35 19 54 Total employees with unsupported pay rates and lack of authorization to perform work for the programs 7 1 8 Total unsupported payroll costs $52,366 $9,636 $62,002 Total employee time sheets lacking approval after the work was performed2 2 12 14 Total unapproved payroll costs $388 $10,775 $11,163 Total number of employees with unsupported or unapproved payroll costs 9 13 22 Total salaries not supported $52,754 $20,411 $73,165 Effect—The District’s failure to retain documentation supporting payroll costs and approve time sheets increased the risk that the $52,754 for the Adult Education—Basic Grants to States and $20,411 for the Higher Education—Institutional Aid programs may not have been spent in accordance with their award terms and conditions. Consequently, the District may be required to return these monies to the federal agency in accordance with federal requirements.3 Further, see Table 2 for information on the overall payroll costs per program during fiscal year 2024 that are at an increased risk of not being spent in accordance with the award terms and conditions. Finally, the District is at risk that this finding applies to other federal programs it administers. Table 2 Calculation of percent of payroll costs to total program expenditures Fiscal year 2024 84.002 Adult Education—Basic Grants to States 84.031 Higher Education—Institutional Aid Total number of employees 279 214 Total payroll costs $3,613,133 $1,984,462 Total program costs $5,026,228 $6,696,263 % of payroll costs to total program costs 72% 30% Cause—The District’s management reported that it did not retain documentation to support employees’ pay rates and authorization to perform work for the federal programs for employees hired prior to 2018 as they were archived and support was no longer available, and some offers for temporary employees were made verbally over the phone and never documented. The District’s policies and procedures lack requirements to document all employment offers, including temporary employment offers. Additionally, as discussed in finding 2024-01 in our Report on Internal Controls and Compliance, some supervisors did not follow District policies and procedures requiring employees’ time sheets to be reviewed and approved either before processing payroll or within 3 business days after receiving a payroll email notification that the employee’s time sheet needed approval.1 Finally, District management did not sufficiently monitor whether each college’s Human Resources Department was enforcing these policies and procedures or verifying that supervisors reviewed and approved employees’ time sheets, as required. Criteria—Federal regulation requires the District to maintain records for salaries and wages charged to federal awards that accurately reflect the work performed to ensure they are accurate, allowable, and properly allocated (2 CFR §200.430[g][1][i]). Also, federal regulation, similar to State law and the District’s record retention policies, requires the District to retain all public records, including those contained in personnel files, related to a federal program for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or pass-through grantor (2 CFR §200.334).4,5 Further, the District’s written procedures require each employee’s time sheet to be reviewed and approved by the employee’s supervisor either before processing payroll or within 3 business days from receiving a payroll email notification that the employee’s time sheet needs approval. Additionally, each college’s Human Resources Department is responsible for verifying that supervisors review and approve time sheets timely.6 Finally, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations—The District should: 1. Retain documentation for all payroll costs, such as employment agreements or acceptance letters, to demonstrate employees’ salaries and wages are authorized to be charged to federal programs and spent in accordance with the programs’ award terms and conditions. 2. Review the fiscal year 2024 payroll costs for the Adult Education—Basic Grants to States and Higher Education—Institutional Aid programs to ensure they were properly supported and spent in accordance with the award terms and conditions and coordinate with the U.S. Department of Education, as necessary, to adjust future federal reimbursement requests or repay any unallowable costs the District charged to the programs. 3. Enforce and train employees on District written procedures and requirements to: a. Retain all public records, including those contained in personnel files, related to a federal program for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or pass-through grantor. b. Ensure supervisors review and approve employees’ time sheets, either before payroll is processed or within 3 business days from receiving the payroll email notification that a time sheet needs approval, to verify employees accurately reported their time worked. This review should be performed after the employee performed the work to ensure the payroll costs charged to the programs accurately reflect the work performed and are accurate, allowable, and properly allocated. 4. Update District written procedures to require documentation of all employment offers, including offers for temporary employees. The District’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. 1 Arizona Auditor General. (2024). Report on Internal Control and Compliance, June 30, 2024. Phoenix, AZ. https://www.azauditor.gov/sites/default/files/2025-02/MaricopaCountyCommunityCollegeDistrictJune30_2024ReportOnInternalControlAndCompliance.pdf 2 The 14 employee time sheets lacking approval after the work was performed includes 5 time sheets totaling $6,917 for the Higher Education—Institutional Aid program that were never approved by a supervisor and 2 time sheets totaling $388 for the Adult Education—Basic Grants to States program and 7 time sheets totaling $3,858 for the Higher Education—Institutional Aid program that were approved by a supervisor between 1 and 7 days prior to the work being performed by the employee. 3 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the District, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 4 Maricopa County Community College District (MCCCD). (2023). Staff Policy Manual. 5 Arizona State Library, Archives and Public Records. (2023) General Retention Schedule Created for All Public Bodies. Retrieved 3/12/25 from https://apps.azlibrary.gov/files/docs/all_general_schedules_searchable.pdf 6 Maricopa County Community College District (MCCCD). Version 1.1 (2019). Monitoring Time Approvals: Monitoring Procedures.
Program: Housing Voucher Cluster Federal Financial Assistance Listing No.: 14.871, 14.879 Federal Agency: U.S. Department of Housing and Urban Development Passed-through: n/a – direct award Award Number and Year: CA131, 2023/2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Instance of Noncompliance Criteria: 2 CFR 200.331(d) and 2 CFR 200.331(e) establishes the requirement that the pass-through entity must monitor the activities of each subrecipient of program funds to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward and achieves performance goals. 2 CFR 200.331(d) requires that the monitoring activities must include: 1) Reviewing of financial and performance reports as required by the pass-through entity. 2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. 3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521 Management decision. Condition: We found that although the County performed a risk assessment and monitoring plan for its subrecipient, adherence to the plan was not documented. Pursuant to the County’s risk assessment of the subrecipient, a site visit was required, and quarterly reports were required to be obtained. The County did not formally document and communicate the results of the site visit performed during the year. The County also did not obtain the quarterly reports for the fiscal year until September 5th of the subsequent fiscal year. Further, there was no documented review of the quarterly reports by the County. Cause: Subrecipient monitoring policies and procedures do not require the department to document its review and results of monitoring procedures. Effect: The County did not document the results of the monitoring procedures performed over the subaward. Questioned Costs: None reported. Context/Sampling: We selected 100% of the County’s subrecipients of the program. Repeat Finding from Prior Year(s): Yes, prior year finding 2023-002. Recommendation: We recommend that the County continue to strengthen its policies and procedures over subrecipient monitoring to ensure that that the results of monitoring procedures are documented and reviewed. Views of Responsible Officials: Management agrees with the finding. See separate corrective action plan.
Program: Housing Voucher Cluster Federal Financial Assistance Listing No.: 14.871, 14.879 Federal Agency: U.S. Department of Housing and Urban Development Passed-through: n/a – direct award Award Number and Year: CA131, 2023/2024 Compliance Requirement: Subrecipient Monitoring Type of Finding: Material Weakness in Internal Control over Compliance, Instance of Noncompliance Criteria: 2 CFR 200.331(d) and 2 CFR 200.331(e) establishes the requirement that the pass-through entity must monitor the activities of each subrecipient of program funds to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward and achieves performance goals. 2 CFR 200.331(d) requires that the monitoring activities must include: 1) Reviewing of financial and performance reports as required by the pass-through entity. 2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. 3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521 Management decision. Condition: We found that although the County performed a risk assessment and monitoring plan for its subrecipient, adherence to the plan was not documented. Pursuant to the County’s risk assessment of the subrecipient, a site visit was required, and quarterly reports were required to be obtained. The County did not formally document and communicate the results of the site visit performed during the year. The County also did not obtain the quarterly reports for the fiscal year until September 5th of the subsequent fiscal year. Further, there was no documented review of the quarterly reports by the County. Cause: Subrecipient monitoring policies and procedures do not require the department to document its review and results of monitoring procedures. Effect: The County did not document the results of the monitoring procedures performed over the subaward. Questioned Costs: None reported. Context/Sampling: We selected 100% of the County’s subrecipients of the program. Repeat Finding from Prior Year(s): Yes, prior year finding 2023-002. Recommendation: We recommend that the County continue to strengthen its policies and procedures over subrecipient monitoring to ensure that that the results of monitoring procedures are documented and reviewed. Views of Responsible Officials: Management agrees with the finding. See separate corrective action plan.
