Criteria or specific requirement: Title 2 – Grants and Agreements. Subtitle A – Office of Management and Budget Guidance for Grants and Agreements. Chapter II – Office of Management and Budget Guidance. Part 200 – Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D – Post Federal Award Requirements. Standards for Financial and Program Management. §200.303 Internal controls (2 CFR 200.303): The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework,” issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Title 2 – Grants and Agreements. Subtitle A – Office of Management and Budget Guidance for Grants and Agreements. Chapter II – Office of Management and Budget Guidance. Part 200 – Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D – Post Federal Award Requirements. Subrecipient Monitoring and Management. §200.332 Requirements for pass-through entities (2 CFR 200.332): A pass-through entity must: (c) Evaluate each subrecipient’s fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient’s risk, a passthrough entity should consider the following: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient’s cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to crosscutting audit findings in accordance with section §200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. California Code of Regulations. Title 5 Education. § 18023. Compliance Reviews of Contractors. (b) At least once every three (3) years and as resources permit, the California Department of Education shall conduct reviews at the contractor's office(s) and operating facility(ies) to determine the contractor's compliance with applicable laws, regulations or contractual provisions. Child Care and Development Fund (CCDF) Plan for State/Territory California FFY 2022-24, Amendment 4. Chapter 8 Ensure Grantee Program Integrity and Accountability. 8.1 Internal Controls and Accountability Measures to Help Ensure Program Integrity. 8.1.1 Process to train about CCDF requirements and program integrity. States and territories are required to describe effective internal controls that are in place to ensure program integrity and accountability (98.68(a)), including processes to train child care providers and staff of the Lead Agency and other agencies engaged in the administration of CCDF about program requirements and integrity. v. Monitor and assess policy implementation on an ongoing basis. The Lead Agency conducts announced Categorical Program Monitoring (CPM)/Contract Monitoring Reviews (CMRs) for each contractor on a three- or four-year cycle for non-LEAs and LEAs respectively. The Lead Agency’s Governance and Administration Unit (GAU) conducts ongoing review of individual contractors by sampling the eligibility and need documentation in family files to estimate and reduce error rates. Additionally, the Lead Agency provides ongoing training and technical assistance to contractors in regional sessions, in one-on-one sessions, and/or in cluster with webinars or during face to-face presentations. These sessions address CCDF program administration, requirements, and integrity Condition: We selected 60 subrecipient contracts (21 local educational agency (LEA) contracts and 39 non-LEA contracts) from 60 subrecipient entities and tested compliance with subrecipient monitoring requirements. We noted the following: LEA • 2 LEA contracts/contractors had no record of on-site monitoring over five years. Non-LEA • 3 non-LEA contracts/contractors had no records available to demonstrate risk assessment of the contractor. • 11 non-LEA contracts/contractors had no record of on-site monitoring over five years. Questioned costs: None Context: See “Condition.” Cause: In fiscal year 2021, the administration of the CCDF Cluster program was transitioned from the California Department of Education (CDE) to CDSS. CDSS has been in the process of revising certain policies and procedures, including contractor monitoring. In addition, certain records related to CDE monitoring activities for the contracts selected were unavailable for review. Effect: CDSS is at risk for contractor noncompliance if monitoring procedures are not properly designed or executed, and/or documents demonstrating monitoring are not maintained. Repeat Finding: This was reported in the previous year as finding 2023-012. Recommendation: To enhance the effectiveness of the annual risk assessment process, we recommend a thorough evaluation that focuses on the identification and inclusion of all subrecipients and defined risk criteria as mandated in 2 CFR 200.332. Furthermore, it is crucial to establish and document a transparent basis for risk profiling that directly correlates such profiles with compliance monitoring activities across fiscal, program, and single audit requirements. Furthermore, we recommend CDSS perform a comprehensive post-transition review to ensure all monitoring responsibilities transferred from CDE have been fully identified and assigned. This review should validate robust mechanisms are in place for the accurate documentation and proper retention of records. Views of responsible officials: Management’s response is reported in “Management’s Response and Corrective Action Plan” included in a separate section at the end of this report.
Assistance Listing 93.914 HIV Emergency Relief Project Grants Condition: The Office of Health and Human Services' (HHS) Audit Unit failed to issue a management decision for audit findings related to two subrecipients of the city, who each had audit findings reported in their respective single audits. The fiscal year 2023 single audit of Bebashi and the fiscal year 2024 single audit of The Children's Hospital of Pennsylvania had a significant deficiency reported under the HIV Emergency Relief Program (ALN 93.914) in the Internal Controls over Major Programs section of the Schedule of Findings and Questioned Costs. Funding for HIV Emergency Relief program is received directly from the U.S. Department of Health and Human Services. Criteria: 2 CFR section 200.332(e) states that the pass-through entity must issue a management decision for audit findings pertaining only to the federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Effect: The management decision serves to confirm the audit findings and outline a corrective action plan for the subrecipient. Failure to issue a management decision could lead to unresolved findings at the subrecipient level. Cause: HHS incorrectly relies on the auditing firms that perform subrecipient single audits to issue a management decision per 2 CFR section 200.312(e). Recommendation: We recommend that HHS management modifies and/or strengthens its current policies and procedures to ensure that a management decision letter will be issued for audit findings relating to any federal awards that were provided to subrecipients. Views of the Responsible Officials and Corrective Action Plan: HHS acknowledges the Controller’s finding that management decision letters were not issued for specific subrecipient audit findings under ALN 93.914, as required under 2 CFR 200.332(e) and 200.521. While the formal letters were not issued, HHS did review the audit findings, obtained and evaluated the subrecipients’ corrective action plans and confirmed that no questioned costs or additional risks remained. These steps ensured that the underlying corrective actions were completed. To strengthen documentation and ensure consistency across all federal programs, HHS will adopt the following corrective measures: 1. Standard management Decision Template • HHS will adopt a simple, uniform management decision template and clear steps for documenting decisions within the required federal timelines. 2. Central Location for Documentation • HHS will store all management decision letters and related materials in one designated shared location to ensure accessibility and consistent record-keeping. 3. Brief Staff Guidance • HHS will provide concise written guidance to staff outlining: o When a management decision is required, o How to complete it using the template, and o What documentation must be retained? These corrective actions will ensure consistent compliance with federal requirements while supporting the City’s long-term goal of standardizing financial processes across departments. Contact Person: Landuleni Shipanga, Controller, City of Philadelphia Office of Children and Families, 215-683-6366
State Agency: Illinois Governor’s Office of Management and Budget (GOMB) Federal Agency: U.S. Department of Agriculture (USDA), U.S. Department of Justice (DOJ), U.S. Department of Labor (DOL), U.S. Department of Transportation (DOT), U.S. Department of the Treasury (TREAS), U.S. Department of Education (USDE), U.S. Department of Health and Human Services (USDHHS), U.S. Department of Homeland Security (USDHS) Program Name: WIC Special Supplemental Nutrition Program for Women, Infants and Children, Cild and Adult Care Food Program (CACFP), Crime Victims Assistance Program (CVA), WIOA Cluster (WIOA), Highway Planning and Construction (Highway Planning), Coronavirus State and Local Fiscal Recovery Funds (SLFRF),Title I Grants to Local Educational Agencies (Title I), Special Education Cluster (IDEA), Twenty-First Century Community Learning Centers (Twenty-First Century), Supporting Effective Instruction State Grants (SEISG) Education Stabilization Fund (ESF), Aging Cluster, Epidemiology and Laboratory Capacity for Infectious Diseases (ELC), Temporary Assistance for Needy Families (TANF), Child Support Services, Low-Income Home Energy Assistance (LIHEAP), Child Care and Development Fund (CCDF) Cluster, Social Services Block Grant (SSBG), Block Grants for Prevention and Treatment of Substance Abuse (SAPT), Homeland Security Grant Program (Homeland Security) ALN and Program Expenditures: 10.557 ($181,526,312), 10.558 ($170,354,298), 16.575 ($53,095,634), 17.258/17.259/17.278 ($142,310,788), 20.205 ($2,192,857,212), 21.027 ($230,448,761), 84.010A ($696,900,040), 84.027/84.173 ($639,950,722), 84.287C ($61,131,992), 84.367A ($79,837,486), 84.425 ($2,176,294,000), 93.044/93.045/93.053 ($68,210,944), 93.323 ($94,269,102), 93.558 ($583,126,272), 93.563 ($135,029,923), 93.568 ($205,171,791), 93.575/93.596 ($747,612,292), 93.667 ($55,634,435), 93.959 ($114,897,412), 97.067 ($78,892,342) Award Numbers: Various – see table of award numbers Federal Award Year: Various – see table of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Finding 2024-002: Inadequate Monitoring of Subrecipient Single Audit Reviews Condition Found: The State of Illinois did not establish adequate controls to monitor the completion and documentation of the review of single audit reports for its subrecipients of the Special Supplemental Nutrition Program for Women, Infants, and Children (WIC), Child and Adult Care Food Program (CACFP), Crime Victims Assistance Program (CVA), WIOA Cluster (WIOA), Highway and Planning Construction (Highway), Coronavirus State and Local Fiscal Recovery Funds (SLFRF), Title I Grants to Local Education Agencies (Title I), Special Education Cluster (IDEA), Twenty-First Century Community Learning Centers (Twenty-First Century), Supporting Effective Instruction State Grants (SEISG), Education Stabilization Funds (ESF), Aging Cluster (Aging), Epidemiology and Laboratory Capacity for Infectious Diseases (ELC), Temporary Assistance for Needy Families (TANF), Child Support Services (CSS), Low-Income Home Energy Assistance (LIHEAP), Child Care and Development Fund (CCDF) Cluster, Social Services Block Grant (SSBG), Block Grants for Prevention and Treatment of Substance Abuse (SAPT), and Homeland Security Grant (Homeland Security) programs in the State's Grant Accountability and Transparency Act (GATA) Audit Report Review Management System (ARRMS). The State of Illinois established the Grant Accountability Transparency Unit (GATU) to implement the provisions of GATA on a centralized basis. GATU has established standardized reporting requirements for subrecipients of the various Federal programs administered by the State through its various departments. Subrecipients of the State are required to certify whether they expended more than $750,000 in federal awards during the fiscal year and submit their single audit reporting packages to the Federal Audit Clearinghouse (if required). GATU is then responsible for obtaining the single audit reporting package, verifying the report meets the single audit requirements, and assigning, to the applicable state agency, any findings attributable to amounts passed through to the subrecipient(s) by the State and working with program personnel to issue management decisions on findings. The State utilizes a contractor to perform the centralized functions of obtaining the single audit report, verifying the report meets the requirements, and assigning findings to the applicable State agency. During our testing of subrecipient single audit desk review files for our 2024 major programs, we noted instances where single audit desk reviews were still in process and had not been finalized within GATA ARRMS as of the date of our testing (July 10, 2025). Upon further review of data contained within GATA ARRMS, we identified 637 single audit reviews were identified as incomplete in GATA ARRMS for grantees who: (1) reported expenditures under fiscal year 2024 major programs, (2) had an audit report with a Federal Audit Clearinghouse acceptance date between January 2, 2023 and January 2, 2024 (requiring the report to be reviewed during fiscal year 2024) and (3) were not sanctioned (placed on the Illinois Stop Payment List) by the State for noncompliance with reporting requirements. These 637 reviews were in varying stages of completion with the majority (587 audits) pending documentation supporting the issuance of a final completion letter by the cognizant agency. The remaining 50 audits (7.8%) were pending receipt of documentation, pending a review, or had another error requiring follow-up. These 637 audits included 295 audits (46.3%) with one or more findings potentially requiring a management decision to be issued. We noted the cognizant agencies for the 637 incomplete single audit reviews in GATA ARRMS were as follows: "See Table in the Audit Report" The 637 incomplete single audit reviews in GATA ARRMS pertained to subrecipients of the following major programs: "See Table in the Audit Report" While in many instances there was evidence the State agencies had completed the necessary procedures outside of GATA ARRMS, the purpose of GATA ARRMS is to reduce the duplication of effort across State agencies and to provide a single submission point for the State’s subrecipients. The lack of monitoring controls around this centralized process may result in noncompliance with subrecipient single audit desk review requirements. The State’s subrecipient expenditures under the federal programs for the year ended June 30, 2024 were as follows: "See Table in the Audit Report" Criteria or Requirement: According to 2 CFR 200.332(d), a pass-through entity is required to monitor the activities of subrecipients as necessary to ensure the federal awards are used for authorized purposes in compliance with laws, regulations, and the provisions of contracts or grant agreements and that performance goals are achieved. Further, 2 CFR 200.332(d)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision on audit findings within six months of acceptance of the audit report by the FAC and ensure that the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires nonfederal entities to, among other things, establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include implementing procedures to monitor whether single audit reports are reviewed, management decision letters are issued, and single audit desk review files are closed out in GATA ARRMS in a timely manner. Cause: In discussing these conditions with GOMB officials, management stated that the incompleteness of the State’s audit reviews in GATA ARRMS was due to oversight. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in GATA ARRMS in a timely manner may result in noncompliance with the State’s obligation as a pass-through entity to appropriately monitor its subrecipients. Repeat Finding: A similar finding was reported in the prior year audit as finding number 2024-002. (Finding Code 2024-002, 2023-002) Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend GOMB establish procedures to monitor the completion and documentation of single audit report reviews in GATA ARRMS to ensure the State complies with its obligation as a pass-through entity. Views of GOMB Officials: GOMB agrees with the finding.
State Agency: Illinois Criminal Justice Information Authority (ICJIA) Federal Agency: U.S. Department of Justice (USDOJ) Program Name: Crime Victim Assistance ALN and Program Expenditures: 16.575 ($53,095,634) Award Numbers: Various – see table of award numbers Federal Award Year: Various – see table of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Finding 2024-043: Inadequate Review of Subrecipient Single Audit Reports Condition Found: ICJIA did not adequately review single audit reports received from its subrecipients for the Crime Victim Assistance Program (CVA) program on a timely basis. The State of Illinois established the Grant Accountability and Transparency Unit (GATU) to implement the provisions of the State’s Grant Accountability and Transparency Act (GATA) on a centralized basis. GATU has established standardized reporting requirements for subrecipients of the various Federal and State programs administered by the State through its various departments. Subrecipients of the State are required to certify whether they expended more than $750,000 in federal awards during the fiscal year and submit their single audit reporting packages to the Federal Audit Clearinghouse (if required). GATU is then responsible for obtaining the single audit reporting package, verifying the report meets the single audit requirements, and assigning, to the applicable state agency, any findings attributable to amounts passed through to the subrecipient(s) by the State. As a State agency, ICJIA is responsible for reviewing the reports assigned to them by GATU and determining whether Federal funds reported in the consolidated year-end financial report (CYEFR) reconcile to ICJIA records. Additionally, as the cognizant State agency, ICJIA is responsible for issuing management decisions on findings reported and applying sanctions to subrecipients who do not comply with reporting requirements (i.e. stop pay process). During our testing of a sample of single audit desk review files for 14 subrecipients (with expenditures of $37,884,972 in the fiscal year), we noted the following: • For five subrecipients (with expenditures totaling $19,501,158), ICJIA did not issue a management decision letter in a timely manner. The delays in issuing management decision letters ranged from 61 to 128 days beyond the required timeframe. • For 11 subrecipients (with expenditures totaling $24,680,412), ICJIA did not reconcile the CYEFR to ICJIA’s records as required. As of the date we communicated our findings to ICJIA (January 27, 2026), ICJIA had still not reconciled the CYEFR to ICJIA’s records for 10 subrecipients (with expenditures totaling $24,097,663). • For one subrecipient (with expenditures of $295,572), the subrecipient single audit reporting package was not submitted within the required timeframe, and ICJIA did not follow up with the subrecipient or invoke the stop pay process. ICJIA has not established controls over subrecipient single audit reviews at an adequate level of precision to ensure single audit reporting requirements, including obtaining and reviewing single audit reporting packages, issuing management decision letters, reconciling CYEFRs to agency records, and invoking stop payment actions, are performed within required timeframes. ICJIA passed through $50,412,108 to subrecipients of the CVA program during the year ended June 30, 2024. Criteria or Requirement: According to 2 CFR 200.332(e), a pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statues, regulations and the terms and conditions of the subaward, and that the subaward performance goals are achieved. Additionally, 2 CFR 200.332(e)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision on federal awards audit findings within six months of the acceptance of the report by the Federal Audit Clearinghouse and ensure the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires non-Federal entities to, among other things, establish and maintain internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure Single Audit reports are reviewed in a timely manner and management decisions are issued within required timeframes. Cause: In discussing these conditions with ICJIA officials, they stated this GATA responsibility has not been performed as consistently as other responsibilities due to competing priorities and staff shortages. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and the grant agreement. Repeat Finding: A similar finding was reported in the prior year audit as finding number 2023-034. (Finding Code 2024-043, 2023-034) Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend ICJIA establish procedures to ensure subrecipient single audit report reviews are completed and documented in a timely manner. Additionally, ICJIA should implement procedures to ensure timely reconciliation of funds, issuance of management decision letters, and initiation of the stop pay process. Views of ICJIA Officials: ICJIA agrees with the finding and the cause. Staffing continues to be a priority for resolving the single audit review process.
State Agency: Illinois Department on Aging (IDOA) Federal Agency: U.S. Department of Health and Human Services (USDHHS) Program Name: Aging Cluster ALN and Program Expenditures: 93.044/93.045/93.053 ($68,210,944) Award Numbers: Various – see table of award numbers Federal Award Year: Various – see table of award numbers Questioned Costs: None Compliance Requirement: Subrecipient Monitoring Finding 2024-049: Inadequate Review of Subrecipient Single Audit Reports Condition Found: IDOA did not adequately document review of single audit reports received from its subrecipients for the Aging Cluster program on a timely basis. The State of Illinois established the Grant Accountability and Transparency Unit (GATU) to implement the provisions of the State’s Grant Accountability and Transparency Act (GATA) on a centralized basis. GATU has established standardized reporting requirements for subrecipients of the various Federal and State programs administered by the State through its various departments. Subrecipients of the State are required to certify whether they expended more than $750,000 in federal awards during the fiscal year and submit their single audit reporting packages to the Federal Audit Clearinghouse (if required). GATU is then responsible for obtaining the single audit reporting package, verifying the report meets the single audit requirements, and assigning to the applicable state agency any findings attributable to amounts passed through to the subrecipient(s) by the State. IDOA staff are responsible for reviewing the reports assigned to them by GATU and determining whether: (1) federal funds reported in the schedule of expenditures of federal awards reconcile to IDOA records; (2) issuing management decisions on findings reported within required timeframes; and (3) applying sanctions to subrecipients who do not comply with reporting requirements (i.e. stop pay process). During our testing of a sample of single audit desk review files for seven subrecipients (with expenditures of $40,522,841 in the fiscal year), we noted the following: • For five subrecipients (with expenditures totaling $23,626,549), IDOA did not issue a management decision letter. • For one subrecipient (with expenditures totaling $2,117,589), IDOA did not issue a management decision letter over the subrecipient’s single audit that was received during state fiscal year 2024. In addition, the subrecipient did not file a single audit for the prior year with the Federal Audit Clearinghouse. While IDOA received a copy of the unfiled single audit report, a review was not performed and funding was not suspended in accordance with the State’s established policies. IDOA has not established controls over subrecipient single audit reviews at an adequate level of precision to ensure single audit reporting requirements, including obtaining and reviewing single audit reporting packages, issuing management decision letters, and invoking stop payment actions are performed within required timeframes. IDOA passed through $66,724,826 to subrecipients of the Aging Cluster program during the year ended June 30, 2024. Criteria or Requirement: According to 2 CFR 200.332(d), a pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statues, regulations and the terms and conditions of the subaward, and that the subaward performance goals are achieved. Additionally, 2 CFR 200.332(d)(3) and 2 CFR 200.521 state that a pass-through entity is required to issue a management decision on federal award audit findings within six months of the acceptance of the report by the Federal Audit Clearinghouse and ensure the subrecipient takes timely and appropriate corrective action on all audit findings. In addition, 2 CFR 200.303 requires non-Federal entities to, among other things, establish and maintain internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Effective internal controls should include procedures to ensure Single Audit reports are reviewed in a timely manner and management decisions are issued within required timeframes. Cause: In discussing these conditions with IDOA officials, they stated competing priorities and limited resources have impacted the Department’s ability to comply with this requirement. Possible Asserted Effect: Failure to complete and document reviews of subrecipient single audit reports in a timely manner may result in federal funds being expended for unallowable purposes and subrecipients not administering the federal programs in accordance with laws, regulations, and the grant agreement. Additionally, failure to issue management decision letters within six months of acceptance of the single audit report by the FAC results in noncompliance with federal regulations. Repeat Finding: A similar finding was not reported in the prior year audit. (Finding Code 2024-049) Statistical Sampling: The sample was not intended to be, and was not, a statistically valid sample. Recommendation: We recommend IDOA establish procedures to ensure (1) subrecipient single audit report reviewed within established deadlines, (2) management decision letters are issued for all findings affecting its federal programs in accordance with the Uniform Guidance, and (3) follow up procedures are performed to ensure subrecipients have taken timely and appropriate corrective action. Views of IDOA Officials: The Department agrees with this finding. Although the Department shows that all the Area Agency on Aging single audits were received in the audit report review management system (ARRMS), there is one pending approval by the Audit Clearinghouse. The Department did not get the audits reconciled during state fiscal year 2024. The Department did not issue any management decision letters for those audits.
The Arizona Office of Economic Opportunity did not ensure conference meals, graphic design services, and promotional item costs were appropriate, necessary, and managed to minimize charges and may be required to return $90,015 of WIOA Cluster funds Cluster name(s): WIOA Cluster Assistance Listings number(s) and name(s): 17.258 WIOA Adult Program 17.259 WIOA Youth Activities 17.278 WIOA Dislocated Worker Formula Grants Award number(s) and year(s): AA-34755-20-55-A-4 April 1, 2020 to June 30, 2023 AA-36307-21-55-A-4 April 1, 2021 to June 30, 2024 AA-38516-22-55-A-4 April 1, 2022 to June 30, 2025 23A55AW000049-01-00 July 1, 2023 to June 30, 2026 Federal agency: U.S. Department of Labor Compliance requirement(s): Not applicable Questioned costs: $90,015 Condition Contrary to federal regulations and the Department of Economic Security’s (DES) policy, the Arizona Office of Economic Opportunity (Office) paid for meals and promotional items provided to conference participants using WIOA Dislocated Worker Formula Grants federal program (WIOA federal program) funds without ensuring that the costs were appropriate, necessary, and managed to minimize charges to the federal award. Specifically, the Office hosted a 2-day Workforce Summit (Summit) conference in June 2024 and spent: X $61,038 on meals for 300 attendees over 2 days for lunch buffets, snacks, and beverages with an average attendee cost of $102 per person per day. X $25,302 for graphic design services without documenting how the services benefited the Summit. Office management reported the services were used to develop Summit communications and materials. X $3,675 on other promotional items, including pens, notebooks, lanyards, clips, vinyl pouches, and flyers, without maintaining evidence, such as photos, that the items displayed the required branding or funding tagline required by DES policies. The Office spent $5,066,045—including the questioned costs of $90,015—or nearly 5% of the State’s total $104,973,072 WIOA Cluster expenditures for the year ended June 30, 2024. We did not audit the WIOA Cluster for fiscal year 2024 because the Cluster did not meet the major federal program criteria. However, during fieldwork for the performance audit and sunset review of the Office, our contract auditors identified the above $90,015 unallowable costs charged to the WIOA federal program. Effect The Office’s paying for Summit costs without ensuring that they were appropriate, necessary, and managed to minimize charges to the federal award increased the risk that those who were intended to benefit from the program may not receive all the benefits they otherwise would have received. Consequently, the Office and/or DES may be required to return monies to the federal agency in accordance with federal requirements.1 Cause Office staff responsible for reviewing and approving Summit expenditures lacked sufficient guidance to identify unallowable costs because the Office lacked documented procedures, including a standardized review process, to ensure that costs charged to the WIOA federal program were allowable. DES passed WIOA federal program funds to the Office through an interagency service agreement (ISA) subaward but did not include conference-specific requirements imposed by federal regulations or additional requirements that DES imposed regarding promotional materials. Further, DES monitors the Office’s WIOA federal program expenditures during an annual desk review that takes place in May or June following the end of the prior fiscal year. DES management reported DES did not review any 2024 Summit costs since they will be subject to review during the May 2026 desk review. The review was scheduled almost 2 years after the unallowable costs were incurred because they were included in the Office’s July 2024 reimbursement request, which fell at the beginning of fiscal year 2025. Criteria Federal regulations and the Department’s Notice of Award for the WIOA federal program require the Office to sponsor conferences primarily to disseminate technical information. Further, the Office must exercise discretion and judgment in ensuring that conference costs are appropriate, necessary, and managed to minimize charges to the federal award. Allowable costs may include facility rental, speakers’ fees, registration fees, meals and refreshments, and other incidental expenses, unless further restricted by the terms and conditions of the federal award (2 CFR §200.432). 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). In addition, DES’ policy requires that all promotional material must include a specific funding source tagline and the State brand.2 Further, federal regulations require DES to: X Evaluate the Office’s fraud risk and risk of noncompliance with its ISA subaward to determine the appropriate subrecipient monitoring procedures (2 CFR §200.332[c]). X Ensure its subaward with the Office includes all requirements imposed by federal statutes, regulations, and the terms and conditions of the federal award and any additional requirements that DES imposes on the Office to meet its responsibilities under the federal award (2 CFR §200.332[b][2] and [3]). Finally, federal regulations require establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the Office 1. Ensure Summit costs charged to the WIOA federal program are appropriate, necessary, and managed to minimize charges to the federal award. 2. Develop and implement written procedures, including a standardized review process, to ensure that costs charged to the WIOA federal program are allowable prior to requesting reimbursement from DES. 3. Work with federal grantor and/or DES to resolve the $90,015 of questioned costs associated with the 2024 Summit and any subsequently held Summits. Recommendations to DES 4. Amend its ISA subaward with the Office to include conference-specific requirements imposed by federal regulations and additional requirements that DES imposed regarding promotional materials. 5. Adjust its monitoring procedures over the Office’s activities, which may include more frequent desk reviews of reimbursed costs, based on DES’ evaluation of the Office’s risk of noncompliance with federal regulations and DES’ notice of award for the WIOA federal program. 6. Provide Office staff responsible for reviewing and approving Summit expenditures with training and technical assistance on conference-related requirements. 2 Arizona Department of Economic Security. (2023). Workforce Innovation and Opportunity Act Policy Manual Title I-B, Chapter 3, Section 102.01 (C). Retrieved 4/8/2026 from https://des.az.gov/sites/default/files/media/Allowable-Costs-Fiscal-Policy-Section-100.pdf?time=1775665811357 Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