2024-037 Oregon Business Development Department Assign responsibility to ensure review of subrecipient audit reports Federal Awarding Agency: U.S. Department of the Treasury Assistance Listing Number and Name: 21.027 Coronavirus State and Local Fiscal Recovery Fund (COVID-19) Federal Award Numbers and Years: SLFRP4454, 2020 (COVID-19) Compliance Requirements: Subrecipient Monitoring Type of Finding: Significant Deficiency; Noncompliance Prior Year Findings: N/A Questioned Costs: N/A Criteria: 2 CFR 200.332(e)(2), (e)(3), (g), (h), (i); 2 CFR 200.521(a), (c), (d) Federal regulations require recipients of federal awards ensure their subrecipients expending $750,000 or more during fiscal years prior to October 1, 2024, are audited according to requirements in 2 CFR 200 Subpart F, and then to perform certain actions dependent upon audit results. To satisfy this requirement, the Department of Administrative Services assigns Oregon state departments to be audit agencies. An audit agency is to: • Ensure the subrecipient received an audit or consider sanctions per 2 CFR 200.339. • Ensure the subrecipient takes corrective action on all findings negatively affecting subawards. • Issue a management decision within six months of the Federal Audit Clearinghouse’s acceptance of the subrecipient’s audit report if there were findings pertaining to the agency’s subawards. • Contact other state agencies that have also passed through funds to the subrecipients (contributing agencies), alerting them to findings related to their programs. In fiscal year 2024, DAS assigned OBDD to review 24 of the state’s 369 subrecipients’ audits, receiving a total of $42.3 million in pass-through funding from 11 state agencies. OBDD did not review any of these entities due to staff turnover. We reviewed two of these subrecipients and found neither had audit findings. This does not preclude the remaining 22 subrecipients from having audit findings requiring communication We recommend department management complete its review of subrecipient audits as soon as possible to ensure its monitoring procedures are sufficient, and to inform contributing agencies of any deficiencies that may affect their programs.
2024-040 Oregon Department of Emergency Management Assign responsibility to ensure review of subrecipient audit reports Federal Awarding Agency: U.S. Department of Homeland Security Assistance Listing Number and Name: 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) Federal Award Numbers and Years: Multiple Compliance Requirements: Subrecipient Monitoring Type of Finding: Significant Deficiency; Noncompliance Prior Year Findings: N/A Questioned Costs: N/A Criteria: 2 CFR 200.332(e)(2), (e)(3), (g), (h), (i); 2 CFR 200.521(a), (c), (d) Federal regulations require recipients of federal awards ensure its subrecipients expending $750,000 or more during fiscal years prior to October 1, 2024, are audited according to requirements in 2 CFR 200 Subpart F, and then to perform certain actions dependent upon audit results. To satisfy this requirement, the Department of Administrative Services assigns Oregon state departments to be audit agencies. An audit agency is to: • Ensure the subrecipient received an audit or consider sanctions per 2 CFR 200.339. • Ensure the subrecipient takes corrective action on all findings negatively affecting subawards. • Issue a management decision within six months of the Federal Audit Clearinghouse’s acceptance of the subrecipient’s audit report if there were findings pertaining to the agency’s subawards. • Contact other state agencies that have also passed through funds to the subrecipients (contributing agencies), alerting them to findings related to their programs. In fiscal year 2024, DAS assigned the Oregon Department of Emergency Management (department) to review 27 of the state’s 369 subrecipients’ audits, receiving a total of $176.2 million in pass-through funding from 20 state agencies. The department did not review any of these entities because they determined their other commitments were higher priorities. We reviewed two of these subrecipients and found one expended a total of $36 million and had one audit finding that may affect various federal programs. This subrecipient received pass-through funding from five other contributing agencies who were not informed of the finding. This does not preclude the remaining 25 subrecipients from having audit findings requiring communication to the contributing agencies. We recommend department management complete its review of subrecipient audits as soon as possible to ensure its monitoring procedures are sufficient, and to inform contributing agencies of any deficiencies that may affect their programs.
2024-037 Oregon Business Development Department Assign responsibility to ensure review of subrecipient audit reports Federal Awarding Agency: U.S. Department of the Treasury Assistance Listing Number and Name: 21.027 Coronavirus State and Local Fiscal Recovery Fund (COVID-19) Federal Award Numbers and Years: SLFRP4454, 2020 (COVID-19) Compliance Requirements: Subrecipient Monitoring Type of Finding: Significant Deficiency; Noncompliance Prior Year Findings: N/A Questioned Costs: N/A Criteria: 2 CFR 200.332(e)(2), (e)(3), (g), (h), (i); 2 CFR 200.521(a), (c), (d) Federal regulations require recipients of federal awards ensure their subrecipients expending $750,000 or more during fiscal years prior to October 1, 2024, are audited according to requirements in 2 CFR 200 Subpart F, and then to perform certain actions dependent upon audit results. To satisfy this requirement, the Department of Administrative Services assigns Oregon state departments to be audit agencies. An audit agency is to: • Ensure the subrecipient received an audit or consider sanctions per 2 CFR 200.339. • Ensure the subrecipient takes corrective action on all findings negatively affecting subawards. • Issue a management decision within six months of the Federal Audit Clearinghouse’s acceptance of the subrecipient’s audit report if there were findings pertaining to the agency’s subawards. • Contact other state agencies that have also passed through funds to the subrecipients (contributing agencies), alerting them to findings related to their programs. In fiscal year 2024, DAS assigned OBDD to review 24 of the state’s 369 subrecipients’ audits, receiving a total of $42.3 million in pass-through funding from 11 state agencies. OBDD did not review any of these entities due to staff turnover. We reviewed two of these subrecipients and found neither had audit findings. This does not preclude the remaining 22 subrecipients from having audit findings requiring communication We recommend department management complete its review of subrecipient audits as soon as possible to ensure its monitoring procedures are sufficient, and to inform contributing agencies of any deficiencies that may affect their programs.
2024-040 Oregon Department of Emergency Management Assign responsibility to ensure review of subrecipient audit reports Federal Awarding Agency: U.S. Department of Homeland Security Assistance Listing Number and Name: 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) Federal Award Numbers and Years: Multiple Compliance Requirements: Subrecipient Monitoring Type of Finding: Significant Deficiency; Noncompliance Prior Year Findings: N/A Questioned Costs: N/A Criteria: 2 CFR 200.332(e)(2), (e)(3), (g), (h), (i); 2 CFR 200.521(a), (c), (d) Federal regulations require recipients of federal awards ensure its subrecipients expending $750,000 or more during fiscal years prior to October 1, 2024, are audited according to requirements in 2 CFR 200 Subpart F, and then to perform certain actions dependent upon audit results. To satisfy this requirement, the Department of Administrative Services assigns Oregon state departments to be audit agencies. An audit agency is to: • Ensure the subrecipient received an audit or consider sanctions per 2 CFR 200.339. • Ensure the subrecipient takes corrective action on all findings negatively affecting subawards. • Issue a management decision within six months of the Federal Audit Clearinghouse’s acceptance of the subrecipient’s audit report if there were findings pertaining to the agency’s subawards. • Contact other state agencies that have also passed through funds to the subrecipients (contributing agencies), alerting them to findings related to their programs. In fiscal year 2024, DAS assigned the Oregon Department of Emergency Management (department) to review 27 of the state’s 369 subrecipients’ audits, receiving a total of $176.2 million in pass-through funding from 20 state agencies. The department did not review any of these entities because they determined their other commitments were higher priorities. We reviewed two of these subrecipients and found one expended a total of $36 million and had one audit finding that may affect various federal programs. This subrecipient received pass-through funding from five other contributing agencies who were not informed of the finding. This does not preclude the remaining 25 subrecipients from having audit findings requiring communication to the contributing agencies. We recommend department management complete its review of subrecipient audits as soon as possible to ensure its monitoring procedures are sufficient, and to inform contributing agencies of any deficiencies that may affect their programs.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Cluster name: Workforce Innovation and Opportunity Act (WIOA) Cluster Assistance Listings numbers and names: 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award numbers and years: DI21-002286, April 1, 2022 through June 30, 2024; Alert 23-001, July 1, 2023 through June 30, 2024; Alert 23-003, July 1, 2023 through June 30, 2024; Alert 24-002, July 1, 2023 through May 31, 2024 Federal agency: U.S. Department of Labor Pass-through grantor: Arizona Department of Economic Security Questioned costs: N/A Assistance Listings number and name: 21.027 COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Award numbers and years: 1505-0271, March 3, 2021 through December 31, 2024; 19418, May 31, 2023 through September 30, 2023 Federal agency: U.S. Department of the Treasury Pass-through grantors: Arizona Criminal Justice Commission, City of Tucson, Arizona Housing Coalition, and Arizona Department of Public Safety Questioned costs: N/A Assistance Listings number and name: 97.024 COVID-19 - Emergency Food and Shelter National Board Program Award numbers and years: 027200-048, November 1, 2021 through December 30, 2024; 027200-056, April 1, 2023 through February 29, 2024; 23*115, March 1, 2023 through February 29, 2024; 23*154, April 1, 2023 through February 29, 2024 Federal agency: U.S. Department of Homeland Security Pass-through grantor: United Way EFSP Questioned costs: $347,345 Assistance Listings number and name: 97.141 Shelter and Services Program Award number and year: 24*039, March 1, 2023 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Questioned costs: N/A Compliance requirement: Subrecipient monitoring Total questioned costs: $347,345 Condition—The County’s Grants Management and Innovation Department (Department) awarded