The Department of Economic Security made unallowable benefits payments totaling $64,131, increasing the risk that the program applicants received utility and rental payments for which they were not entitled Assistance Listings number(s) and name(s): 21.023 COVID-19 – Emergency Rental Assistance Program Award number(s) and year(s): ERA2-0165 May 10, 2021 through September 30, 2025 Federal agency: U.S. Department of the Treasury Compliance requirement(s): Activities allowed or unallowed, allowable costs/cost principles, and eligibility Questioned costs: $37,901 Assistance Listings number(s) and name(s): 21.027 COVID-19 – Coronavirus State and Local Fiscal Recovery Funds Award number(s) and year(s): None Federal agency: U.S. Department of the Treasury Compliance requirement(s): Activities allowed or unallowed, allowable costs/cost principles Questioned costs: $26,230 Total questioned costs: $64,131 Condition Contrary to federal regulations and its policies and procedures, the Department of Economic Security—Child and Community Services Division (Division) made unallowable benefits payments totaling $64,131 during fiscal year 2024 to rental assistance program applicants for the Emergency Rental Assistance Program (ERAP) and Coronavirus State and Local Fiscal Recovery Funds (CSLFRF) federal programs.1 1 The Arizona Department of Economic Security’s ERAP was established by Section 501 of Title V, Division N, of the Consolidated Appropriations Act of 2021 (Public Law No. 116-260) in response to the coronavirus pandemic and to provide financial relief to help keep individuals who rent housing in their homes and provide financial assistance to landlords who rely on rental income. The initial program is referred to as ERAP 1. ERAP 2 was established by Sec. 3201 of Title III, Subtitle B, of the American Rescue Plan Act of 2021 (Public Law No. 117-2). Further, the Arizona Department of Economic Security’s ERAP was extended through the federal Coronavirus State and Local Fiscal Recovery Funds, an American Rescue Plan Act of 2021 program (Public Law 117-2), as administered by the Arizona Governor’s Office. The Department of Economic Security began operating the program on July 1, 2022 (State of Arizona, Office of the Governor and Department of Economic Security Interagency Service Agreement No. ISA-DES-ARPA-021623-01). Specifically, for 14 of 60 ERAP and 7 of 60 CSLFRF benefit payments tested, we found that the Division made unallowable benefits payments of $37,901 for ERAP and $26,230 for CSLFRF to or on behalf of ineligible program applicants or those who lacked required eligibility documentation and for other inappropriate costs, as follows: X The Division inappropriately paid $43,607 of benefit payments to or on behalf of 9 ineligible program applicants, including: y $36,622 paid to or on behalf of 7 program applicants who did not reside in an eligible Maricopa County service area at the time of application ($29,647 for 6 ERAP program applicants and $6,975 for 1 CSLFRF applicant). y $6,300 paid to or on behalf of 1 CSLFRF applicant who previously received ERAP payments and was thus ineligible. y $685 paid to or on behalf of 1 ERAP program applicant whose income exceeded allowable program limits. X The Division inappropriately paid $14,815 of benefit payments to or on behalf of 10 program applicants, including: y $8,640 paid to or on behalf of 1 CSLFRF applicant for a lease buyout, which is an unallowed activity under Division policies. y $3,959 paid to or on behalf of 5 program applicants for rental arrears—rent not paid by the date specified in the lease agreement—payments exceeding the allowable 1-time, lump sum payments ($3,121 for 3 ERAP applicants and $838 for 2 CSLFRF applicants). y $2,216 paid to or on behalf of 4 program applicants for rental assistance exceeding the amount documented on the lease ($2,210 for 3 ERAP applicants and $6 for 1 CSLFRF applicant). X The Division inappropriately paid $5,709 of benefit payments to or on behalf of 2 program applicants without obtaining required documentation to support they were eligible to receive them, including: y $5,709 paid to or on behalf of 2 program applicants without required proof of income, a lease agreement, and other documentation supporting household size and the reimbursement of late penalties and fees related to rent and/or utility account bills ($2,238 for 1 ERAP program applicant and $3,471 for 1 CSLFRF applicant). Effect The Division’s making unallowable benefits payments to ineligible program applicants or without required documentation increases the risk that the program applicants received utility and rental payments for which they were not entitled. Also, the Division’s paying for inappropriate costs spent inconsistent with program requirements increases the risk that those who were intended to benefit from the program may not receive all the benefits they otherwise would have received. Consequently, the Division may be required to return these monies to the federal agency in accordance with federal requirements.2 During fiscal year 2024, the Division paid $44.2 million in benefit payments to or on behalf of program applicants requesting emergency rental and utility assistance for these 2 federal programs, as illustrated in Table 1 below, and is at risk that more of its benefit payment expenditures are inappropriate than those identified in our sample. Cause Division management reported that personnel responsible for evaluating program applications and determining program applicants’ eligibility and allowability of related costs fell behind on reviewing applications and did not have time to perform thorough evaluations, including making appropriate eligibility determinations, obtaining required documentation, or ensuring costs were allowable, because of the large quantity of program applications and staffing shortages due to employee turnover. Further, Division management reported that it did not detect and correct inaccurate eligibility determinations because its policies and procedures did not require 2 Federal Uniform Guidance audit requirements require its federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the Department, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). adjudicators to perform a postreview of the benefits subsystem’s automated review of eligibility requirements, such as verifying the income thresholds and geographical location aligned with the Division’s written policies and procedures and were supported by required documentation. Criteria Federal regulations require costs to be reasonable and adequately documented to be allowable under federal awards, and the Division’s written policies and procedures require certain documentation to support eligibility requirements related to where the applicant lives and their income.3,4,5 Specifically, Division policy requires a program application evaluation to ensure complete and reasonable documentation is obtained, including lease agreements; any bills related to utility accounts; and proof of income, household size, eligible service area residency, and risk of homelessness or housing instability. Also, the Division’s policies prohibit benefit payments for lease buy-offs and prohibit incomplete applications to be acted upon until applicants provide the required information and documentation to complete their applications. Finally, the Division also must establish and maintain effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the Division 1. Ensure benefit payments are for allowable costs paid to or on behalf of eligible program applicants. 2. Update existing policies and procedures to include a postreview of the benefits subsystem’s automated review of eligibility requirements, such as verifying the income thresholds and geographic location aligned with the Division’s written policies and procedures and were supported by required documentation. The Division should correct any inaccurate eligibility determinations identified during the postreview. 3. Allocate sufficient staffing resources to perform a thorough evaluation of program benefits applications and provide training on eligibility requirements and allowable benefit payments. 3 Federal Uniform Guidance cost principles require costs to be adequately documented (2 CFR 200.403[g]) and reasonable (2 CFR 200.404). In determining the reasonableness of a given cost, consideration must be given to several factors including requirements imposed by federal laws and regulations and the terms and conditions of the federal award (2 CFR 200.404[b]). 4 U.S. Department of the Treasury published guidance to assist grantees in ERAP administration, including a requirement for ERAP grantees to establish policies and procedures to govern the implementation of their ERAP programs consistent with the ERAP statutes and U.S. Department of the Treasury FAQs (U.S. Department of the Treasury Emergency Rental Assistance Frequently Asked Questions, Revised March 5, 2024. Retrieved 10/16/2025 from https://home.treasury.gov/system/files?file=136/ERA-FAQs03052024.pdf). 5 To be eligible for program benefits, individuals had to have filed, received, and been deemed eligible in accordance with the Division’s written policies and procedures. The benefit payments consisted of rent and/or utility payments for past due amounts (a 1-time lump sum payment) and for 3 months of payments on each reapplication up to a total of 18 months. Applicants must provide proof of income or self-attestation of no income and cannot earn an income that is above the area median income as determined by the HUD income limits (Section 8) set at 80% AMI (Area Median Income). These limits are updated annually and can be viewed at https://www.huduser.gov/portal/datasets/il. html#year2024. Further, applicants who live in Maricopa County must reside in Phoenix or Mesa. Rental applications must include a housing agreement with the applicant’s name and current rental address. Utility assistance applications must include bills or invoices or outstanding payments. Applications are reviewed by adjudicators who ensure the documentation for proof of residence, proof of income, housing agreement, any bills related to utility accounts, and proof of risk of homelessness or housing instability are complete and reasonable. Any decisions made contrary to policy must include a rationale for the decision in the supporting documentation for the application (Department of Economic Security Emergency Rental Assistance Program Policy, Rev 8 [7/1/2022] and Rev 9 [4/1/2023]). 4. Work with the federal agencies to resolve the $64,131 of program monies that were spent in violation of federal regulations and its policies and procedures and that may need to be returned to the federal agencies. This finding is similar to prior-year finding 2023-105 and was initially reported in fiscal year 2023. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
Four State agencies did not perform required subrecipient monitoring procedures, increasing the risk that program monies may have been misused and not spent in accordance with the award terms Assistance Listings number(s) and name(s): 21.027 COVID-19 Coronavirus State and Local Fiscal Recovery (SLFRF) Funds Award number(s) and year(s): None Federal agency: U.S. Department of the Treasury Compliance requirement(s): Subrecipient monitoring Questioned costs: $1,623,846 Condition Contrary to federal regulation, the Arizona Department of Housing (ADOH), Arizona Department of Water Resources (ADWR), Arizona Office of Tourism (AOT), and Industrial Commission of Arizona (ICA) did not perform the required monitoring of their subrecipients’ activities or compliance with the award terms and program requirements. Specifically, we found that 4 of 10 State agencies we tested did not perform the various and required monitoring procedures identified in Table 1 below and Tables 2 through 4, page 129. In addition, as of the report date, April 23, 2026, the Governor’s Office of Strategic Planning and Budgeting (OSPB) took appropriate action by identifying and self-reporting to us $1,623,846 of expenditures for 8 SLFRF program subrecipients, who were awarded monies prior to fiscal year 2024, and may not have spent the monies in accordance with program requirements.1 Specifically, based on our fiscal year 2023 audit recommendations in finding 2023-102, OSPB performed missing risk assessments for subrecipients awarded monies during fiscal years 2022 and 2023. As a result of these assessments, OSPB conducted additional onsite monitoring or desk reviews based on those results and identified $1,623,846 in questionable costs by its subrecipients. Additionally, OSPB identified several of these questioned costs as potentially fraudulent or inappropriate and forwarded this information to the Attorney General’s Office for further review. We selected OSPB as part of the 10 State agencies tested during fiscal year 2024. Of 24 OSPB subrecipients we tested, we did not identify any deficiencies with OSPB performing the required monitoring of their subrecipients’ activities or compliance with the award terms and program requirement during fiscal year 2024. In total during fiscal year 2024, there were 14 State agencies that paid $270.2 million to subrecipients, as shown in Table 5 below, or 56.2% of the State’s $480.4 million total federal expenditures for this program. Effect The 4 State agencies’ lack of required monitoring increased the risk that the $41.4 million of program monies they paid to 131 subrecipients may have been misused and not spent in accordance with the award terms and program requirements as shown in Table 5, page 130. If monies are spent inconsistent with program requirements, those who were intended to benefit from the program may not receive all the services or other benefits they otherwise would have received. ADOH, ADWR, AOT, and ICA are at risk that this finding applies to other federal programs they administer. Further, OSPB’s previously identified expenses that may not have been spent in accordance with program requirements may result in OSPB being required to return up to $1,623,846 of program monies to the federal agency in accordance with Uniform Guidance requirements.2 Cause Despite subrecipient monitoring requirements being included in the federal regulations, 4 State agencies did not develop and/or implement sufficient subrecipient monitoring policies and procedures to comply with federal regulations. Specifically, X ADOH’s management reported that its policies and procedures did not contain clear criteria for when single audits should be obtained and the process for conducting risk assessments. X ADWR’s management reported that it lacked policies and procedures for obtaining single audits and conducting risk assessments. X AOT’s management reported that it performed only limited monitoring procedures for subrecipients who expended more than $750,000 of AOT awards during the year. Additionally, AOT’s management reported that it misunderstood the detailed transactions required to substantiate the $50,214 in payroll expenditures. X ICA’s management reported that there was a misunderstanding on which State agency was responsible for performing the subrecipient monitoring of the monies it passed through to subrecipients and consequently did not develop all the necessary subrecipient monitoring policies and procedures. Further, OSPB previously reported that it hired additional staff in fiscal year 2023 to begin addressing audit finding issues noted in prior years and began performing required risk assessments in fiscal year 2024. 2 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, OSPB, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take action, as directed by the federal awarding agencies (2 CFR §200.521). Criteria Federal regulation requires State agencies to monitor subrecipients, which includes required monitoring procedures, as follows (2 CFR §200.332): X Assess the risk of each subrecipient’s noncompliance and perform monitoring activities based on those risk assessments. Based on risk, additional monitoring procedures could include providing training or technical assistance on program-related matters, performing site visits, and/or other monitoring procedures. X Review financial and performance reports. X Verify single audits were conducted timely; following up on and ensuring corrective action is taken on audit findings that could potentially affect the program; and issuing a management decision for audit findings pertaining to the federal award. X Include required information in subrecipient subaward agreements, including required federal award information; requirements imposed by federal statutes, regulations, and the terms and conditions of the federal award; any additional requirements that the pass-through entity imposes, and a requirement that the subrecipient permit the pass-through entity to access the subrecipient’s records and financial statements to fulfill its monitoring requirements. In addition, the State’s subrecipient monitoring policies and procedures require State agencies to consider and assess risk of each subrecipient and carry out required and various other monitoring procedures based on those risk assessments.3 Finally, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to ADOH, ADWR, AOT, and ICA Work with the State’s Office of Strategic Planning and Budgeting to either update or develop and implement policies and procedures and train responsible staff to perform required monitoring of their subrecipients to ensure compliance with award terms and program requirements, including procedures to: 1. Assess the risk of each subrecipient’s noncompliance and perform additional monitoring procedures based on those risk assessments such as reviewing financial and performance reports, providing training or technical assistance on program-related matters, performing site visits, and/or other monitoring procedures. (ADOH, ADWR, and ICA) 2. Verify subrecipients receive timely single audits, follow up on and ensure that corrective action is taken on audit findings that could potentially affect the program, and issue management decisions for audit findings pertaining to the federal award. (ADOH, ADWR, AOT, and ICA) 3 Arizona Department of Administration Office of Grants and Federal Resources. (2018). Grants Management Manual – Grantor, Chapter 8: Award Monitoring. Retrieved 10/29/2025 from https://ospb.az.gov/sites/default/files/2026-01/Arizona%20Grants%20Management%20 Grantor%20Manual%20Edition%202022.pdf 3. Request and view supporting transaction details prior to paying subrecipients for payroll costs to verify they meet the requirements of the award terms and program requirements. (AOT) 4. Establish subaward agreements with subrecipients communicating allowable uses of program monies and other information required by federal regulations prior to distributing program monies. (ICA) Recommendations to OSPB 5. Work with the federal agency and the subrecipients to resolve the $1,623,846 of program monies that may have been spent in violation of its federal award terms and that may need to be returned to the federal agency. 6. Continue to assess the risk of each subrecipient’s noncompliance and perform additional monitoring procedures based on those risk assessments such as reviewing financial and performance reports, providing training or technical assistance on program-related matters, performing site visits, and/or other monitoring procedures to ensure questioned costs are timely identified and remedied. This finding is similar to prior-year finding 2023-102 and was initially reported in fiscal year 2022. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
The Arizona Department of Education did not monitor procedures of charter schools with relationships with charter management organizations, risking funds not being spent in accordance with the award terms and program requirements, and reduced future awards Assistance Listings number(s) and name(s): 84.010 Title I Grants to Local Educational Agencies 84.367 Supporting Effective Instruction State Grants (formerly Improving Teacher Quality State Grants)* *referred to as Title II Award number(s) and year(s): S010A200003 July 1, 2020 through September 30, 2023 S010A210003 July 1, 2021 through September 30, 2023 S010A220003 July 1, 2022 through September 30, 2023 S010A230003 July 1, 2023 through September 30, 2024 S367A210049 July 1, 2021 through September 30, 2023 S367A220049 July 1, 2022 through September 30, 2023 S367A230049 July 1, 2023 through September 30, 2024 Federal agency: U.S. Department of Education Compliance requirement(s): Special tests and provisions Questioned costs: Unknown Condition The Arizona Department of Education’s Grants Management Department (Department) disbursed over $59 million and over $6.8 million in Title I and Title II funds, respectively, to 242 Title I and 233 Title II charter school local educational agencies (LEAs) during fiscal year 2024 but did not perform certain monitoring procedures required by the U.S. Department of Education. Specifically, the Department did not identify which of the 242 Title I and 233 Title II charter school LEAs receiving federal grant monies had relationships with charter management organizations (CMOs) in order to perform additional required monitoring to assess the additional risk posed by conflicts of interest, related-party transactions, or insufficient segregation of duties at these charter schools.1 1 The term “charter management organization” means a nonprofit organization that operates or manages a network of charter schools linked by centralized support, operations, and oversight (20 USC 7221i[3]). Retrieved 11/11/2025 from https://www.law.cornell.edu/uscode/ text/20/7221i#2 Effect The Department’s not identifying or performing additional monitoring of charter schools with relationships with CMOs increases the risk that funds allocated to these charter school LEAs may not have been spent in accordance with the award terms and program requirements and could result in the U.S. Department of Education reducing future awards.2 Further, if monies were spent inconsistently with program requirements, those who were intended to benefit from the program may not have received all the services or other benefits they otherwise would have received. Additionally, the Department is at risk that this finding applies to other federal programs it administers. Cause The Department’s documented program policies and procedures for monitoring LEAs did not differentiate between regular LEAs, charter schools without CMOs, or charter schools with relationships with CMOs and did not include specific procedures to assess the additional risk posed by conflicts of interest, related-party transactions, or insufficient segregation of duties. The Department reported that it began incorporating policy changes into grant administration and monitoring policies in early 2024; however, these policies were not completed until May 2024 and did not become effective until fiscal year 2025. Criteria Federal regulations require the Department to monitor subrecipients, including charter schools, which includes required monitoring procedures for assessing the risk of each subrecipient’s noncompliance and monitoring activities based on those risk assessments. Those federal regulations also provide that monitoring procedures may include reviewing financial and performance reports, providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures (2 CFR §200.332[b and d]) As part of these monitoring responsibilities, the U.S. Department of Education requires the Department to monitor charter schools with relationships with CMOs and assess the additional risk posed by conflicts of interest, related-party transactions, or insufficient segregation of duties.3,4 Also, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). 