over $29 million to 27 subrecipients during fiscal year 2024, or 29% of the County’s total federal expenditures for the federal programs shown in Table 1 below, but did not perform all the required monitoring of its subrecipients’ activities or compliance with award terms and program requirements. Table 1 Summary of subrecipients by federal program Fiscal year 2024 Federal program name Subrecipient information Total number Number tested Total awards Total federal expenditures Subrecipient awards as a percentage of total federal expenditures Workforce Innovation and Opportunity Act (WIOA) Cluster 4 4 $ 568,095 $12,253,972 4.6% Coronavirus State and Local Fiscal Recovery Funds (SLFRF) 17 7 17,241,445 56,862,338 30.3% Emergency Food and Shelter National Board Program (EFS) 4 4 7,810,673 22,622,229 34.5% Shelter and Services Program (SSP) 2 2 3,560,449 8,172,063 43.5% Total 27 17 $29,180,662 $99,910,602 29.2% While the Department performed some monitoring procedures during the year, those procedures were not sufficient to evaluate its subrecipients’ use of program monies in accordance with the award terms, program requirements, and federal regulations. Specifically, contrary to federal regulations, the Department did not perform the following required monitoring procedures: • Perform monitoring activities based on risk assessments performed—The Department did not perform monitoring activities based on risk assessments performed. Specifically, the Department’s risk assessment procedures identified 7 high-risk and 4 moderate-risk subrecipients, but it did not modify its monitoring activities to address the risks identified. Additional monitoring activities could include providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures like reviewing the subrecipient’s policies and procedures obtained to ensure the subrecipients complied with award terms, program requirements, and federal regulations. • Document monitoring procedures, results, and actions taken—For 4 of 4 WIOA subrecipients, 7 of 7 SLFRF subrecipients, 3 of 4 EFS subrecipients, and 1 of 2 SSP subrecipients we tested, while the Department completed and maintained a checklist of subrecipient monitoring procedures, it did not document monitoring results or Department actions taken for these subrecipients based on the checklist results. • Verify subrecipient single audits were conducted timely—The Department did not verify whether 1 of its 4 WIOA subrecipients had a single audit performed. Effect—The Department’s failure to perform required monitoring contributed to $347,345 of misspent EFS program monies that the Department may be required to return to the federal agency in accordance with federal requirements.1 Specifically, the Department’s not reviewing subrecipient procurement policies and procedures aided in allowing 1 EFS subrecipient to render services for which conflicts of interest existed. Specifically, the EFS subrecipient, Catholic Community Services (CCS), began having laundry services provided by a vendor, Amado Laundry, in April 2023, for which it then self-reported to the County a conflict-of-interest violation in May 2024. This violation was a result of a CCS employee forming a vendor relationship with Amado Laundry, which was owned by the employee’s mother. After the Department’s management was made aware of the conflict of interest, they performed monitoring procedures over CCS and identified noncompliance with federal procurement guidelines totaling $347,345, including determining that Amado Laundry charged a rate double the average rates charged by competitors. The County issued a management letter to CCS on September 27, 2024, communicating a conflict-of-interest finding and a procurement standards finding. The conflict-of-interest finding required CCS to develop new, written procurement-related conflict-of-interest procedures in compliance with federal regulations and to create and maintain an ongoing training program related to these federally compliant conflict-of-interest procedures for employees. Further, there is an increased risk that $29 million of program monies the Department awarded to subrecipients may not be spent in accordance with the award terms, program requirements, and federal regulations. If monies are spent inconsistent with program requirements, those who intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. Also, the Department’s not verifying subrecipient single audits were conducted may result in the Department’s not following up on and ensuring corrective action is taken on audit findings that could potentially affect the program and/or issue management decisions for audit findings pertaining to the federal award. Finally, the County is at risk that this finding applies to other federal programs it administers. Cause—The Department’s management reported that they did not always follow County policies and procedures and only performed limited procedures because their subrecipient monitoring policies and procedures were outdated, the number of subrecipients increased significantly during the fiscal year, and they did not have sufficient staff to monitor all subrecipients. The Department’s management also reported that it prioritized transitioning to a new enterprise resource planning (ERP) system rather than monitoring all subrecipients. Further, the County’s policies lacked requirements to perform monitoring activities based on risk assessments performed and to review subrecipients’ policies and procedures to ensure the subrecipients complied with award terms, program requirements, and federal regulations. Criteria—Federal regulation requires the County to monitor subrecipients, which includes required monitoring procedures for (2 CFR §200.332): • Assessing the risk of each subrecipient’s noncompliance and performing monitoring activities based on those risk assessments, such as providing training or technical assistance on program-related matters and performing on-site reviews, selective audits, and/or other monitoring procedures. • Reviewing financial and performance reports. • Verifying single audits were conducted timely. • Following up on and ensuring corrective action is taken on audit findings that could potentially affect the program. • Issuing a management decision for audit findings pertaining to the federal award. In addition, County policies require the County to: • Assess subrecipient risk and establish a monitoring plan and perform monitoring procedures at least every 2 years, including verification of internal controls.2,3 • Review the Federal Audit Clearinghouse at least quarterly to review subrecipient single audits and issue management decision letters, as necessary.2 • Maintain documentation of monitoring procedures, including the monitoring procedure’s results and any Department actions taken.3 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the County— 1. Perform required monitoring of its subrecipients and their compliance with the award terms, program requirements, and federal regulations. 2. Follow its established policies and procedures for performing and documenting monitoring reviews of subrecipients to: a. Maintain documentation of monitoring procedures demonstrating they were performed, including the monitoring procedures’ results and any Department actions taken, if appropriate. b. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. 3. Update its policies and procedures to include: a. A process to determine the appropriate monitoring activities to perform based on subrecipient risk assessments performed, such as providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. b. Review subrecipients’ policies and procedures, including procurement processes, to ensure the subrecipients complied with award terms, program requirements, and federal regulations. 4. Prioritize and allocate sufficient resources, such as staffing, to comply with the award terms, program requirements, federal regulations, and its updated policies, and designate an individual(s) to perform necessary subrecipient-monitoring procedures. 5. Work with U.S. Department of Homeland Security to determine if it will require the Department to reimburse $347,345 in questioned costs. The County’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. This finding is similar to prior-year finding 2022-101 and was initially reported in fiscal year 2022. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-04: Subrecipient Risk Assessment / Management Decisions. 3 Pima County. (2018, June). Grants Management & Innovation Policy number GMI-28: Subrecipient Monitoring.
Finding No. 2024-038 Federal Awarding Agency: USDHS Impact: Noncompliance AL Number and Title: 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) – COVID-19 Federal Award Number: 4094DRAKP00000001, 4413DRAKP00000001, 4533DRAKP00000001 Applicable Compliance Requirement: Subrecipient Monitoring Condition: DMVA management did not issue a management decision for a finding relating to one subrecipient's single audit. Context: Under federal regulations, pass-through entities are responsible for issuing a management decision for audit findings relating to federal awards provided to subrecipients. The management decisions must clearly state whether or not the audit finding is substantiated, the reason for the decision, and the adequacy of the recipient’s proposed corrective actions to address the finding. If the subrecipient has not completed corrective action, a timetable for follow-up should be given. One Disaster Grants subrecipient’s single audit contained a finding and DMVA management did not issue a management decision to the subrecipient. The finding related to the subrecipient not submitting a single audit to the federal audit clearinghouse within nine months after the end of the subrecipient’s fiscal year as required by federal regulations. Cause: DMVA has controls to ensure a management decision is issued on a subrecipient’s single audit finding. However, due to staff not following procedures, the management decision was not issued. Criteria: Title 2 CFR 200.521 states the pass-through entity must be responsible for issuing a management decision for audit findings that relate to Federal awards it makes to subrecipients. Furthermore, Title 2 CFR 200.1 defines a management decision as a pass-through entity’s written determination, provided to the auditee, of the adequacy of the auditee’s proposed corrective actions to address the findings, based on its evaluation of the audit findings and proposed corrective actions. Effect: The lack of management decisions may result in the subrecipient not taking appropriate corrective action on findings. Noncompliance with federal regulations may result in the federal awarding agency imposing additional conditions or taking corrective action, including additional reporting requirements or withholding/terminating funding. Questioned Costs: None Recommendation: DMVA’s finance officer should ensure procedures are followed and a management decision is issued for all subrecipient single audit findings within six months of a subrecipient audit report’s acceptance by the federal audit clearinghouse. Views of Responsible Officials: Management agrees with this finding.
Finding No. 2024-038 Federal Awarding Agency: USDHS Impact: Noncompliance AL Number and Title: 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) 97.036 Disaster Grants – Public Assistance (Presidentially Declared Disasters) – COVID-19 Federal Award Number: 4094DRAKP00000001, 4413DRAKP00000001, 4533DRAKP00000001 Applicable Compliance Requirement: Subrecipient Monitoring Condition: DMVA management did not issue a management decision for a finding relating to one subrecipient's single audit. Context: Under federal regulations, pass-through entities are responsible for issuing a management decision for audit findings relating to federal awards provided to subrecipients. The management decisions must clearly state whether or not the audit finding is substantiated, the reason for the decision, and the adequacy of the recipient’s proposed corrective actions to address the finding. If the subrecipient has not completed corrective action, a timetable for follow-up should be given. One Disaster Grants subrecipient’s single audit contained a finding and DMVA management did not issue a management decision to the subrecipient. The finding related to the subrecipient not submitting a single audit to the federal audit clearinghouse within nine months after the end of the subrecipient’s fiscal year as required by federal regulations. Cause: DMVA has controls to ensure a management decision is issued on a subrecipient’s single audit finding. However, due to staff not following procedures, the management decision was not issued. Criteria: Title 2 CFR 200.521 states the pass-through entity must be responsible for issuing a management decision for audit findings that relate to Federal awards it makes to subrecipients. Furthermore, Title 2 CFR 200.1 defines a management decision as a pass-through entity’s written determination, provided to the auditee, of the adequacy of the auditee’s proposed corrective actions to address the findings, based on its evaluation of the audit findings and proposed corrective actions. Effect: The lack of management decisions may result in the subrecipient not taking appropriate corrective action on findings. Noncompliance with federal regulations may result in the federal awarding agency imposing additional conditions or taking corrective action, including additional reporting requirements or withholding/terminating funding. Questioned Costs: None Recommendation: DMVA’s finance officer should ensure procedures are followed and a management decision is issued for all subrecipient single audit findings within six months of a subrecipient audit report’s acceptance by the federal audit clearinghouse. Views of Responsible Officials: Management agrees with this finding.
Criteria or specific requirement: Title 2 – Grants and Agreements. Subtitle A – Office of Management and Budget Guidance for Grants and Agreements. Chapter II – Office of Management and Budget Guidance. Part 200 – Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D – Post Federal Award Requirements. Standards for Financial and Program Management. §200.303 Internal controls (2 CFR 200.303): The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Title 2 – Grants and Agreements. Subtitle A – Office of Management and Budget Guidance for Grants and Agreements. Chapter II – Office of Management and Budget Guidance. Part 200 – Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D – Post Federal Award Requirements. Subrecipient Monitoring and Management. §200.332 Requirements for pass-through entities (2 CFR 200.332): A pass-through entity must: (c) Evaluate each subrecipient’s fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient’s risk, a passthrough entity should consider the following: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient’s cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to crosscutting audit findings in accordance with section §200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. California Code of Regulations. Title 5 Education. § 18023. Compliance Reviews of Contractors. (b) At least once every three (3) years and as resources permit, the California Department of Education shall conduct reviews at the contractor's office(s) and operating facility(ies) to determine the contractor's compliance with applicable laws, regulations or contractual provisions. Child Care and Development Fund (CCDF) Plan for State/Territory California FFY 2022-24, Amendment 4. Chapter 8 Ensure Grantee Program Integrity and Accountability. 8.1 Internal Controls and Accountability Measures to Help Ensure Program Integrity. 8.1.1 Process to train about CCDF requirements and program integrity. States and territories are required to describe effective internal controls that are in place to ensure program integrity and accountability (98.68(a)), including processes to train child care providers and staff of the Lead Agency and other agencies engaged in the administration of CCDF about program requirements and integrity. v. Monitor and assess policy implementation on an ongoing basis. The Lead Agency conducts announced Categorical Program Monitoring (CPM)/Contract Monitoring Reviews (CMRs) for each contractor on a three- or four-year cycle for non-LEAs and LEAs respectively. The Lead Agency’s Governance and Administration Unit (GAU) conducts ongoing review of individual contractors by sampling the eligibility and need documentation in family files to estimate and reduce error rates. Additionally, the Lead Agency provides ongoing training and technical assistance to contractors in regional sessions, in one-on-one sessions, and/or in cluster with webinars or during face to-face presentations. These sessions address CCDF program administration, requirements, and integrity Condition: We selected 60 subrecipient contracts (21 local educational agency (LEA) contracts and 39 non-LEA contracts) from 60 subrecipient entities and tested compliance with subrecipient monitoring requirements. We noted the following: LEA • 2 LEA contracts/contractors had no record of on-site monitoring over five years. Non-LEA • 3 non-LEA contracts/contractors had no records available to demonstrate risk assessment of the contractor. • 11 non-LEA contracts/contractors had no record of on-site monitoring over five years. Questioned costs: None Context: See “Condition.” Cause: In fiscal year 2021, the administration of the CCDF Cluster program was transitioned from the California Department of Education (CDE) to CDSS. CDSS has been in the process of revising certain policies and procedures, including contractor monitoring. In addition, certain records related to CDE monitoring activities for the contracts selected were unavailable for review. Effect: CDSS is at risk for contractor noncompliance if monitoring procedures are not properly designed or executed, and/or documents demonstrating monitoring are not maintained. Repeat Finding: This was reported in the previous year as finding 2023-012. Recommendation: To enhance the effectiveness of the annual risk assessment process, we recommend a thorough evaluation that focuses on the identification and inclusion of all subrecipients and defined risk criteria as mandated in 2 CFR 200.332. Furthermore, it is crucial to establish and document a transparent basis for risk profiling that directly correlates such profiles with compliance monitoring activities across fiscal, program, and single audit requirements. Furthermore, we recommend CDSS perform a comprehensive post-transition review to ensure all monitoring responsibilities transferred from CDE have been fully identified and assigned. This review should validate robust mechanisms are in place for the accurate documentation and proper retention of records. Views of responsible officials: Management’s response is reported in “Management’s Response and Corrective Action Plan” included in a separate section at the end of this report.