2 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the Department, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 3 On September 28, 2015, the U.S. Department of Education issued a letter to State Educational Agencies (SEAs) reminding them of their role in helping to ensure that federal funds accessed by public charter schools are used for intended, appropriate purposes, and provided additional resources for states, and specifically SEAs, to consult as they consider improvements to their monitoring and oversight procedures for charter schools (U.S. Department of Education. [2015, September]. Letter to SEAs. Retrieved 11/18/2025 from https://oese.ed.gov/files/2020/07/ finalsignedcsp.pdf 4 On September 29, 2016, the U.S. Department of Education’s Office of Inspector General issued an audit report on charter schools with CMOs and identified risks such as conflicts of interest, related-party transactions, or insufficient segregation of duties (U.S. Department of Education. [2016, September]. Nationwide Assessment of Charter and Education Management Organizations. Retrieved 11/18/2025 from https://oig.ed. gov/sites/default/files/reports/2023-11/a02m0012.pdf Recommendations to the Department 1. Perform annual monitoring over charter schools with relationships with CMOs, including performing risk-assessment procedures over the additional risk posed by conflicts of interest, related-party transactions, or insufficient segregation of duties, and carry out monitoring activities based on those risk assessments such as reviewing financial and performance reports, providing training or technical assistance on program-related matters, and performing on-site reviews, selective audits, and/or other monitoring procedures. 2. Implement revisions to existing LEA-monitoring policies and procedures and train employees to identify charter schools that have relationships with CMOs and to then assess and design monitoring procedures over conflicts of interest, related-party transactions, or insufficient segregation of duties. This finding is similar to prior-year finding 2023-125 and was initially reported in fiscal year 2023. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
The Department of Emergency and Military Affairs’ Emergency Management Division did not always retain documentation supporting payroll, increasing the risk that $103,045 may not have been spent in accordance with award terms and conditions Assistance Listings number(s) and name(s): 97.042 Emergency Management Performance Grants Award number(s) and year(s): EMF-2021-EP-0016-S01 October 1, 2020 through September 30, 2023 EMF-2021-EP-0018-S01 October 1, 2020 through June 30, 2025 EMF-2022-EP-0009-S01 October 1, 2021 through September 30, 2025 EMF-2023-EP-0008-S01 October 1, 2022 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Compliance requirement(s): Activities Allowed or Unallowed/Allowable Costs/Cost Principles Questioned costs: $103,045 Condition Contrary to federal regulations and its policy, the Department of Emergency and Military Affairs’ Emergency Management Division (Division) did not always retain documentation supporting the payroll costs it charged to the program. Specifically, the Division did not retain personnel action forms supporting and approving employees’ pay rates and/or authorization to work on the program for 5 of 40 employees we tested totaling $103,045, as follows: X $95,080 for 2 employees’ annual payroll costs lacked supported pay rates and authorization to work on the program. These employees transferred to other State agencies after the fiscal year ended, and contrary to Division policy and federal regulation, the Division did not retain their personnel records. X $7,965 for 3 employees annual payroll costs lacked supported pay rates. Previous personnel action forms authorized these 3 employees to work on the program. Effect The Division’s failure to retain documentation supporting payroll costs increased the risk that $103,045 may not have been spent in accordance with award terms and conditions. Consequently, the Division may be required to return monies to the federal agency in accordance with federal requirements.1 The Division’s $1.7 million overall program payroll costs paid to 76 employees, or 23% of $7.3 million total program costs during fiscal year 2024, are at an increased risk of not being spent in accordance with the award terms and conditions. Finally, the Division is at risk that this finding applies to other federal programs it administers. Cause The Division’s Administrative Services Office (Office) was not trained on or aware of Division policy requirements to prepare personnel action forms authorizing all employee pay rate changes and program assignments and to retain the records of employees who subsequently transferred to another State agency. Criteria Federal regulation requires the Division to maintain records for salaries and wages charged to federal awards that accurately reflect the work performed to ensure they are accurate, allowable, and properly allocated (2 CFR §200.430 [g][1][i]) and retain these records for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or passthrough grantor (2 CFR §200.334). In addition, the Department of Emergency and Military Affairs’ policy requires the Division to prepare and retain for 5 years after an employee’s termination all the employee’s employment records, including personnel action forms authorizing employee pay rate changes and program assignments. It also requires the Division to retain necessary personnel records of employees who transfer to another State agency for no less than 5 years.2 Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the Division, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 State of Arizona, Department of Emergency and Military Affairs. (2007). DEMA Directive 20.1: State Human Resources Administration, Sections 1.3: The Official Personnel File, 1.5: Employees Transferring to Another State Agency. Recommendations to the Division 1. Retain documentation for all payroll costs, including personnel action forms, to demonstrate employees’ salaries and wages are authorized to be charged to the federal program and spent in accordance with the program’s award terms and conditions. 2. Review the fiscal year 2024 payroll costs for the program to ensure they were properly supported and spent in accordance with the award terms and conditions and coordinate with the U.S. Department of Homeland Security, as necessary, to adjust future federal reimbursement requests or repay any unallowable costs the Division charged to the program. 3. Implement its written policy and train employees to prepare and retain for no less than 5 years the personnel action forms authorizing all employee pay rate changes and program assignments, including those who transfer to another state agency. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
The Department of Emergency and Military Affairs’ Emergency Management Division (Division) did not retain adequate documentation supporting reimbursement requests, matching requirements, and financial reports, risking the Division receiving monies it was not entitled to Assistance Listings number(s) and name(s): 97.042 Emergency Management Performance Grants Award number(s) and year(s): EMF-2021-EP-0016-S01 October 1, 2020 through September 30, 2023 EMF-2021-EP-0018-S01 October 1, 2020 through June 30, 2025 EMF-2022-EP-0009-S01 October 1, 2021 through September 30, 2025 EMF-2023-EP-0008-S01 October 1, 2022 through September 30, 2025 Federal agency: U.S. Department of Homeland Security Compliance requirement(s): Cash management, matching, and reporting Questioned costs: Unknown Condition Contrary to federal regulations, the Division did not retain adequate documentation supporting reimbursement requests, matching requirements, and financial reports as follows: X Cash management For 4 of 5 requests for reimbursement we tested, the Division did not retain adequate documentation to support the amounts requested for reimbursement from the federal agency. The Division used documentation provided by its subrecipients to calculate the amount to both reimburse the subrecipient and request from the federal government. However, while the Division provided documentation of the invoices paid under their requests for reimbursement, they were unable to indicate which invoice applied to the respective request for reimbursement. X Matching The Division was unable to demonstrate through its reimbursement requests or other supporting documentation how it used nonfederal funds for at least 50% of the total project cost. X Reporting The Division did not retain documentation supporting 3 of 3 Federal Financial Reports (FFR) we tested, as follows: y For the 2023 quarter 4 FFR, the Division could only provide an unapproved draft copy and could not demonstrate that it submitted the FFR to the federal agency. y For the 2024 quarter 1 FFR and the annual FFR, the Division did not retain underlying general ledger data or other records to support costs reported, including indirect costs calculated from an approved indirect cost rate agreement. Effect The Division’s failure to retain adequate documentation supporting reimbursement requests, matching requirements, and financial reports resulted in our being unable to determine whether the reimbursements were appropriate, matching requirements were met, and the reports were complete and accurate. There is also an increased risk that Division could receive federal monies to which it is not entitled. Also, if matching requirements are not met, the Division may be required to return program monies to the federal agency in accordance with federal requirements.1 Further, the federal agency is unable to rely on the financial reports to monitor the Division’s program administration, including its compliance with program requirements and ability to prevent and detect fraud, and evaluate the program’s success. Finally, the Division is at risk that this finding applies to other federal programs it administers. Cause The Division reported that turnover of staff who previously prepared documentation to support reimbursement requests, matching requirements, and financial reports and submitted the reimbursement requests and financial reports resulted in the Division’s inability to locate the supporting documentation for the reports, including the applicable indirect cost agreement, or explain how to reconcile a large number of invoices that were provided to the reimbursement requests tested. The Division also did not have formal policies and procedures requiring an independent review to ensure the accuracy and completeness of the information included in the reports, and the retention of all documentation supporting data included in its reports. Consequently, only 2 of the 3 reports we tested were reviewed and approved prior to submitting the reports to the federal agency. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient takes appropriate and timely corrective action (2 CFR §200.513(c)). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). Criteria Federal regulation requires the Division to retain all public records, including financial records and supporting documentation, related to a federal program for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or pass-through grantor (2 CFR §200.334). In addition, federal regulation requires the Division to submit its quarterly reports no later than 30 days after the reporting period (2 CFR §200.328). Federal regulation also requires the Division to use the reimbursement method to administer the program, whereby the Division is reimbursed with federal program monies only after it spends its own monies for authorized program purposes and requests reimbursement from the federal grantor (2 CFR §200.305[B][3]). Also, the program’s grant agreement requires the Division to match 50% of the approved project costs from nonfederal sources. Finally, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations to the Division 1. Retain documentation for all reimbursement requests, matching requirements, and financial reports, such as the underlying general ledger data, approved indirect cost rate agreements, or information provided by its subrecipients for a period of 3 years from the date the program’s final report is submitted to the federal agency. 2. Review the reports identified above to ensure they were accurate. If any inaccuracies are identified, work with the federal grantor to correct these reports. 3. Develop and implement written policies and procedures over the preparation of reimbursement requests and financial reports, and the monitoring of the Division’s matching requirements as well as the retention of these records. The Division should train responsible staff on these policies and to perform an independent review of these documents to ensure accuracy and completeness prior to submission to the federal agency. 4. Allocate sufficient resources, such as staffing, to comply with the award terms and program requirements over reimbursement requests, matching requirements, and financial reports. Views of responsible officials State management concurs with this finding. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials regarding these recommendations. We are not required to audit and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy.
FINDING REFERENCE NUMBER 2024-052 FEDERAL PROGRAMS (ALN – 93.558) TEMPORARY ASSISTANCE FOR NEEDY FAMILIES (TANF) U.S. DEPARTMENT OF HEALTH AND HUMAN SERVICES AWARD NUMBERS 2022G996117 (Federal Award Year: 10/1/2021 – 9/30/2022) 2023G996117 (Federal Award Year: 10/1/20212 – 9/30/2023) 2401PRTANF1 (Federal Award Years: 10/1/2023 through 9/30/2026) ADMINISTRATION ADMINISTRATION FOR SOCIOECONOMIC DEVELOPMENT OF THE FAMILY (ADSEF, BY ITS SPANISH ACRONYM) COMPLIANCE REQUIREMENT SUBRECIPIENT MONITORING TYPE OF FINDING INTERNAL CONTROL AND COMPLIANCE – MATERIAL WEAKNESS AND MATERIAL NONCOMPLIANCE CRITERIA In accordance with 2 CFR 200.332, a Pass-Through Entity must: (a) Verify that the subrecipient is not excluded or disqualified in accordance with § 180.300. Verification methods are provided in § 180.300, which include confirming in SAM.gov that a potential subrecipient is not suspended, debarred, or otherwise excluded from receiving Federal funds. (b) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the information provided below. A pass-through entity must provide the best available information when some of the information below is unavailable. A pass-through entity must provide the unavailable information when it is obtained. Required information includes: (1) Federal award identification. (i) Subrecipient's name (must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated in the subaward; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity, including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development. (2) All requirements of the subaward, including requirements imposed by Federal statutes, regulations, and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient for the pass-through entity to meet its responsibilities under the Federal award. This includes information and certifications (see § 200.415) required for submitting financial and performance reports that the pass-through entity must provide to the Federal agency; … (5) A requirement that the subrecipient permit the pass-through entity and auditors to access the subrecipient's records and financial statements for the pass-through entity to fulfill its monitoring requirements; and (6) Appropriate terms and conditions concerning the closeout of the subaward. (c) Evaluate each subrecipient's fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient's risk, a pass-through entity should consider the following: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (d) If appropriate, consider implementing specific conditions in a subaward as described in § 200.208 and notify the Federal agency of the specific conditions. (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to cross-cutting audit findings in accordance with section § 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Depending upon the pass-through entity's assessment of the risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient's program operations; and (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (g) Verify that a subrecipient is audited as required by subpart F of this part. (h) Consider whether the results of a subrecipient's audit, site visits, or other monitoring necessitate adjustments to the pass-through entity's records. (i) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 and in program regulations. STATEMENT OF CONDITION The SEFA provided identified transactions as pass-through to subrecipients. As part of our audit procedures we interviewed the personnel in charge of the program, and we noted that ADSEF does not formally recognize as subrecipients the entities that receive TANF funds to carry out programmatic activities on behalf of the agency. As a result, ADSEF did not establish subaward agreements that included the elements required by 2 CFR §200.332(a), nor did it implement adequate subrecipient risk assessment and monitoring procedures. During the audit, it was observed that: (1) The signed agreements do not identify the entities as subrecipients; (2) The agreements do not contain the minimum elements required by 2 CFR §200.332(a) including, ▪ FAIN, Assistance Listing Number, Federal performance period, and total amount of Federal funds obligated; ▪ ADSEF did not conduct documented assessments of fraud risk or non-compliance risk; ▪ There was no evidence of ongoing monitoring of financial and programmatic performance; ▪ There was no documentation of a review of Single Audits or follow-up on related findings; ▪ Formal corrective action or enforcement mechanisms were not established for non-compliant entities. QUESTIONED COSTS None. PERSPECTIVE INFORMATION This deficiency is a systemic problem related to ADSEF's inability to adequately identify entities receiving TANF funds as subrecipients and to implement the required monitoring procedures. STATEMENT OF CAUSE The situation is attributed to ADSEF incorrectly classifying recipient entities as suppliers or contractors, rather than subrecipients, and failing to develop policies and procedures aligned with the requirements of 2 CFR §200.332 for administration and monitoring of Federal subawards. POSSIBLE ASSERTED EFFECT Failure to properly identify and monitor subrecipients increases the risk of: • Noncompliance with applicable Federal laws and regulations; • Failure to detect programmatic and financial deficiencies in a timely manner; • Inability to demonstrate compliance with Federal fund management requirements; • Potential cost challenges and Federal penalties. IDENTIFICATION OF REPEAT FINDING No reported as prior audit finding. RECOMMENDATIONS We recommend that ADSEF provide adequate training to program staff responsible for subrecipient monitoring to ensure compliance with Federal requirements, including the proper identification of subrecipients, performance of on-site monitoring visits, evaluation of audit reports, assessment of subrecipient risk, and documentation of monitoring activities.