Assistance Listing 93.914 HIV Emergency Relief Project Grants Condition: The Office of Health and Human Services' (HHS) Audit Unit failed to issue a management decision for audit findings related to two subrecipients of the city, who each had audit findings reported in their respective single audits. The fiscal year 2023 single audit of Bebashi and the fiscal year 2024 single audit of The Children's Hospital of Pennsylvania had a significant deficiency reported under the HIV Emergency Relief Program (ALN 93.914) in the Internal Controls over Major Programs section of the Schedule of Findings and Questioned Costs. Funding for HIV Emergency Relief program is received directly from the U.S. Department of Health and Human Services. Criteria: 2 CFR section 200.332(e) states that the pass-through entity must issue a management decision for audit findings pertaining only to the federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Effect: The management decision serves to confirm the audit findings and outline a corrective action plan for the subrecipient. Failure to issue a management decision could lead to unresolved findings at the subrecipient level. Cause: HHS incorrectly relies on the auditing firms that perform subrecipient single audits to issue a management decision per 2 CFR section 200.312(e). Recommendation: We recommend that HHS management modifies and/or strengthens its current policies and procedures to ensure that a management decision letter will be issued for audit findings relating to any federal awards that were provided to subrecipients. Views of the Responsible Officials and Corrective Action Plan: HHS acknowledges the Controller’s finding that management decision letters were not issued for specific subrecipient audit findings under ALN 93.914, as required under 2 CFR 200.332(e) and 200.521. While the formal letters were not issued, HHS did review the audit findings, obtained and evaluated the subrecipients’ corrective action plans and confirmed that no questioned costs or additional risks remained. These steps ensured that the underlying corrective actions were completed. To strengthen documentation and ensure consistency across all federal programs, HHS will adopt the following corrective measures: 1. Standard management Decision Template • HHS will adopt a simple, uniform management decision template and clear steps for documenting decisions within the required federal timelines. 2. Central Location for Documentation • HHS will store all management decision letters and related materials in one designated shared location to ensure accessibility and consistent record-keeping. 3. Brief Staff Guidance • HHS will provide concise written guidance to staff outlining: o When a management decision is required, o How to complete it using the template, and o What documentation must be retained? These corrective actions will ensure consistent compliance with federal requirements while supporting the City’s long-term goal of standardizing financial processes across departments. Contact Person: Landuleni Shipanga, Controller, City of Philadelphia Office of Children and Families, 215-683-6366
State Agency: Illinois Governor’s Office of Management and Budget (GOMB) Federal Agency: U.S. Department of Agriculture (USDA), U.S. Department of Justice (DOJ), U.S. Department of Labor (DOL), U.S. Department of Transportation (DOT), U.S. Department of the Treasury (TREAS), U.S. Department of Education (USDE), U.S. Department of Health and Human Services (USDHHS), U.S. Department of Homeland Security (USDHS) Program Name: WIC Special Supplemental Nutrition Program for Women, Infants and Children, Cild and Adult Care Food Program (CACFP), Crime Victims Assistance Program (CVA), WIOA Cluster (WIOA), Highway Planning and Construction (Highway Planning), Coronavirus State and Local Fiscal Recovery Funds (SLFRF),Title I Grants to Local Educational Agencies (Title I), Special Education Cluster (IDEA), Twenty-First Century Community Learning Centers (Twenty-First Century), Supporting Effective Instruction State Grants (SEISG) Education Stabilization Fund (ESF), Aging Cluster, Epidemiology and Laboratory Capacity for Infectious Diseases (ELC), Temporary Assistance for Needy Families (TANF), Child Support Services, Low-Income Home Energy Assistance (LIHEAP), Child Care and Development Fund (CCDF) Cluster, Social Services Block Grant (SSBG), Block Grants for Prevention and Treatment of Substance Abuse (SAPT), Homeland Security Grant Program (Homeland Security) ALN and Program Expenditures: 10.557 ($181,526,312), 10.558 ($170,354,298), 16.575 ($53,095,634), 17.258/17.259/17.278 ($142,310,788), 20.205 ($2,192,857,212), 21.027 ($230,448,761), 84.010A ($696,900,040), 84.027/84.173 ($639,950,722), 84.287C ($61,131,992), 84.367A ($79,837,486), 84.425 ($2,176,294,000), 93.044/93.045/93.053 ($68,210,944), 93.323 ($94,269,102), 93.558 ($583,126,272), 93.563 ($135,029,923), 93.568 ($205,171,791), 93.575/93.596 ($747,612,292), 93.667 ($55,634,435), 93.959 ($114,897,412), 97.067 ($78,892,342) Award Numbers: Various – see table of award numbers Federal Award Year: Various – see table of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Finding 2024-002: Inadequate Monitoring of Subrecipient Single Audit Reviews Condition Found: The State of Illinois did not establish adequate controls to monitor the completion and documentation of the review of single audit reports for its subrecipients of the Special Supplemental Nutrition Program for Women, Infants, and Children (WIC), Child and Adult Care Food Program (CACFP), Crime Victims Assistance Program (CVA), WIOA Cluster (WIOA), Highway and Planning Construction (Highway), Coronavirus State and Local Fiscal Recovery Funds (SLFRF), Title I Grants to Local Education Agencies (Title I), Special Education Cluster (IDEA), Twenty-First Century Community Learning Centers (Twenty-First Century), Supporting Effective Instruction State Grants (SEISG), Education Stabilization Funds (ESF), Aging Cluster (Aging), Epidemiology and Laboratory Capacity for Infectious Diseases (ELC), Temporary Assistance for Needy Families (TANF), Child Support Services (CSS), Low-Income Home Energy Assistance (LIHEAP), Child Care and Development Fund (CCDF) Cluster, Social Services Block Grant (SSBG), Block Grants for Prevention and Treatment of Substance Abuse (SAPT), and Homeland Security Grant (Homeland Security) programs in the State's Grant Accountability and Transparency Act (GATA) Audit Report Review Management System (ARRMS). The State of Illinois established the Grant Accountability Transparency Unit (GATU) to implement the provisions of GATA on a centralized basis. GATU has established standardized reporting requirements for subrecipients of the various Federal programs administered by the State through its various departments. Subrecipients of the State are required to certify whether they expended more than $750,000 in federal awards during the fiscal year and submit their single audit reporting packages to the Federal Audit Clearinghouse (if required). GATU is then responsible for obtaining the single audit reporting package, verifying the report meets the single audit requirements, and assigning, to the applicable state agency, any findings attributable to amounts passed through to the subrecipient(s) by the State and working with program personnel to issue management decisions on findings. The State utilizes a contractor to perform the centralized functions of obtaining the single audit report, verifying the report meets the requirements, and assigning findings to the applicable State agency. During our testing of subrecipient single audit desk review files for our 2024 major programs, we noted instances where single audit desk reviews were still in process and had not been finalized within GATA ARRMS as of the date of our testing (July 10, 2025). Upon further review of data contained within GATA ARRMS, we identified 637 single audit reviews were identified as incomplete in GATA ARRMS for grantees who: (1) reported expenditures under fiscal year 2024 major programs, (2) had an audit report with a Federal Audit Clearinghouse acceptance date between January 2, 2023 and January 2, 2024 (requiring the report to be reviewed during fiscal year 2024) and (3) were not sanctioned (placed on the Illinois Stop Payment List) by the State for noncompliance with reporting requirements. These 637 reviews were in varying stages of completion with the majority (587 audits) pending documentation supporting the issuance of a final completion letter by the cognizant agency. The remaining 50 audits (7.8%) were pending receipt of documentation, pending a review, or had another error requiring follow-up. These 637 audits included 295 audits (46.3%) with one or more findings potentially requiring a management decision to be issued. We noted the cognizant agencies for the 637 incomplete single audit reviews in GATA ARRMS were as follows: "See Table in the Audit Report" The 637 incomplete single audit reviews in GATA ARRMS pertained to subrecipients of the following major programs: "See Table in the Audit Report" While in many instances there was evidence the State agencies had completed the necessary procedures outside of GATA ARRMS, the purpose of GATA ARRMS is to reduce the duplication of effort across State agencies and to provide a single submission point for the State’s subrecipients. The lack of monitoring controls around this centralized process may result in noncompliance with subrecipient single audit desk review requirements. The State’s subrecipient expenditures under the federal programs for the year ended June 30, 2024 were as follows: "See Table in the Audit Report" Criteria or Requirement: According to 2 CFR 200.332(d), a pass-through entity is required to monitor the activities of subrecipients as necessary to ensure the federal awards are used for authorized purposes in compliance with laws, regulations, and the provisions of contracts or grant agreements and that performance goals are achieved. Further, 2 CFR 200.332(d)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision on audit findings within six months of acceptance of the audit report by the FAC and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include implementing procedures to monitor whether single audit reports are reviewed, management decision letters are issued, and single audit desk review files are closed out in GATA ARRMS in a timely manner. Cause: In discussing these conditions with GOMB officials, management stated that the incompleteness of the State’s audit reviews in GATA ARRMS was due to oversight. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in GATA ARRMS in a timely manner may result in noncompliance with the State’s obligation as a pass-through entity to appropriately monitor its subrecipients. Repeat Finding: A similar finding was reported in the prior year audit as finding number 2024-002. (Finding Code 2024-002, 2023-002) Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend GOMB establish procedures to monitor the completion and documentation of single audit report reviews in GATA ARRMS to ensure the State complies with its obligation as a pass-through entity. Views of GOMB Officials: GOMB agrees with the finding.