FINDING NO: 2024-018 (Repeat 2023-013) Strengthen Internal Controls over Subrecipient Monitoring STATE AGENCY: Oklahoma Department of Transportation FEDERAL AGENCY: Federal Transit Authority ALN: 20.509 FEDERAL PROGRAM NAME: Formula Grants for Rural Areas FEDERAL AWARD NUMBER: OK-2017-023-05, OK-2018-023-03, OK-2019-025-03, OK-2020-021-02, OK- 2021-018-00, OK-2022-016-00, OK-2022-025-00, OK-2022-027-00, OK-2023-026-00, OK-2024-006-00, OK-2024- 013-00 FEDERAL AWARD YEAR: 2017, 2018, 2019, 2020, 2021, 2022, 2023, 2024 CONTROL CATEGORY: Subrecipient Monitoring QUESTIONED COSTS: $0 Condition and Context: The Office of Mobility and Public Transit (OMPT) at the Oklahoma Department of Transportation (Department) is responsible for is responsible for overseeing subrecipients associated with the Assistance Listing Number (ALN) 20.509 grant. OMPT provides the grant information, as required in 2 CFR 200.332, through the contract agreement between the Department and the subrecipient. A template of the contract agreement is used to ensure the correct information is provided. We reviewed the contracts agreements for eight (8) of 23 subrecipients receiving funding during the audit period to determine whether the correct information was communicated to the subrecipients. We identified three (3) or 37.5% (3/8) subrecipients who received a contract agreement with an incorrect Assistance Listing Number (ALN). As part of the monitoring process, the project managers obtain subrecipients’ audit reports and forward them to the Department’s Audit Office for review. OMPT relies on responses received from the Audit Office subsequent to review for identification of findings to monitor and assess the risk related to subrecipients’ compliance with Federal statutes, regulations, and the terms and conditions of the subaward. OMPT uses an Single Audit Tracking spreadsheet as a control mechanism to ensure the requirements described in 2 CFR 200.332 are met and OMPT’s program managers are required to update the audit tracking spreadsheet for their assigned subrecipients. We met with OMPT employees to discuss the control processes used to ensure monitoring requirements were met. During the discussion, it was discovered that risk assessments were not performed, and the Single Audit Tracking spreadsheet was used sporadically. Additionally, we noted the Single Audit Tracking sheet omitted two (2) or 9.09% (2/22) of the subrecipients expected to have and submit an audit during the period. We reviewed documentation for the 22 subrecipients that were expected to have and submit an audit during the audit period to determine whether the Department complied with the monitoring of the subrecipients audits. The following was observed: • Twelve (12) or 54.55% (12/22) of the subrecipients did not submit an audit report until after the audit period and no communication was provided to indicate attempts were made by OMPT to obtain the audit reports. • Two (2) or 9.09% (2/22) of the subrecipients did not submit an audit report at all and no communication was provided to indicate attempts were made by OMPT to obtain the audit reports. • One (1) or 4.55% (1/22) of the subrecipients submitted an Agreed Upon Procedure instead of a single audit or financial audit. • Six (6) or 27.27% (6/22) of the subrecipients submitted a single audit or a financial audit and it was not reviewed by the Audit Office. This is a repeat finding for the current audit period. According to the status reported in the SFY 2023 Summary Schedule of Prior Audit Findings, corrective action was implemented 6/30/2024. Because the SFY 2023 corrective action was implemented after the audit period, results of those corrections were not a part of the scope of the audit. Cause: The Department lacked a sufficient system of controls to properly monitor subrecipients. An unauthorized change to the contract template went unnoticed when the contract agreement was created and the review process by the Department did not detect the discrepancy between the Federal award and the contract agreement. - A process to evaluate the risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subawards was not established. - Program managers’ use of the Single Audit Tracking sheet is inconsistent and the Single Audit Tracking sheet lacks reliable oversight to ensure that program managers are effectively monitoring the subrecipients. Further, the Department does not have an adequate process in place to determine whether subrecipients are subject to a single audit or financial audit. Effect: Inadequate monitoring can lead to program non-compliance on the part of the Department and its subrecipients. - The Department prevented the subrecipients from properly recording or reporting the activity related to the contract agreements due to an incorrect ALN. - Monitoring of subrecipient activities is not directly related to the level of noncompliance risk each individual subrecipient poses. - Inadequate tracking of audits has prevented the Department from ensuring the subrecipients’ audits were received. This in turn prevented the Department from performing review and taking timely and appropriate action on deficiencies detected through audits. Recommendation: We recommend the Department review and update the contract template to ensure it contains the correct grant information and modify the contract agreement review process to ensure the review is robust enough to detect whether correct grant information is provided to the subrecipients. We further recommend the Department send corrected grant information in a letter or email to active grants to subrecipients who received incorrect Federal award information in their contract agreement. In addition, we recommend the Department continue with implementation of corrective action procedures and training necessary to ensure subrecipient risk assessments are performed, inquiries are made with sub-recipients to determine the audit type required based on the expected federal expenditures, and the Single Audit Tracking sheet is updated monthly for review and/or follow-up. Criteria: 2 CFR 1201.1 states, “Except as otherwise provided in this part, the Department of Transportation adopts the Office of Management and Budget Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (2 CFR part 200). This part supersedes and repeals the requirements of the Department of Transportation Common Rules (49 CFR part 18 - Uniform Administrative Requirements for Grants and Cooperative Agreements to State and Local Governments and 49 CFR part 19 - Uniform Administrative Requirements - Uniform Administrative Requirements for Grants and Agreements with Institutions of Higher Education, Hospitals, and other Non-Profit Organizations), except that grants and cooperative agreements executed prior to December 26, 2014 shall continue to be subject to 49 CFR parts 18 and 19 as in effect on the date of such grants or agreements. New parts with terminology specific to the Department of Transportation follow.” 2 CFR 200.332 states in part, “All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward. Required information includes: (1) Federal award identification. xii. Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward... (f) Verify that a subrecipient is audited as required by subpart F of this part... (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations.” 2 CFR 200.521 states in part, “(a) General. The management decision must clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments or take other action. If the auditee has not completed corrective action, a timetable for followup should be given.…While not required, the Federal agency or pass-through entity may also issue a management decision on findings relating to the financial statements, which are required to be reported in accordance with GAGAS.” 2 CFR 200.521 states in part, “(d) Time requirements. The Federal agency or pass-through entity responsible for issuing a management decision must do so within six months of acceptance of the audit report by the FAC. The auditee must initiate and proceed with corrective action as rapidly as possible and corrective action should begin no later than upon receipt of the audit report.” Views of Responsible Official(s) Contact Person: Eric Rose/Bobby Parkinson Anticipated Completion Date: 12/31/2026 Corrective Action Planned: The Oklahoma Department of Transportation agrees with the finding. See corrective action plan located in the corrective action plan section of this report.
Reference Number: 2024-004 Federal Program Titles: Temporary Assistance for Needy Families (TANF) Foster Care – Title IV-E Federal Assistance Listing Numbers: 93.558 93.658 Federal Agency: U.S. Department of Health and Human Services Pass-Through Entity: California Department of Social Services Federal Award Number and Year: N/A Name of County Department: Health and Human Services Category of Finding: Subrecipient Monitoring Material Noncompliance and Material Weakness Criteria In accordance with Title 2 of the Code of Federal Regulations (CFR) § 200.332, all pass-through entities (PTE) must: (a) Verify that the subrecipient is not excluded or disqualified in accordance with § 180.300. Verification methods are provided in § 180.300, which include confirming in SAM.gov that a potential subrecipient is not suspended, debarred, or otherwise excluded from receiving Federal funds. (b) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the information provided below. A pass-through entity must provide the best available information when some of the information below is unavailable. A pass-through entity must provide the unavailable information when it is obtained. Required information includes: (1) Federal award identification. (i) Subrecipient’s name (must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated in the subaward; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity, including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the pass-through entity; (x) Federal award project description, as required by the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of the Federal agency, pass-through entity, and contact information for awarding official of the pass-through entity; (xii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement; (xiii) Identification of whether the Federal award is for research and development; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is used in accordance with § 200.414). (2) All requirements of the subaward, including requirements imposed by Federal statutes, regulations, and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient for the pass-through entity to meet its responsibilities under the Federal award. This includes information and certifications (see § 200.415) required for submitting financial and performance reports that the pass-through entity must provide to the Federal agency; (4) Indirect cost rate: (i) An approved indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, a pass-through entity must determine the appropriate rate in collaboration with the subrecipient. The indirect cost rate may be either: (A) An indirect cost rate negotiated between the pass-through entity and the subrecipient. These rates may be based on a prior negotiated rate between a different pass-through entity and the subrecipient, in which case the pass-through entity is not required to collect information justifying the rate but may elect to do so; or (B) The de minimis indirect cost rate. (ii) The pass-through entity must not require the use of the de minimis indirect cost rate if the subrecipient has an approved indirect cost rate negotiated with the Federal Government. Subrecipients may elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to access the subrecipient’s records and financial statements for the pass-through entity to fulfill its monitoring requirements; and (6) Appropriate terms and conditions concerning the closeout of the subaward. (c) Evaluate each subrecipient’s fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient’s risk, a pass-through entity should consider the following: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). (d) If appropriate, consider implementing specific conditions in a subaward as described in § 200.208 and notify the Federal agency of the specific conditions. (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The pass-through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass-through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) Resolve audit findings specifically related to the subaward. However, the pass-through entity is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass-through entity may rely on the subrecipient’s cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to cross-cutting audit findings in accordance with section § 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Depending upon the pass-through entity’s assessment of the risk posed by the subrecipient (as described in paragraph (c) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; (2) Performing site visits to review the subrecipient’s program operations; and (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (g) Verify that a subrecipient is audited as required by subpart F of this part. (h) Consider whether the results of a subrecipient’s audit, site visits, or other monitoring necessitate adjustments to the pass-through entity’s records. (i) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 and in program regulations. Condition During our audit of the TANF and Foster Care programs, we noted that the draft schedule of expenditures of federal awards did not include expenditures passed through to subrecipients. Upon inquiry, program management did not have a clear understanding of the difference between a subrecipient and a contractor and, as a result, had not identified, reported on, or monitored subrecipients. Subsequently, using the criteria in 2 CFR § 200.331 Subrecipient and contractor determinations, program management performed an analysis of payments made to contractors and identified the following: • TANF: two entities that received a total of $293,289 in payments during FY2023-24. • Foster Care: two entities that received a total of $139,607 in payments during FY2023-24. Of these we sampled two subrecipients from TANF and one subrecipient from Foster Care. Because program management did not previously identify any entities as subrecipients, the County did not comply with the requirements of subrecipient monitoring as follows: Both TANF and Foster Care: • The County could not demonstrate that a verification was performed to determine that the entities were not excluded or disqualified from receiving federal funds for all three subrecipients. While one entity’s contract included reference to 2 CFR Part 376 Nonprocurement, Debarment and Suspension, it did not specifically include a self-certification clause. • TANF Contracts: One contract was deficient and did not identify the contract as a federally funded subaward and did not include the required elements outlined in § 200.332 (b). The contract for the other entity was more prescriptive and included most of the elements in § 200.332 (b) but also did not have current language referencing the Uniform Guidance, which was effective in 2014 (Contract date was December 4, 2019), and instead referred to outdated requirements under OMB Circular A-133. One contract did not address indirect costs. One contract did not address provisions to permit the County as the grantor to access the entity’s records to audit or fulfill other monitoring responsibilities. Both contracts did not address the terms and conditions concerning the closeout of subawards. Both TANF and Foster Care: • The County did not perform the required fraud risk and risk of noncompliance assessment to determine the appropriate level of monitoring. • The County has not developed and documented a formal subrecipient monitoring plan. Upon inquiry, program management provided a bulleted list of their monitoring activities; however, reviews, meetings, action items, and follow-up were not formally documented to demonstrate the activities were performed. • The County received single audit reports from the two subrecipients identified; however, the County did not reconcile the amounts reported to its records. Foster Care TANF #1 TANF #2 Total Subrecipient’s SEFA $ 0 $ 101,886 $ 232,499 $ 334,385 County SEFA 105,530 43,689 249,560 399,884 Variance (105,530) 58,197 (17,601) (65,499) Cause Program staff were not aware of the requirements to evaluate and classify entities as contractor or subrecipient and did not understand the need to formalize a subrecipient monitoring program in accordance with §200.332. The cause can be partially contributed to turnover in the County’s Health and Human Services Department. Effect Failure to evaluate and identify subrecipients will cause the County to be out of compliance with its oversight responsibilities resulting in the potential for federal funds to be used inappropriately. Failure to provide all the required subaward information may result in subrecipients incorrectly reporting on federal pass-through awards in their Single Audit reports. Failure to have a formal monitoring program that includes risk assessment will result in the County inadequately monitoring the activities of subrecipients and hold them accountable to complete corrective action plans for identified noncompliance. Questioned Costs None. Context Fiscal year 2024 payments to the subrecipients were as listed: • TANF - $293,289 or 9% of total program expenditures. • Foster Care - $139,607 or 6% of total program expenditures. The sample was not a statistically valid sample. Identification as a Repeat Finding Previously reported as Finding 2023-003. Recommendation We recommend the County consider the following: 1. Provide comprehensive training to program managers on how to assess if an entity meets the criteria of a subrecipient as defined in § 200.331. 2. Formalize a subrecipient monitoring program based on the criteria in § 200.332. 3. Design a subrecipient agreement template to include all the elements required by 2 CFR § 200.332(b). Incorporate the use of the template in the contracting requirements for all departments receiving federal funds. 4. For existing subrecipients that were not provided the required elements, provide a letter or amended agreement to include all the required elements of 2 CFR § 200.332(b).
Finding Number: 2023-001 Internal Control over Compliance and Compliance with the Subrecipient Monitoring Compliance Requirement, Repeat Finding, Finding No. 2022-001 Identification of the Major Federal Program: Programs: Government Agency: Inclusion Across the Nation of Communities of Learners of Underrepresented Discoverers in Engineering and Science Assistance Listing Number: 47.076 Award Number: HRD-1834540 Award Years: 09/01/2018 – 02/28/2025 PhysTEC: Building a Solution to the National Physics Teacher Shortage Assistance Listing Number: 47.049 Award Number: PHY-1707990 Award Years: 07/01/2017 – 06/30/2023 National Science Foundation (NSF) Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the “Transparency Act” that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions – Our examination of the program’s subrecipient monitoring requirements includes the review and approval of financial and performance quarterly reports by the program managers. The quarterly reports are prepared by APS’ grants administrator with inputs provided by the subrecipient submitted to the program managers. Of the program’s twenty (20) subrecipients, we examined eight (8) subrecipients and observed that although the respective program managers had monitoring oversight of the various grant’s financial and programmatic activities, there was no formal evidentiary documentation to support the monitoring oversight process performed by the program managers. Furthermore, our examination of the program’s subrecipient monitoring requirements includes follow-ups by APS to ensure the subrecipients take timely and appropriate action on all deficiencies pertaining to federal awards provided to the subrecipients which have been detected through reviews of audits, on-site reviews, and other means. We selected six (6) subrecipients for testing and noted that for two (2) samples selected APS was unable to provide evidence that it monitored the subrecipients through review of its single audit reports, on-site reviews, and other means. We also tested a sample of three (3) subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds timely and on one (1) of the sub awards reported, the contract award amount reported is less than the actual expenditures incurred by the subrecipient. APS began implementation of its corrective action plan on June 5, 2023, and the exceptions identified above is as a result of the fact that APS was still in the implementation process of its corrective action plan. Cause - Management does not have adequate internal controls and policies and procedures in place to ensure that a review is performed on the financial and programmatic reports in a timely manner and to ensure that its subrecipients do not have any audit deficiencies relating to federal award programs and if any deficiencies are detected, that the subrecipients takes timely and appropriate action to resolve the deficiencies identified. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS’ noncompliance with the reporting requirements. Effect or potential effect – APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. In addition, failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs – None. Context – These are conditions identified per review of APS compliance with specified compliance requirements using a statistically valid sample. Recommendations – BDO recommends that APS continue to apply the implemented policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are documented and maintained. Furthermore, APS should continue to implement policies to obtain and review single audit reports of its subrecipients in order to ensure compliance with all the required laws, guidelines and requirement under the award. BDO recommends that APS continues to implement established policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS’ corrective action is described in the Management’s Corrective Action Plan included below.
Finding Number: 2023-001 Internal Control over Compliance and Compliance with the Subrecipient Monitoring Compliance Requirement, Repeat Finding, Finding No. 2022-001 Identification of the Major Federal Program: Programs: Government Agency: Inclusion Across the Nation of Communities of Learners of Underrepresented Discoverers in Engineering and Science Assistance Listing Number: 47.076 Award Number: HRD-1834540 Award Years: 09/01/2018 – 02/28/2025 PhysTEC: Building a Solution to the National Physics Teacher Shortage Assistance Listing Number: 47.049 Award Number: PHY-1707990 Award Years: 07/01/2017 – 06/30/2023 National Science Foundation (NSF) Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the “Transparency Act” that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions – Our examination of the program’s subrecipient monitoring requirements includes the review and approval of financial and performance quarterly reports by the program managers. The quarterly reports are prepared by APS’ grants administrator with inputs provided by the subrecipient submitted to the program managers. Of the program’s twenty (20) subrecipients, we examined eight (8) subrecipients and observed that although the respective program managers had monitoring oversight of the various grant’s financial and programmatic activities, there was no formal evidentiary documentation to support the monitoring oversight process performed by the program managers. Furthermore, our examination of the program’s subrecipient monitoring requirements includes follow-ups by APS to ensure the subrecipients take timely and appropriate action on all deficiencies pertaining to federal awards provided to the subrecipients which have been detected through reviews of audits, on-site reviews, and other means. We selected six (6) subrecipients for testing and noted that for two (2) samples selected APS was unable to provide evidence that it monitored the subrecipients through review of its single audit reports, on-site reviews, and other means. We also tested a sample of three (3) subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds timely and on one (1) of the sub awards reported, the contract award amount reported is less than the actual expenditures incurred by the subrecipient. APS began implementation of its corrective action plan on June 5, 2023, and the exceptions identified above is as a result of the fact that APS was still in the implementation process of its corrective action plan. Cause - Management does not have adequate internal controls and policies and procedures in place to ensure that a review is performed on the financial and programmatic reports in a timely manner and to ensure that its subrecipients do not have any audit deficiencies relating to federal award programs and if any deficiencies are detected, that the subrecipients takes timely and appropriate action to resolve the deficiencies identified. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS’ noncompliance with the reporting requirements. Effect or potential effect – APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. In addition, failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs – None. Context – These are conditions identified per review of APS compliance with specified compliance requirements using a statistically valid sample. Recommendations – BDO recommends that APS continue to apply the implemented policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are documented and maintained. Furthermore, APS should continue to implement policies to obtain and review single audit reports of its subrecipients in order to ensure compliance with all the required laws, guidelines and requirement under the award. BDO recommends that APS continues to implement established policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS’ corrective action is described in the Management’s Corrective Action Plan included below.
Cluster: Research and Development Agency: Department of Human and Health Services Award Names: Safety and Health Risks in Energy Transition for the Commercial Fishing Industry Award Numbers: U01OH012502 Assistance Listing Title: Center for Disease Control and Prevention (CDC) Assistance Listing Number: 93.262 Award Year: FY 2023 Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Condition Through our testing of 4 subrecipients out of a total subrecipient population of 10, we were able to obtain a documented initial risk assessment for each subrecipient selected and other evidence of monitoring such as meetings with the subrecipients. However, we were unable to obtain evidence that the Company obtained and reviewed the annual Uniform Guidance report or annual audited financial statements (if the entity was not subject to a Uniform Guidance audit) for 1 out of 4 subrecipients selected for testing. Cause The Company failed to ensure that their subrecipient monitoring process included obtaining and reviewing every subrecipient’s annual Uniform Guidance report or annual audited financial statements during FY 2023. Effect The lack of an annual review of subrecipient audits may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend the Company follow their policy, which includes obtaining and reviewing Uniform Guidance reports (or audited financial statements to the extent Uniform Guidance reports are not available) for every subrecipient on an annual basis and ensure that it is completed for all applicable awards. When reviewing the reports, they should understand the type of opinion(s) expressed and whether there were any findings associated with their awards, document their review and assess whether there is any change in the risk assessment and subsequent monitoring needed of each subrecipient. We also recommend a supervisory review over subrecipient monitoring to be included in the process to ensure it gets completed completely and accurately for all awards. This supervisory review should also be evidenced through documentation. This is a repeat finding of 2022-001, which continued to remain open during FY2023. Management’ Views and Corrective Action Plan Management’s Views and Corrective Action Plan are included at the end of this report.
FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Subrecipient Monitoring Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-005. Condition and Context The County received a total State and Local Fiscal Recovery Funds (SLFRF) allocation of $13,177,707. During the audit period, the County provided subawards of SLFRF funds to other entities. As a pass-through entity, the County must: Identify the award and the applicable requirements to each subrecipient. Evaluate each subrecipient's risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for an authorized purpose, complies with the terms and conditions of the subaward, and achieves performance goals. Subawards, totaling $290,000, were provided to two different entities. Both subrecipient agreements associated with the subawards were selected for testing. For the two agreements tested, the following information was incomplete or missing: The federal award identification number (FAIN). The federal award date of award to the recipient by the federal agency. The name of the federal awarding agency, pass-through entity (auditee), and contact information for awarding official of the pass-through entity (auditee). The Assistance Listings Number and Title; the pass-through entity must identify the dollar amount made available under each federal award and the Assistance Listings Number at time of disbursement. Furthermore, the County did not have an evaluation of the subrecipients' risk of noncompliance or monitoring activities demonstrating compliance with the subrecipient monitoring requirement. The County did not request any financial or audit documentation from the subrecipients. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 21 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.331(a) states: "Subrecipients. A subaward is for the purpose of carrying out a portion of a Federal award and creates a Federal assistance relationship with the subrecipient. See definition for Subaward in § 200.1 of this part. Characteristics which support the classification of the non-Federal entity as a subrecipient include when the non-Federal entity: (1) Determines who is eligible to receive what Federal assistance; (2) Has its performance measured in relation to whether objectives of a Federal program were met; (3) Has responsibility for programmatic decision-making; (4) Is responsible for adherence to applicable Federal program requirements specified in the Federal award; and (5) In accordance with its agreement, uses the Federal funds to carry out a program for a public purpose specified in authorizing statute, as opposed to providing goods or services for the benefit of the pass-through entity." 2 CFR 200.332 states in part: "All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward . . . (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; INDIANA STATE BOARD OF ACCOUNTS 22 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the passthrough entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports; (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass-through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. INDIANA STATE BOARD OF ACCOUNTS 23 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. (b) Evaluate each subrecipient's risk of noncompliance with Federal statues, regulations, and the terms and conditions of the subaward for purposes of determined the appropriate subrecipient monitoring . . . (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. . . ." Cause The system of internal controls as established by the management of the County was not properly designed nor implemented. The County was unable to provide documentation that monitoring procedures were in place over subrecipients. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot be sure subrecipients are provided an adequate subaward agreement, with all required elements and are adequately monitored. As such, subaward agreements entered into by the County did not include all the required elements. In addition, the County did not properly monitor the non-profit to ensure proper spending of the federal funds. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 24 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls and develop policies and procedures to ensure subrecipients are provided with an adequate subaward agreement and monitored as appropriate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
2023-001 - Internal Controls over Subrecipient Monitoring (SD, NC) Federal Program Title: Coronavirus State and Local Fiscal Recovery Funds Federal Catalog Number: 21.027 Federal Agency: U.S. Department of Treasury Category of Finding: Subrecipient Monitoring Criteria: Pursuant to the Office of Management and Budget (OMB) 2 CFR Part 200, Appendix XI, Compliance Supplement May 2023, sections 3-M-1 and 3-M-2: A recipient must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Condition: While the Society currently has policies and procedures for monitoring subrecipients, it does not have a policy specifically relating to subaward agreements between the Society and its subrecipients that is compliant with applicable Federal statutes per 2 CFR part 200, Appendix XI, Compliance Supplement May 2023, sections 3-M-1 and 3-M-2. No formal subaward agreement was drafted by the Society and its subrecipient. Cause: Lack of formal policies specifically addressing federal requirements for subaward agreements. Effect or Potential Effect: Although the Society has existing policies and procedures for monitoring, the absence of a formal subaward agreement compliant with federal regulations may potentially result in the Society sending funds to subrecipients for activities and services that are nonconforming to allowed costs under the Uniform Guidance. Questioned Cost: None Context: During the audit, we did not receive a copy of the subaward between the Society and its subrecipient. Repeat of a Prior-Year Finding: No.
Criteria: 2 CFR 200.332 notes, “All pass-through entities must… (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Condition: The Organization noted they do not request and review audited financial statements for all subrecipients. Questioned Costs: N/A Cause and Effect: Without reviewing audited financial statements, subrecipients may have deficiencies in internal control or compliance which could lead to future unallowable expenditures to be incurred. Recommendation: We recommend ACT evaluates policies and procedures to ensure appropriate monitoring is performed over all subrecipients and reviews audited financial statements for those subrecipients that are required to have an audit performed. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.
Criteria: 2 CFR 200.332 notes, “All pass-through entities must… (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Condition: The Organization noted they do not request and review audited financial statements for all subrecipients. Questioned Costs: N/A Cause and Effect: Without reviewing audited financial statements, subrecipients may have deficiencies in internal control or compliance which could lead to future unallowable expenditures to be incurred. Recommendation: We recommend ACT evaluates policies and procedures to ensure appropriate monitoring is performed over all subrecipients and reviews audited financial statements for those subrecipients that are required to have an audit performed. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.
2023-004: Subrecipient Monitoring Criteria: The Code of Federal Regulations 2 CFR 200.332 states that all pass-through entities (PTE) must: Identify the Award and Applicable Requirements - Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); (2)all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk - Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). Monitor - Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: (1) Reviewing financial and programmatic (performance and special reports) required by the PTE. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Condition: The Organization did not clearly communicate the required federal award information and applicable requirements to the subrecipients. The Organization did not evaluate the risk of non-compliance of the subrecipients in order to identify the appropriate monitoring procedures. Statistical sampling was not used in making sample selections. Cause: The Organization has not implemented policies or procedures, to the degree necessary, to ensure that federal award monitoring compliance requirements are being met. Effect: The Organization did not perform adequate monitoring procedures on the subrecipients. Without communication of required information, subrecipients may overspend award amounts or incur unallowable expenses towards the grant. Questioned Costs: N/A Statistical Sampling: Statistical sampling was not used in making sample selections. Recommendation: We recommend that management of the Organization implement policies, procedures, and internal controls to evaluate the subrecipient risk of noncompliance to ensure subrecipients are being appropriately monitored in compliance with federal regulations. Views of Responsible Officials: Management agrees with this finding and their response is included in the corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
2023-008 - Uniform Guidance Subrecipient Monitoring - Significant Deficiency/Noncompliance Federal Program: Assistance Listing #21.027, Coronavirus State and Local Fiscal Recovery Funds, U.S. Department of Treasury, Pass Through Entity Identifying Number: Not Available Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-Through Entity Identifying Number: N/A Prior Year Finding Number 2022-004 Criteria: The requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles and Audit Requirements for Federal Awards (Uniform Guidance), §200.331 Requirements for Pass-through Entities, requires entities who pass federal funding through to subrecipients evaluate each subrecipient's risk of noncompliance. As detailed in 2 CFR sections 200.331(d) through (f), the Uniform Guidance requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. This includes issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient, as detailed in 2 CFR section 200.521. Condition/Context: As part of our follow-up on previous audit findings and based on our current year testing, it was noted that the County is not formally documenting its monitoring activities over its subrecipients in compliance with the Uniform Guidance. Questioned Costs: N/A Cause: While the County has monitoring processes in place for subrecipients, it is not currently documenting certain of the initial risk assessment decisions or the occurrence of ongoing monitoring activities for its subrecipient, representing a significant deficiency in internal control over compliance. Effect: The County is not in compliance with certain requirements of the Uniform Guidance. Recommendation: We recommend that County management perform and document the various monitoring activities performed with regard to its subrecipients. Views of Responsible Officials and Planned Corrective Actions: Management understands and is working to provide better oversight and monitoring of entities that receive pass-through grant dollars. See corrective action plan.
2023-008 - Uniform Guidance Subrecipient Monitoring - Significant Deficiency/Noncompliance Federal Program: Assistance Listing #21.027, Coronavirus State and Local Fiscal Recovery Funds, U.S. Department of Treasury, Pass Through Entity Identifying Number: Not Available Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-Through Entity Identifying Number: N/A Prior Year Finding Number 2022-004 Criteria: The requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles and Audit Requirements for Federal Awards (Uniform Guidance), §200.331 Requirements for Pass-through Entities, requires entities who pass federal funding through to subrecipients evaluate each subrecipient's risk of noncompliance. As detailed in 2 CFR sections 200.331(d) through (f), the Uniform Guidance requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. This includes issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient, as detailed in 2 CFR section 200.521. Condition/Context: As part of our follow-up on previous audit findings and based on our current year testing, it was noted that the County is not formally documenting its monitoring activities over its subrecipients in compliance with the Uniform Guidance. Questioned Costs: N/A Cause: While the County has monitoring processes in place for subrecipients, it is not currently documenting certain of the initial risk assessment decisions or the occurrence of ongoing monitoring activities for its subrecipient, representing a significant deficiency in internal control over compliance. Effect: The County is not in compliance with certain requirements of the Uniform Guidance. Recommendation: We recommend that County management perform and document the various monitoring activities performed with regard to its subrecipients. Views of Responsible Officials and Planned Corrective Actions: Management understands and is working to provide better oversight and monitoring of entities that receive pass-through grant dollars. See corrective action plan.