State Agency: Illinois Criminal Justice Information Authority (ICJIA) Federal Agency: U.S. Department of Justice (USDOJ) Program Name: Crime Victim Assistance ALN and Program Expenditures: 16.575 ($53,095,634) Award Numbers: Various – see table of award numbers Federal Award Year: Various – see table of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Finding 2024-043: Inadequate Review of Subrecipient Single Audit Reports Condition Found: ICJIA did not adequately review single audit reports received from its subrecipients for the Crime Victim Assistance Program (CVA) program on a timely basis. The State of Illinois established the Grant Accountability and Transparency Unit (GATU) to implement the provisions of the State’s Grant Accountability and Transparency Act (GATA) on a centralized basis. GATU has established standardized reporting requirements for subrecipients of the various Federal and State programs administered by the State through its various departments. Subrecipients of the State are required to certify whether they expended more than $750,000 in federal awards during the fiscal year and submit their single audit reporting packages to the Federal Audit Clearinghouse (if required). GATU is then responsible for obtaining the single audit reporting package, verifying the report meets the single audit requirements, and assigning, to the applicable state agency, any findings attributable to amounts passed through to the subrecipient(s) by the State. As a State agency, ICJIA is responsible for reviewing the reports assigned to them by GATU and determining whether Federal funds reported in the consolidated year-end financial report (CYEFR) reconcile to ICJIA records. Additionally, as the cognizant State agency, ICJIA is responsible for issuing management decisions on findings reported and applying sanctions to subrecipients who do not comply with reporting requirements (i.e. stop pay process). During our testing of a sample of single audit desk review files for 14 subrecipients (with expenditures of $37,884,972 in the fiscal year), we noted the following: • For five subrecipients (with expenditures totaling $19,501,158), ICJIA did not issue a management decision letter in a timely manner. The delays in issuing management decision letters ranged from 61 to 128 days beyond the required timeframe. • For 11 subrecipients (with expenditures totaling $24,680,412), ICJIA did not reconcile the CYEFR to ICJIA’s records as required. As of the date we communicated our findings to ICJIA (January 27, 2026), ICJIA had still not reconciled the CYEFR to ICJIA’s records for 10 subrecipients (with expenditures totaling $24,097,663). • For one subrecipient (with expenditures of $295,572), the subrecipient single audit reporting package was not submitted within the required timeframe, and ICJIA did not follow up with the subrecipient or invoke the stop pay process. ICJIA has not established controls over subrecipient single audit reviews at an adequate level of precision to ensure single audit reporting requirements, including obtaining and reviewing single audit reporting packages, issuing management decision letters, reconciling CYEFRs to agency records, and invoking stop payment actions, are performed within required timeframes. ICJIA passed through $50,412,108 to subrecipients of the CVA program during the year ended June 30, 2024. Criteria or Requirement: According to 2 CFR 200.332(e), a pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statues, regulations and the terms and conditions of the subaward, and that the subaward performance goals are achieved. Additionally, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision on federal awards audit findings within six months of the acceptance of the report by the Federal Audit Clearinghouse and ensure the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires non-Federal entities to, among other things, establish and maintain internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure Single Audit reports are reviewed in a timely manner and management decisions are issued within required timeframes. Cause: In discussing these conditions with ICJIA officials, they stated this GATA responsibility has not been performed as consistently as other responsibilities due to competing priorities and staff shortages. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and the grant agreement. Repeat Finding: A similar finding was reported in the prior year audit as finding number 2023-034. (Finding Code 2024-043, 2023-034) Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend ICJIA establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Additionally, ICJIA should implement procedures to ensure timely reconciliation of funds, issuance of management decision letters, and initiation of the stop pay process. Views of ICJIA Officials: ICJIA agrees with the finding and the cause. Staffing continues to be a priority for resolving the single audit review process.
State Agency: Illinois Department on Aging (IDOA) Federal Agency: U.S. Department of Health and Human Services (USDHHS) Program Name: Aging Cluster ALN and Program Expenditures: 93.044/93.045/93.053 ($68,210,944) Award Numbers: Various – see table of award numbers Federal Award Year: Various – see table of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Finding 2024-049: Inadequate Review of Subrecipient Single Audit Reports Condition Found: IDOA did not adequately document review of single audit reports received from its subrecipients for the Aging Cluster program on a timely basis. The State of Illinois established the Grant Accountability and Transparency Unit (GATU) to implement the provisions of the State’s Grant Accountability and Transparency Act (GATA) on a centralized basis. GATU has established standardized reporting requirements for subrecipients of the various Federal and State programs administered by the State through its various departments. Subrecipients of the State are required to certify whether they expended more than $750,000 in federal awards during the fiscal year and submit their single audit reporting packages to the Federal Audit Clearinghouse (if required). GATU is then responsible for obtaining the single audit reporting package, verifying the report meets the single audit requirements, and assigning to the applicable state agency any findings attributable to amounts passed through to the subrecipient(s) by the State. IDOA staff are responsible for reviewing the reports assigned to them by GATU and determining whether: (1) federal funds reported in the schedule of expenditures of federal awards reconcile to IDOA records; (2) issuing management decisions on findings reported within required timeframes; and (3) applying sanctions to subrecipients who do not comply with reporting requirements (i.e. stop pay process). During our testing of a sample of single audit desk review files for seven subrecipients (with expenditures of $40,522,841 in the fiscal year), we noted the following: • For five subrecipients (with expenditures totaling $23,626,549), IDOA did not issue a management decision letter. • For one subrecipient (with expenditures totaling $2,117,589), IDOA did not issue a management decision letter over the subrecipient’s single audit that was received during state fiscal year 2024. In addition, the subrecipient did not file a single audit for the prior year with the Federal Audit Clearinghouse. While IDOA received a copy of the unfiled single audit report, a review was not performed and funding was not suspended in accordance with the State’s established policies. IDOA has not established controls over subrecipient single audit reviews at an adequate level of precision to ensure single audit reporting requirements, including obtaining and reviewing single audit reporting packages, issuing management decision letters, and invoking stop payment actions are performed within required timeframes. IDOA passed through $66,724,826 to subrecipients of the Aging Cluster program during the year ended June 30, 2024. Criteria or Requirement: According to 2 CFR 200.332(d), a pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statues, regulations and the terms and conditions of the subaward, and that the subaward performance goals are achieved. Additionally, 2 CFR 200.332(d)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision on federal award audit findings within six months of the acceptance of the report by the Federal Audit Clearinghouse and ensure the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires non-Federal entities to, among other things, establish and maintain internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure Single Audit reports are reviewed in a timely manner and management decisions are issued within required timeframes. Cause: In discussing these conditions with IDOA officials, they stated competing priorities and limited resources have impacted the Department’s ability to comply with this requirement. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and the grant agreement. Additionally, failure to issue management decision letters within six months of acceptance of the single audit report by the FAC results in noncompliance with federal regulations. Repeat Finding: A similar finding was not reported in the prior year audit. (Finding Code 2024-049) Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend IDOA establish procedures to ensure (1) subrecipient single audit report reviewed within established deadlines, (2) management decision letters are issued for all findings affecting its federal programs in accordance with the Uniform Guidance, and (3) follow up procedures are performed to ensure subrecipients have taken timely and appropriate corrective action. Views of IDOA Officials: The Department agrees with this finding. Although the Department shows that all the Area Agency on Aging single audits were received in the audit report review management system (ARRMS), there is one pending approval by the Audit Clearinghouse. The Department did not get the audits reconciled during state fiscal year 2024. The Department did not issue any management decision letters for those audits.
The Arizona Office of Economic Opportunity did not ensure conference meals, graphic design services, and promotional item costs were appropriate, necessary, and managed to minimize charges and may be required to return $90,015 of WIOA Cluster funds Cluster name(s): WIOA Cluster Assistance Listings number(s) and name(s): 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award number(s) and year(s): AA-34755-20-55-A-4 April 1, 2020 to June 30, 2023 AA-36307-21-55-A-4 April 1, 2021 to June 30, 2024 AA-38516-22-55-A-4 April 1, 2022 to June 30, 2025 23A55AW000049-01-00 July 1, 2023 to June 30, 2026 Federal agency: U.S. Department of Labor Compliance requirement(s): Not applicable Questioned costs: $90,015 Condition Contrary to federal regulations and the Department of Economic Security’s (DES) policy, the Arizona Office of Economic Opportunity (Office) paid for meals and promotional items provided to conference participants using WIOA Dislocated Worker Formula Grants federal program (WIOA federal program) funds without ensuring that the costs were appropriate, necessary, and managed to minimize charges to the federal award. Specifically, the Office hosted a 2-day Workforce Summit (Summit) conference in June 2024 and spent: X $61,038 on meals for 300 attendees over 2 days for lunch buffets, snacks, and beverages with an average attendee cost of $102 per person per day. X $25,302 for graphic design services without documenting how the services benefited the Summit. Office management reported the services were used to develop Summit communications and materials. X $3,675 on other promotional items, including pens, notebooks, lanyards, clips, vinyl pouches, and flyers, without maintaining evidence, such as photos, that the items displayed the required branding or funding tagline required by DES policies. The Office spent $5,066,045—including the questioned costs of $90,015—or nearly 5% of the