Finding Number: 2023-001 Internal Control over Compliance and Compliance with the Subrecipient Monitoring Compliance Requirement, Repeat Finding, Finding No. 2022-001 Identification of the Major Federal Program: Programs: Government Agency: Inclusion Across the Nation of Communities of Learners of Underrepresented Discoverers in Engineering and Science Assistance Listing Number: 47.076 Award Number: HRD-1834540 Award Years: 09/01/2018 – 02/28/2025 PhysTEC: Building a Solution to the National Physics Teacher Shortage Assistance Listing Number: 47.049 Award Number: PHY-1707990 Award Years: 07/01/2017 – 06/30/2023 National Science Foundation (NSF) Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the “Transparency Act” that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions – Our examination of the program’s subrecipient monitoring requirements includes the review and approval of financial and performance quarterly reports by the program managers. The quarterly reports are prepared by APS’ grants administrator with inputs provided by the subrecipient submitted to the program managers. Of the program’s twenty (20) subrecipients, we examined eight (8) subrecipients and observed that although the respective program managers had monitoring oversight of the various grant’s financial and programmatic activities, there was no formal evidentiary documentation to support the monitoring oversight process performed by the program managers. Furthermore, our examination of the program’s subrecipient monitoring requirements includes follow-ups by APS to ensure the subrecipients take timely and appropriate action on all deficiencies pertaining to federal awards provided to the subrecipients which have been detected through reviews of audits, on-site reviews, and other means. We selected six (6) subrecipients for testing and noted that for two (2) samples selected APS was unable to provide evidence that it monitored the subrecipients through review of its single audit reports, on-site reviews, and other means. We also tested a sample of three (3) subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds timely and on one (1) of the sub awards reported, the contract award amount reported is less than the actual expenditures incurred by the subrecipient. APS began implementation of its corrective action plan on June 5, 2023, and the exceptions identified above is as a result of the fact that APS was still in the implementation process of its corrective action plan. Cause - Management does not have adequate internal controls and policies and procedures in place to ensure that a review is performed on the financial and programmatic reports in a timely manner and to ensure that its subrecipients do not have any audit deficiencies relating to federal award programs and if any deficiencies are detected, that the subrecipients takes timely and appropriate action to resolve the deficiencies identified. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS’ noncompliance with the reporting requirements. Effect or potential effect – APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. In addition, failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs – None. Context – These are conditions identified per review of APS compliance with specified compliance requirements using a statistically valid sample. Recommendations – BDO recommends that APS continue to apply the implemented policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are documented and maintained. Furthermore, APS should continue to implement policies to obtain and review single audit reports of its subrecipients in order to ensure compliance with all the required laws, guidelines and requirement under the award. BDO recommends that APS continues to implement established policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS’ corrective action is described in the Management’s Corrective Action Plan included below.
Finding Number: 2023-001 Internal Control over Compliance and Compliance with the Subrecipient Monitoring Compliance Requirement, Repeat Finding, Finding No. 2022-001 Identification of the Major Federal Program: Programs: Government Agency: Inclusion Across the Nation of Communities of Learners of Underrepresented Discoverers in Engineering and Science Assistance Listing Number: 47.076 Award Number: HRD-1834540 Award Years: 09/01/2018 – 02/28/2025 PhysTEC: Building a Solution to the National Physics Teacher Shortage Assistance Listing Number: 47.049 Award Number: PHY-1707990 Award Years: 07/01/2017 – 06/30/2023 National Science Foundation (NSF) Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the “Transparency Act” that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions – Our examination of the program’s subrecipient monitoring requirements includes the review and approval of financial and performance quarterly reports by the program managers. The quarterly reports are prepared by APS’ grants administrator with inputs provided by the subrecipient submitted to the program managers. Of the program’s twenty (20) subrecipients, we examined eight (8) subrecipients and observed that although the respective program managers had monitoring oversight of the various grant’s financial and programmatic activities, there was no formal evidentiary documentation to support the monitoring oversight process performed by the program managers. Furthermore, our examination of the program’s subrecipient monitoring requirements includes follow-ups by APS to ensure the subrecipients take timely and appropriate action on all deficiencies pertaining to federal awards provided to the subrecipients which have been detected through reviews of audits, on-site reviews, and other means. We selected six (6) subrecipients for testing and noted that for two (2) samples selected APS was unable to provide evidence that it monitored the subrecipients through review of its single audit reports, on-site reviews, and other means. We also tested a sample of three (3) subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds timely and on one (1) of the sub awards reported, the contract award amount reported is less than the actual expenditures incurred by the subrecipient. APS began implementation of its corrective action plan on June 5, 2023, and the exceptions identified above is as a result of the fact that APS was still in the implementation process of its corrective action plan. Cause - Management does not have adequate internal controls and policies and procedures in place to ensure that a review is performed on the financial and programmatic reports in a timely manner and to ensure that its subrecipients do not have any audit deficiencies relating to federal award programs and if any deficiencies are detected, that the subrecipients takes timely and appropriate action to resolve the deficiencies identified. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS’ noncompliance with the reporting requirements. Effect or potential effect – APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. In addition, failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs – None. Context – These are conditions identified per review of APS compliance with specified compliance requirements using a statistically valid sample. Recommendations – BDO recommends that APS continue to apply the implemented policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are documented and maintained. Furthermore, APS should continue to implement policies to obtain and review single audit reports of its subrecipients in order to ensure compliance with all the required laws, guidelines and requirement under the award. BDO recommends that APS continues to implement established policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS’ corrective action is described in the Management’s Corrective Action Plan included below.
Cluster: Research and Development Agency: Department of Human and Health Services Award Names: Safety and Health Risks in Energy Transition for the Commercial Fishing Industry Award Numbers: U01OH012502 Assistance Listing Title: Center for Disease Control and Prevention (CDC) Assistance Listing Number: 93.262 Award Year: FY 2023 Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Condition Through our testing of 4 subrecipients out of a total subrecipient population of 10, we were able to obtain a documented initial risk assessment for each subrecipient selected and other evidence of monitoring such as meetings with the subrecipients. However, we were unable to obtain evidence that the Company obtained and reviewed the annual Uniform Guidance report or annual audited financial statements (if the entity was not subject to a Uniform Guidance audit) for 1 out of 4 subrecipients selected for testing. Cause The Company failed to ensure that their subrecipient monitoring process included obtaining and reviewing every subrecipient’s annual Uniform Guidance report or annual audited financial statements during FY 2023. Effect The lack of an annual review of subrecipient audits may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend the Company follow their policy, which includes obtaining and reviewing Uniform Guidance reports (or audited financial statements to the extent Uniform Guidance reports are not available) for every subrecipient on an annual basis and ensure that it is completed for all applicable awards. When reviewing the reports, they should understand the type of opinion(s) expressed and whether there were any findings associated with their awards, document their review and assess whether there is any change in the risk assessment and subsequent monitoring needed of each subrecipient. We also recommend a supervisory review over subrecipient monitoring to be included in the process to ensure it gets completed completely and accurately for all awards. This supervisory review should also be evidenced through documentation. This is a repeat finding of 2022-001, which continued to remain open during FY2023. Management’ Views and Corrective Action Plan Management’s Views and Corrective Action Plan are included at the end of this report.
FINDING 2023-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Subrecipient Monitoring Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): FY 2023 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Repeat Finding This is a repeat finding from the immediately prior audit report. The prior audit finding number was 2022-005. Condition and Context The County received a total State and Local Fiscal Recovery Funds (SLFRF) allocation of $13,177,707. During the audit period, the County provided subawards of SLFRF funds to other entities. As a pass-through entity, the County must: Identify the award and the applicable requirements to each subrecipient. Evaluate each subrecipient's risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for an authorized purpose, complies with the terms and conditions of the subaward, and achieves performance goals. Subawards, totaling $290,000, were provided to two different entities. Both subrecipient agreements associated with the subawards were selected for testing. For the two agreements tested, the following information was incomplete or missing: The federal award identification number (FAIN). The federal award date of award to the recipient by the federal agency. The name of the federal awarding agency, pass-through entity (auditee), and contact information for awarding official of the pass-through entity (auditee). The Assistance Listings Number and Title; the pass-through entity must identify the dollar amount made available under each federal award and the Assistance Listings Number at time of disbursement. Furthermore, the County did not have an evaluation of the subrecipients' risk of noncompliance or monitoring activities demonstrating compliance with the subrecipient monitoring requirement. The County did not request any financial or audit documentation from the subrecipients. The lack of internal controls and noncompliance were systemic issues throughout the audit period. INDIANA STATE BOARD OF ACCOUNTS 21 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.331(a) states: "Subrecipients. A subaward is for the purpose of carrying out a portion of a Federal award and creates a Federal assistance relationship with the subrecipient. See definition for Subaward in § 200.1 of this part. Characteristics which support the classification of the non-Federal entity as a subrecipient include when the non-Federal entity: (1) Determines who is eligible to receive what Federal assistance; (2) Has its performance measured in relation to whether objectives of a Federal program were met; (3) Has responsibility for programmatic decision-making; (4) Is responsible for adherence to applicable Federal program requirements specified in the Federal award; and (5) In accordance with its agreement, uses the Federal funds to carry out a program for a public purpose specified in authorizing statute, as opposed to providing goods or services for the benefit of the pass-through entity." 2 CFR 200.332 states in part: "All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward . . . (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in § 200.1 of this part) of award to the recipient by the Federal agency; INDIANA STATE BOARD OF ACCOUNTS 22 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the passthrough entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per § 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports; (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass-through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. INDIANA STATE BOARD OF ACCOUNTS 23 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with § 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. (b) Evaluate each subrecipient's risk of noncompliance with Federal statues, regulations, and the terms and conditions of the subaward for purposes of determined the appropriate subrecipient monitoring . . . (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. . . ." Cause The system of internal controls as established by the management of the County was not properly designed nor implemented. The County was unable to provide documentation that monitoring procedures were in place over subrecipients. Effect Without the proper implementation of an effectively designed system of internal controls, the County cannot be sure subrecipients are provided an adequate subaward agreement, with all required elements and are adequately monitored. As such, subaward agreements entered into by the County did not include all the required elements. In addition, the County did not properly monitor the non-profit to ensure proper spending of the federal funds. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. INDIANA STATE BOARD OF ACCOUNTS 24 BOONE COUNTY SCHEDULE OF FINDINGS AND QUESTIONED COSTS (Continued) Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls and develop policies and procedures to ensure subrecipients are provided with an adequate subaward agreement and monitored as appropriate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.
2023-001 - Internal Controls over Subrecipient Monitoring (SD, NC) Federal Program Title: Coronavirus State and Local Fiscal Recovery Funds Federal Catalog Number: 21.027 Federal Agency: U.S. Department of Treasury Category of Finding: Subrecipient Monitoring Criteria: Pursuant to the Office of Management and Budget (OMB) 2 CFR Part 200, Appendix XI, Compliance Supplement May 2023, sections 3-M-1 and 3-M-2: A recipient must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Condition: While the Society currently has policies and procedures for monitoring subrecipients, it does not have a policy specifically relating to subaward agreements between the Society and its subrecipients that is compliant with applicable Federal statutes per 2 CFR part 200, Appendix XI, Compliance Supplement May 2023, sections 3-M-1 and 3-M-2. No formal subaward agreement was drafted by the Society and its subrecipient. Cause: Lack of formal policies specifically addressing federal requirements for subaward agreements. Effect or Potential Effect: Although the Society has existing policies and procedures for monitoring, the absence of a formal subaward agreement compliant with federal regulations may potentially result in the Society sending funds to subrecipients for activities and services that are nonconforming to allowed costs under the Uniform Guidance. Questioned Cost: None Context: During the audit, we did not receive a copy of the subaward between the Society and its subrecipient. Repeat of a Prior-Year Finding: No.
Criteria: 2 CFR 200.332 notes, “All pass-through entities must… (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Condition: The Organization noted they do not request and review audited financial statements for all subrecipients. Questioned Costs: N/A Cause and Effect: Without reviewing audited financial statements, subrecipients may have deficiencies in internal control or compliance which could lead to future unallowable expenditures to be incurred. Recommendation: We recommend ACT evaluates policies and procedures to ensure appropriate monitoring is performed over all subrecipients and reviews audited financial statements for those subrecipients that are required to have an audit performed. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.
Criteria: 2 CFR 200.332 notes, “All pass-through entities must… (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Condition: The Organization noted they do not request and review audited financial statements for all subrecipients. Questioned Costs: N/A Cause and Effect: Without reviewing audited financial statements, subrecipients may have deficiencies in internal control or compliance which could lead to future unallowable expenditures to be incurred. Recommendation: We recommend ACT evaluates policies and procedures to ensure appropriate monitoring is performed over all subrecipients and reviews audited financial statements for those subrecipients that are required to have an audit performed. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.
2023-004: Subrecipient Monitoring Criteria: The Code of Federal Regulations 2 CFR 200.332 states that all pass-through entities (PTE) must: Identify the Award and Applicable Requirements - Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); (2)all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk - Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). Monitor - Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: (1) Reviewing financial and programmatic (performance and special reports) required by the PTE. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Condition: The Organization did not clearly communicate the required federal award information and applicable requirements to the subrecipients. The Organization did not evaluate the risk of non-compliance of the subrecipients in order to identify the appropriate monitoring procedures. Statistical sampling was not used in making sample selections. Cause: The Organization has not implemented policies or procedures, to the degree necessary, to ensure that federal award monitoring compliance requirements are being met. Effect: The Organization did not perform adequate monitoring procedures on the subrecipients. Without communication of required information, subrecipients may overspend award amounts or incur unallowable expenses towards the grant. Questioned Costs: N/A Statistical Sampling: Statistical sampling was not used in making sample selections. Recommendation: We recommend that management of the Organization implement policies, procedures, and internal controls to evaluate the subrecipient risk of noncompliance to ensure subrecipients are being appropriately monitored in compliance with federal regulations. Views of Responsible Officials: Management agrees with this finding and their response is included in the corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
Finding Number: 2023-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Program: AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement – Direct Award (DHHS) – Award numbers: 1 NU38TO000023-01-00, 6 NU38TO000023- 01-01, 6 NU38OT000257-05-03 and 6 NU38OT000257C3 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: a. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: 1. Federal award identification; 2. All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; 3. Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. 4. (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: 1. The negotiated indirect cost rate between the pass-through entity and the subrecipient; 2. The de minimis indirect cost rate (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. (iii) 5. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient’s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and 6. Appropriate terms and conditions concerning closeout of the subaward. b. Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. c. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. d. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. 4. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the passthrough entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. e. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: 1. Providing subrecipients with training and technical assistance on program-related matters; and 2. Performing on-site reviews of the subrecipient's program operations; 3. Arranging for agreed-upon-procedures engagements as described in § 200.425. f. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. g. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. h. Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. Cause: The Organization’s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements. View of Responsible Officials: Management agrees with the finding and has committed to a corrective action plan.
2023-008 - Uniform Guidance Subrecipient Monitoring - Significant Deficiency/Noncompliance Federal Program: Assistance Listing #21.027, Coronavirus State and Local Fiscal Recovery Funds, U.S. Department of Treasury, Pass Through Entity Identifying Number: Not Available Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-Through Entity Identifying Number: N/A Prior Year Finding Number 2022-004 Criteria: The requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles and Audit Requirements for Federal Awards (Uniform Guidance), §200.331 Requirements for Pass-through Entities, requires entities who pass federal funding through to subrecipients evaluate each subrecipient's risk of noncompliance. As detailed in 2 CFR sections 200.331(d) through (f), the Uniform Guidance requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. This includes issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient, as detailed in 2 CFR section 200.521. Condition/Context: As part of our follow-up on previous audit findings and based on our current year testing, it was noted that the County is not formally documenting its monitoring activities over its subrecipients in compliance with the Uniform Guidance. Questioned Costs: N/A Cause: While the County has monitoring processes in place for subrecipients, it is not currently documenting certain of the initial risk assessment decisions or the occurrence of ongoing monitoring activities for its subrecipient, representing a significant deficiency in internal control over compliance. Effect: The County is not in compliance with certain requirements of the Uniform Guidance. Recommendation: We recommend that County management perform and document the various monitoring activities performed with regard to its subrecipients. Views of Responsible Officials and Planned Corrective Actions: Management understands and is working to provide better oversight and monitoring of entities that receive pass-through grant dollars. See corrective action plan.