State’s total $104,973,072 WIOA Cluster expenditures for the year ended June 30, 2024. We did not audit the WIOA Cluster for fiscal year 2024 because the Cluster did not meet the major federal program criteria. However, during fieldwork for the performance audit and sunset review of the Office, our contract auditors identified the above $90,015 unallowable costs charged to the WIOA federal program. Effect The Office’s paying for Summit costs without ensuring that they were appropriate, necessary, and managed to minimize charges to the federal award increased the risk that those who were intended to benefit from the program may not receive all the benefits they otherwise would have received. Consequently, the Office and/or DES may be required to return monies to the federal agency in accordance with federal requirements.1 Cause Office staff responsible for reviewing and approving Summit expenditures lacked sufficient guidance to identify unallowable costs because the Office lacked documented procedures, including a standardized review process, to ensure that costs charged to the WIOA federal program were allowable. DES passed WIOA federal program funds to the Office through an interagency service agreement (ISA) subaward but did not include conference-specific requirements imposed by federal regulations or additional requirements that DES imposed regarding promotional materials. Further, DES monitors the Office’s WIOA federal program expenditures during an annual desk review that takes place in May or June following the end of the prior fiscal year. DES management reported DES did not review any 2024 Summit costs since they will be subject to review during the May 2026 desk review. The review was scheduled almost 2 years after the unallowable costs were incurred because they were included in the Office’s July 2024 reimbursement request, which fell at the beginning of fiscal year 2025. Criteria Federal regulations and the Department’s Notice of Award for the WIOA federal program require the Office to sponsor conferences primarily to disseminate technical information. Further, the Office must exercise discretion and judgment in ensuring that conference costs are appropriate, necessary, and managed to minimize charges to the federal award. Allowable costs may include facility rental, speakers’ fees, registration fees, meals and refreshments, and other incidental expenses, unless further restricted by the terms and conditions of the federal award (2 CFR §200.432). 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). In addition, DES’ policy requires that all promotional material must include a specific funding source tagline and the State brand.2 Further, federal regulations require DES to: X Evaluate the Office’s fraud risk and risk of noncompliance with its ISA subaward to determine the appropriate subrecipient monitoring procedures (2 CFR §200.332[c]). X Ensure its subaward with the Office includes all requirements imposed by federal statutes, regulations, and the terms and conditions of the federal award and any additional requirements that DES imposes on the Office to meet its responsibilities under the federal award (2 CFR §200.332[b][2] and [3]). Finally, federal regulations require establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the Office 1. Ensure Summit costs charged to the WIOA federal program are appropriate, necessary, and managed to minimize charges to the federal award. 2. Develop and implement written procedures, including a standardized review process, to ensure that costs charged to the WIOA federal program are allowable prior to requesting reimbursement from DES. 3. Work with federal grantor and/or DES to resolve the $90,015 of questioned costs associated with the 2024 Summit and any subsequently held Summits. Recommendations to DES 4. Amend its ISA subaward with the Office to include conference-specific requirements imposed by federal regulations and additional requirements that DES imposed regarding promotional materials. 5. Adjust its monitoring procedures over the Office’s activities, which may include more frequent desk reviews of reimbursed costs, based on DES’ evaluation of the Office’s risk of noncompliance with federal regulations and DES’ notice of award for the WIOA federal program. 6. Provide Office staff responsible for reviewing and approving Summit expenditures with training and technical assistance on conference-related requirements. 2 Arizona Department of Economic Security. (2023). Workforce Innovation and Opportunity Act Policy Manual Title I-B, Chapter 3, Section 102.01 (C). Retrieved 4/8/2026 from https://des.az.gov/sites/default/files/media/Allowable-Costs-Fiscal-Policy-Section-100.pdf?time=1775665811357 Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
The Department of Economic Security made unallowable benefits payments totaling $64,131, increasing the risk that the program applicants received utility and rental payments for which they were not entitled Assistance Listings number(s) and name(s): 21.023 COVID-19 – Emergency Rental Assistance Program Award number(s) and year(s): ERA2-0165 May 10, 2021 through September 30, 2025 Federal agency: U.S. Department of the Treasury Compliance requirement(s): Activities allowed or unallowed, allowable costs/cost principles, and eligibility Questioned costs: $37,901 Assistance Listings number(s) and name(s): 21.027 COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Award number(s) and year(s): None Federal agency: U.S. Department of the Treasury Compliance requirement(s): Activities allowed or unallowed, allowable costs/cost principles Questioned costs: $26,230 Total questioned costs: $64,131 Condition Contrary to federal regulations and its policies and procedures, the Department of Economic Security—Child and Community Services Division (Division) made unallowable benefits payments totaling $64,131 during fiscal year 2024 to rental assistance program applicants for the Emergency Rental Assistance Program (ERAP) and Coronavirus State and Local Fiscal Recovery Funds (CSLFRF) federal programs.1 1 The Arizona Department of Economic Security’s ERAP was established by Section 501 of Title V, Division N, of the Consolidated Appropriations Act of 2021 (Public Law No. 116-260) in response to the coronavirus pandemic and to provide financial relief to help keep individuals who rent housing in their homes and provide financial assistance to landlords who rely on rental income. The initial program is referred to as ERAP 1. ERAP 2 was established by Sec. 3201 of Title III, Subtitle B, of the American Rescue Plan Act of 2021 (Public Law No. 117-2). Further, the Arizona Department of Economic Security’s ERAP was extended through the federal Coronavirus State and Local Fiscal Recovery Funds, an American Rescue Plan Act of 2021 program (Public Law 117-2), as administered by the Arizona Governor’s Office. The Department of Economic Security began operating the program on July 1, 2022 (State of Arizona, Office of the Governor and Department of Economic Security Interagency Service Agreement No. ISA-DES-ARPA-021623-01). Specifically, for 14 of 60 ERAP and 7 of 60 CSLFRF benefit payments tested, we found that the Division made unallowable benefits payments of $37,901 for ERAP and $26,230 for CSLFRF to or on behalf of ineligible program applicants or those who lacked required eligibility documentation and for other inappropriate costs, as follows: X The Division inappropriately paid $43,607 of benefit payments to or on behalf of 9 ineligible program applicants, including: y $36,622 paid to or on behalf of 7 program applicants who did not reside in an eligible Maricopa County service area at the time of application ($29,647 for 6 ERAP program applicants and $6,975 for 1 CSLFRF applicant). y $6,300 paid to or on behalf of 1 CSLFRF applicant who previously received ERAP payments and was thus ineligible. y $685 paid to or on behalf of 1 ERAP program applicant whose income exceeded allowable program limits. X The Division inappropriately paid $14,815 of benefit payments to or on behalf of 10 program applicants, including: y $8,640 paid to or on behalf of 1 CSLFRF applicant for a lease buyout, which is an unallowed activity under Division policies. y $3,959 paid to or on behalf of 5 program applicants for rental arrears—rent not paid by the date specified in the lease agreement—payments exceeding the allowable 1-time, lump sum payments ($3,121 for 3 ERAP applicants and $838 for 2 CSLFRF applicants). y $2,216 paid to or on behalf of 4 program applicants for rental assistance exceeding the amount documented on the lease ($2,210 for 3 ERAP applicants and $6 for 1 CSLFRF applicant). X The Division inappropriately paid $5,709 of benefit payments to or on behalf of 2 program applicants without obtaining required documentation to support they were eligible to receive them, including: y $5,709 paid to or on behalf of 2 program applicants without required proof of income, a lease agreement, and other documentation supporting household size and the reimbursement of late penalties and fees related to rent and/or utility account bills ($2,238 for 1 ERAP program applicant and $3,471 for 1 CSLFRF applicant). Effect The Division’s making unallowable benefits payments to ineligible program applicants or without required documentation increases the risk that the program applicants received utility and rental payments for which they were not entitled. Also, the Division’s paying for inappropriate costs spent inconsistent with program requirements increases the risk that those who were intended to benefit from the program may not receive all the benefits they otherwise would have received. Consequently, the Division may be required to return these monies to the federal agency in accordance with federal requirements.2 During fiscal year 2024, the Division paid $44.2 million in benefit payments to or on behalf of program applicants requesting emergency rental and utility assistance for these 2 federal programs, as illustrated in Table 1 below, and is at risk that more of its benefit payment expenditures are inappropriate than those identified in our sample. Cause Division management reported that personnel responsible for evaluating program applications and determining program applicants’ eligibility and allowability of related costs fell behind on reviewing applications and did not have time to perform thorough evaluations, including making appropriate eligibility determinations, obtaining required documentation, or ensuring costs were allowable, because of the large quantity of program applications and staffing shortages due to employee turnover. Further, Division management reported that it did not detect and correct inaccurate eligibility determinations because its policies and procedures did not require 2 Federal Uniform Guidance audit requirements require its federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the Department, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). adjudicators to perform a postreview of the benefits subsystem’s automated review of eligibility requirements, such as verifying the income thresholds and geographical location aligned with the Division’s written policies and procedures and were supported by required documentation. Criteria Federal regulations require costs to be reasonable and adequately documented to be allowable under federal awards, and the Division’s written policies and procedures require certain documentation to support eligibility requirements related to where the applicant lives and their income.3,4,5 Specifically, Division policy requires a program application evaluation to ensure complete and reasonable documentation is obtained, including lease agreements; any bills related to utility accounts; and proof of income, household size, eligible service area residency, and risk of homelessness or housing instability. Also, the Division’s policies prohibit benefit payments for lease buy-offs and prohibit incomplete applications to be acted upon until applicants provide the required information and documentation to complete their applications. Finally, the Division also must establish and maintain effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the Division 1. Ensure benefit payments are for allowable costs paid to or on behalf of eligible program applicants. 2. Update existing policies and procedures to include a postreview of the benefits subsystem’s automated review of eligibility requirements, such as verifying the income thresholds and geographic location aligned with the Division’s written policies and procedures and were supported by required documentation. The Division should correct any inaccurate eligibility determinations identified during the postreview. 3. Allocate sufficient staffing resources to perform a thorough evaluation of program benefits applications and provide training on eligibility requirements and allowable benefit payments. 3 Federal Uniform Guidance cost principles require costs to be adequately documented (2 CFR 200.403[g]) and reasonable (2 CFR 200.404). In determining the reasonableness of a given cost, consideration must be given to several factors including requirements imposed by federal laws and regulations and the terms and conditions of the federal award (2 CFR 200.404[b]). 4 U.S. Department of the Treasury published guidance to assist grantees in ERAP administration, including a requirement for ERAP grantees to establish policies and procedures to govern the implementation of their ERAP programs consistent with the ERAP statutes and U.S. Department of the Treasury FAQs (U.S. Department of the Treasury Emergency Rental Assistance Frequently Asked Questions, Revised March 5, 2024. Retrieved 10/16/2025 from https://home.treasury.gov/system/files?file=136/ERA-FAQs03052024.pdf). 5 To be eligible for program benefits, individuals had to have filed, received, and been deemed eligible in accordance with the Division’s written policies and procedures. The benefit payments consisted of rent and/or utility payments for past due amounts (a 1-time lump sum payment) and for 3 months of payments on each reapplication up to a total of 18 months. Applicants must provide proof of income or self-attestation of no income and cannot earn an income that is above the area median income as determined by the HUD income limits (Section 8) set at 80% AMI (Area Median Income). These limits are updated annually and can be viewed at https://www.huduser.gov/portal/datasets/il. html#year2024. Further, applicants who live in Maricopa County must reside in Phoenix or Mesa. Rental applications must include a housing agreement with the applicant’s name and current rental address. Utility assistance applications must include bills or invoices or outstanding payments. Applications are reviewed by adjudicators who ensure the documentation for proof of residence, proof of income, housing agreement, any bills related to utility accounts, and proof of risk of homelessness or housing instability are complete and reasonable. Any decisions made contrary to policy must include a rationale for the decision in the supporting documentation for the application (Department of Economic Security Emergency Rental Assistance Program Policy, Rev 8 [7/1/2022] and Rev 9 [4/1/2023]). 4. Work with the federal agencies to resolve the $64,131 of program monies that were spent in violation of federal regulations and its policies and procedures and that may need to be returned to the federal agencies. This finding is similar to prior-year finding 2023-105 and was initially reported in fiscal year 2023. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
Four State agencies did not perform required subrecipient monitoring procedures, increasing the risk that program monies may have been misused and not spent in accordance with the award terms Assistance Listings number(s) and name(s): 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery (SLFRF) Funds Award number(s) and year(s): None Federal agency: U.S. Department of the Treasury Compliance requirement(s): Subrecipient monitoring Questioned costs: $1,623,846 Condition Contrary to federal regulation, the Arizona Department of Housing (ADOH), Arizona Department of Water Resources (ADWR), Arizona Office of Tourism (AOT), and Industrial Commission of Arizona (ICA) did not perform the required monitoring of their subrecipients’ activities or compliance with the award terms and program requirements. Specifically, we found that 4 of 10 State agencies we tested did not perform the various and required monitoring procedures identified in Table 1 below and Tables 2 through 4, page 129. In addition, as of the report date, April 23, 2026, the Governor’s Office of Strategic Planning and Budgeting (OSPB) took appropriate action by identifying and self-reporting to us $1,623,846 of expenditures for 8 SLFRF program subrecipients, who were awarded monies prior to fiscal year 2024, and may not have spent the monies in accordance with program requirements.1 Specifically, based on our fiscal year 2023 audit recommendations in finding 2023-102, OSPB performed missing risk assessments for subrecipients awarded monies during fiscal years 2022 and 2023. As a result of these assessments, OSPB conducted additional onsite monitoring or desk reviews based on those results and identified $1,623,846 in questionable costs by its subrecipients. Additionally, OSPB identified several of these questioned costs as potentially fraudulent or inappropriate and forwarded this information to the Attorney General’s Office for further review. We selected OSPB as part of the 10 State agencies tested during fiscal year 2024. Of 24 OSPB subrecipients we tested, we did not identify any deficiencies with OSPB performing the required monitoring of their subrecipients’ activities or compliance with the award terms and program requirement during fiscal year 2024. In total during fiscal year 2024, there were 14 State agencies that paid $270.2 million to subrecipients, as shown in Table 5 below, or 56.2% of the State’s $480.4 million total federal expenditures for this program. Effect The 4 State agencies’ lack of required monitoring increased the risk that the $41.4 million of program monies they paid to 131 subrecipients may have been misused and not spent in accordance with the award terms and program requirements as shown in Table 5, page 130. If monies are spent inconsistent with program requirements, those who were intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. ADOH, ADWR, AOT, and ICA are at risk that this finding applies to other federal programs they administer. Further, OSPB’s previously identified expenses that may not have been spent in accordance with program requirements may result in OSPB being required to return up to $1,623,846 of program monies to the federal agency in accordance with Uniform Guidance requirements.2 Cause Despite subrecipient monitoring requirements being included in the federal regulations, 4 State agencies did not develop and/or implement sufficient subrecipient monitoring policies and procedures to comply with federal regulations. Specifically, X ADOH’s management reported that its policies and procedures did not contain clear criteria for when single audits should be obtained and the process for conducting risk assessments. X ADWR’s management reported that it lacked policies and procedures for obtaining single audits and conducting risk assessments. X AOT’s management reported that it performed only limited monitoring procedures for subrecipients who expended more than $750,000 of AOT awards during the year. Additionally, AOT’s management reported that it misunderstood the detailed transactions required to substantiate the $50,214 in payroll expenditures. X ICA’s management reported that there was a misunderstanding on which State agency was responsible for performing the subrecipient monitoring of the monies it passed through to subrecipients and consequently did not develop all the necessary subrecipient monitoring policies and procedures. Further, OSPB previously reported that it hired additional staff in fiscal year 2023 to begin addressing audit finding issues noted in prior years and began performing required risk assessments in fiscal year 2024. 2 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, OSPB, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take action, as directed by the federal awarding agencies (2 CFR §200.521). Criteria Federal regulation requires State agencies to monitor subrecipients, which includes required monitoring procedures, as follows (2 CFR §200.332): X Assess the risk of each subrecipient’s noncompliance and perform monitoring activities based on those risk assessments. Based on risk, additional monitoring procedures could include providing training or technical assistance on program-related matters, performing site visits, and/or other monitoring procedures. X Review financial and performance reports. X Verify single audits were conducted timely; following up on and ensuring corrective action is taken on audit findings that could potentially affect the program; and issuing a management decision for audit findings pertaining to the federal award. X Include required information in subrecipient subaward agreements, including required federal award information; requirements imposed by federal statutes, regulations, and the terms and conditions of the federal award; any additional requirements that the pass-through entity imposes, and a requirement that the subrecipient permit the pass-through entity to access the subrecipient’s records and financial statements to fulfill its monitoring requirements. In addition, the State’s subrecipient monitoring policies and procedures require State agencies to consider and assess risk of each subrecipient and carry out required and various other monitoring procedures based on those risk assessments.3 Finally, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to ADOH, ADWR, AOT, and ICA Work with the State’s Office of Strategic Planning and Budgeting to either update or develop and implement policies and procedures and train responsible staff to perform required monitoring of their subrecipients to ensure compliance with award terms and program requirements, including procedures to: 1. Assess the risk of each subrecipient’s noncompliance and perform additional monitoring procedures based on those risk assessments such as reviewing financial and performance reports, providing training or technical assistance on program-related matters, performing site visits, and/or other monitoring procedures. (ADOH, ADWR, and ICA) 2. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. (ADOH, ADWR, AOT, and ICA) 3 Arizona Department of Administration Office of Grants and Federal Resources. (2018). Grants Management Manual – Grantor, Chapter 8: Award Monitoring. Retrieved 10/29/2025 from https://ospb.az.gov/sites/default/files/2026-01/Arizona%20Grants%20Management%20 Grantor%20Manual%20Edition%202022.pdf 3. Request and view supporting transaction details prior to paying subrecipients for payroll costs to verify they meet the requirements of the award terms and program requirements. (AOT) 4. Establish subaward agreements with subrecipients communicating allowable uses of program monies and other information required by federal regulations prior to distributing program monies. (ICA) Recommendations to OSPB 5. Work with the federal agency and the subrecipients to resolve the $1,623,846 of program monies that may have been spent in violation of its federal award terms and that may need to be returned to the federal agency. 6. Continue to assess the risk of each subrecipient’s noncompliance and perform additional monitoring procedures based on those risk assessments such as reviewing financial and performance reports, providing training or technical assistance on program-related matters, performing site visits, and/or other monitoring procedures to ensure questioned costs are timely identified and remedied. This finding is similar to prior-year finding 2023-102 and was initially reported in fiscal year 2022. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.