2023-008 - Uniform Guidance Subrecipient Monitoring - Significant Deficiency/Noncompliance Federal Program: Assistance Listing #21.027, Coronavirus State and Local Fiscal Recovery Funds, U.S. Department of Treasury, Pass Through Entity Identifying Number: Not Available Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-Through Entity Identifying Number: N/A Prior Year Finding Number 2022-004 Criteria: The requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles and Audit Requirements for Federal Awards (Uniform Guidance), §200.331 Requirements for Pass-through Entities, requires entities who pass federal funding through to subrecipients evaluate each subrecipient's risk of noncompliance. As detailed in 2 CFR sections 200.331(d) through (f), the Uniform Guidance requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. This includes issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient, as detailed in 2 CFR section 200.521. Condition/Context: As part of our follow-up on previous audit findings and based on our current year testing, it was noted that the County is not formally documenting its monitoring activities over its subrecipients in compliance with the Uniform Guidance. Questioned Costs: N/A Cause: While the County has monitoring processes in place for subrecipients, it is not currently documenting certain of the initial risk assessment decisions or the occurrence of ongoing monitoring activities for its subrecipient, representing a significant deficiency in internal control over compliance. Effect: The County is not in compliance with certain requirements of the Uniform Guidance. Recommendation: We recommend that County management perform and document the various monitoring activities performed with regard to its subrecipients. Views of Responsible Officials and Planned Corrective Actions: Management understands and is working to provide better oversight and monitoring of entities that receive pass-through grant dollars. See corrective action plan.
2023-002 Subrecipient Monitoring Public Health Training Centers Program – Assistance Listing No. 93.516 Award Number: 1 T29HP46735‐01‐00 – Award Period: September 15, 2022 through September 14, 2025 Centers for Disease Control and Prevention Collaboration with Academia to Strengthen Public Health – Assistance Listing No. 93.967 Award Number: G2513_AG-1146 Amendment #1 – Award Period: February 1, 2023 through November 30, 2024 Type of Finding: Significant Deficiency in Internal Control over Compliance, Other Matters Condition: During our testing of subrecipients, we noted documentation was not maintained demonstrating the Organization checked for suspension and debarment prior to contracting with subrecipients, subrecipient vs contractor determinations, evaluation of each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring, or obtaining/reviewing the most recent single audit reports for subrecipients to address findings related to a particular subaward. Criteria: According to 2 CFR 200.331, pass-through entities must make case-by-case determinations whether each agreement it makes for the disbursement of Federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. 2 CFR 200.332 requires every subaward agreement include certain information including the subrecipient’s unique entity identifier (see paragraph (a) for a list of all required data elements); additionally, all pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section § 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in § 200.425. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations. 2 CFR 180.22 requires that contract awards not be made to parties listed on the government wide exclusions in the system for Award Management, which contains the names of parties debarred, suspended or otherwise excluded by agencies as well as parties declared ineligible under statutory or regulatory authority. Questioned Costs: None. Cause: The Organization did not have a process in place to ensure all required elements of subrecipient monitoring were documented and retained in their records. Effect: Inadequate monitoring procedures and records may not detect subrecipient noncompliance on a timely basis. This could result in the Organization entering into subrecipient agreements with organizations who are ineligible to receive federal funds or might otherwise not comply with federal laws and regulations. Recommendation: We recommend that management implement procedures to ensure that future subrecipient agreements are compared against all requirements in 2 CFR 200.331, 2 CFR 200.332, and 2 CFR 180.22 and that formal documentation of such considerations be maintained. Views of Responsible Officials and Planned Corrective Actions: Management agrees. See separately issued Corrective Action Plan.
Improper monitoring of subrecipients 93.011 National Organizations for State and Local Officials 93.318 Protecting and Improving Health Globally: Building and Strengthening Public Health Impact, Systems, Capacity and Security 93.421 Strengthening Public Health Systems and Services Criteria: 2 CFR 200.232 states “A pass through entity must: (a) Verify that the subrecipient is not excluded or disqualified in accordance with 180.300. Verification methods are provided in 180.300, which include confirming in SAM.gov that a potential subrecipient is not suspended, debarred, or otherwise excluded from receiving Federal funds; (e) Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complied with Federal statutes, regulations, and the terms and conditions of the subaward. The pass through entity is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a pass through entity must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant development negatively impact the subaward, a subrecipient must provide the pass through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal ward provided to the subrecipient from the pass through entity as required by 200.521.(4) Resolve audit findings specifically related to the subaward. However, the pass through entity is not responsible for resolving cross cutting audit findings that apply the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the pass through entity may rely on the subrecipient’s cognizant agency for audit or oversight agency for audit to perform audit follow up and make management decisions related to cross cutting audit findings in accordance with section 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass through entity to issue subawards that confirm to agency and award specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Depending up on the pass through entity’s assessment of the risk posed by the subrecipient, the following monitoring tools may be useful for the pass through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program related matters; (2) Performing site visits to review the subrecipient’s program operations; and (3) Arranging for agreed upon procedures engagements as described in 200.425.” Condition: Auditors noted there was no documentary evidence of the following subrecipient monitoring requirements: obtain budgets for reasonable expenses from subrecipients, SAM.gov suspension and debarment check, site visit documentation, receiving updated audit reports from subrecipients and issuing management decisions over federal award findings for pass through entities. We consider this condition to be a material weakness to the Subrecipient Monitoring compliance requirement and is a repeat finding shown in Section IV of this report as prior year finding 2022 007. Statistical sampling was not used in making sample selections. Questioned costs: None Effect: As a result, the Organization was missing documentation relating to subrecipient monitoring requirements for the year ended December 31, 2023. Cause: This is due to ineffective controls over subrecipient monitoring resulting in a lack of documentation, miscommunications during employee transitions and the need to train new employees on policies and procedures. Recommendation: Auditors recommend that there are checks at least annually for suspension or debarment and that documentation be maintained for all checks completed. In addition the Organization should follow up and obtain audited financial statements each year from subrecipients and issue management decisions for federal award findings for pass through entities. It is also recommended to improve subrecipient monitoring policies so subrecipient budgets are received as well as site visits conducted of subrecipients. It is critical that subrecipients are properly monitored to ensure that they are complying with Uniform Guidance requirements. Views of Responsible Officials and Planned Corrective Actions: Management agrees with this Single Audit Finding and response is included in the Corrective Action Plan.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing #93.391 County Department – Department of Public Health Finding 2023 – 005 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not adequately comply with its subrecipient monitoring requirements in accordance with federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the prior audit period, we noted 6 instances (of 27 subrecipients), whereby adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Also, we noted no evidence of the performance of subrecipients’ risk assessment and whether the subrecipients were required to have a Single audit conducted. This resulted in the 2022 audit finding and subsequent corrective action planned prepared by DPH to address the finding, which was anticipated to be completed by December 31, 2023. During the current audit period, we received DPH’s current year status of the prior audit finding, noting that risk assessment and monitoring will be ongoing during the 2023 Single audit. To assess the current year’s status, we reviewed 5 of 35 subrecipients, noting that risk assessments were conducted in April 2024. We also noted that 4 of the 5 subrecipients reviewed were subject to a Single Audit per the risk assessment documentation. However, we noted no evidence financial monitoring conducted, including whether a Single Audit report was obtained and reviewed by DPH. IDENTIFICATION OF REPEATED FINDINGS Repeated (Prior Finding No. 2022-009) RECOMMENDATION We recommend DPH implement its prior corrective action plan for any future subrecipients awarded under the federal program. Also, procedures should be in place to adequately document financial monitoring conducted, as well as the review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NU58DP006993 and 2022/2023 COVID-19 - Community Health Workers for Public Health Response and Resilient, Federal Assistance Listing #93.495 County Department – Department of Public Health Finding 2023 – 006 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the current audit period, we noted 12 subrecipients were awarded funds. During our review of three (3) subrecipients, we noted the following: For all three subrecipients, we noted that adequate documentation was not maintained to support the financial monitoring of these subrecipients. Also, no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including DPH’s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). For one subrecipient, we noted documentation was not maintained to support DPH’s evaluation of the subrecipient’s risk of noncompliance and the frequency of monitoring to be conducted by DPH based on the assessed risk. IDENTIFICATION OF REPEATED FINDINGS None. RECOMMENDATION We recommend DPH implement procedures to ensure that adequate documentation is maintained to support financial monitoring conducted, evaluation of each subrecipient’s risk of noncompliance and review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing #93.391 County Department – Department of Public Health Finding 2023 – 005 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not adequately comply with its subrecipient monitoring requirements in accordance with federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the prior audit period, we noted 6 instances (of 27 subrecipients), whereby adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Also, we noted no evidence of the performance of subrecipients’ risk assessment and whether the subrecipients were required to have a Single audit conducted. This resulted in the 2022 audit finding and subsequent corrective action planned prepared by DPH to address the finding, which was anticipated to be completed by December 31, 2023. During the current audit period, we received DPH’s current year status of the prior audit finding, noting that risk assessment and monitoring will be ongoing during the 2023 Single audit. To assess the current year’s status, we reviewed 5 of 35 subrecipients, noting that risk assessments were conducted in April 2024. We also noted that 4 of the 5 subrecipients reviewed were subject to a Single Audit per the risk assessment documentation. However, we noted no evidence financial monitoring conducted, including whether a Single Audit report was obtained and reviewed by DPH. IDENTIFICATION OF REPEATED FINDINGS Repeated (Prior Finding No. 2022-009) RECOMMENDATION We recommend DPH implement its prior corrective action plan for any future subrecipients awarded under the federal program. Also, procedures should be in place to adequately document financial monitoring conducted, as well as the review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
Subrecipient Monitoring Federal Department – U.S. Department of Health and Human Services Federal Award Identification Number and Year: NU58DP006993 and 2022/2023 COVID-19 - Community Health Workers for Public Health Response and Resilient, Federal Assistance Listing #93.495 County Department – Department of Public Health Finding 2023 – 006 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE Based on discussions with management, the cause of this finding was due to DPH/CCH identifying a consultant agency to conduct the subrecipient monitoring; this was accomplished October 2023. Current Status: These documents were created, shared with the auditor pending management approval; 1) Subrecipient Monitoring Policy 2). Subrecipient Commitment Form 3). Subrecipient Determination Tool 4). Subrecipient Risk Assessment and Monitoring Guide. EFFECT Failure to adequately monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH’s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the current audit period, we noted 12 subrecipients were awarded funds. During our review of three (3) subrecipients, we noted the following: For all three subrecipients, we noted that adequate documentation was not maintained to support the financial monitoring of these subrecipients. Also, no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including DPH’s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). For one subrecipient, we noted documentation was not maintained to support DPH’s evaluation of the subrecipient’s risk of noncompliance and the frequency of monitoring to be conducted by DPH based on the assessed risk. IDENTIFICATION OF REPEATED FINDINGS None. RECOMMENDATION We recommend DPH implement procedures to ensure that adequate documentation is maintained to support financial monitoring conducted, evaluation of each subrecipient’s risk of noncompliance and review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County’s corrective action plan is on page 56.
2023 SINGLE AUDIT FINDING SA-2: Compliance Element: Subrecipient Monitoring Federal Department – Department of the Treasury COVID-19 - Provider Relief Fund and American Rescue Plan (ARPA) Coronavirus State and Local Fiscal Recovery Fund Federal Assistance Listing # 21.027 County Department – County Board CRITERIA: 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D—Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that “All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F—Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F— Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.” CONDITION: During the current audit period, the County did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE: Based on discussions with management, the cause of this finding was a lack of familiarity and awareness regarding the requirements to perform subrecipient monitoring in accordance with Federal regulations. EFFECT: Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and the County’s inability to adequately perform risk assessments on its subrecipients. QUESTIONED COSTS: None. CONTEXT: During the current audit period, we noted multiple subrecipients were awarded funds. During our review of the subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support the County’s evaluation of each subrecipients risk of noncompliance and the frequency of monitoring to be conducted by the County based on the assessed risk. Also, we noted no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including the County’s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). IDENTIFICATION OF REPEATED FINDINGS: None. RECOMMENDATION: We recommend that the County review the allowable costs principles and consult with the grant body to determine if grant repayment is required. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS: The County Board is planning to take the following steps: VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS: See corrective action plan. ANCITPATED COMPLETION DATE: See corrective action plan. ANTICIPATED COMPLETION DATE: December 1, 2025.
Finding Number: 2023-039 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of the Interior Government Department/Agency: Department of Planning and Natural Resources (DPNR) Economic, Social, and Political Development of the Territories ALN: 15.875 Award #: Various Award Period: Various Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 2 of 4 subrecipients and found the following: - No supporting documentation of monitoring the subawards and evaluating the risk of noncompliance for each subrecipient. - No evidence that pass-through entity verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. - No supporting documentation if the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient. Additionally, there was no evidence of review of performance and special reports, as no supporting documentation was available for review by the pass-through entity for 1 of the 2 subrecipients tested. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements. Questioned Costs – None. Context – This is a condition identified per review of DPNR’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 were $341,920. The total amount of our sample totaled $131,920. Effect – Failure to properly adhere to policies and procedures can result in noncompliance with laws and regulations and failure to meet the program's objectives. Cause – DPNR does not have policies and procedures in place to ensure personnel adhere to the internal procedures to properly monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that DPNR implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. The GVI is currently in the process of developing a comprehensive Grants Management Overarching Standard Operating Policies and Procedures (SOPP) to establish uniform guidance for all grant-related processes, including drawdowns, documentation retention, subrecipient and compliance monitoring. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.
Finding Number: 2023-048 Prior Year Finding Number: 2022-045 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury Government Department/Agency: Office of Management and Budget (OMB) COVID-19 – Coronavirus State and Local Fiscal Recovery Funds ALN: 21.027 Award #: N/A Award Period: 03/03/2021 – 12/31/2024 Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 10 of 21 subrecipients and found no evidence the subrecipient monitoring workbook was reviewed by the American Rescue Plan Act (ARPA) Grants Administrator. Questioned Costs – None. Context – This is a condition identified per review of OMB’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 were $104,779,873. The total amount of our sample totaled $89,247,731. Effect – Failure to properly adhere to policies and procedures can result in noncompliance with laws and regulations and failure to meet the program’s objectives. Cause – OMB does not have policies and procedures in place to ensure personnel adhere to the internal procedures to properly monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that OMB implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. Starting FY25, OMB will identify and monitor federal awarding agencies, requesting single audit results for applicable recipients and including them in monitoring reviews. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.
Finding Number: 2023-058 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Education Government Department/Agency: Department of Education (VIDE) Office of Management and Budget (OMB) COVID-19 - Education Stabilization Fund Governors (Outlying Areas) (ESF-Governor) ALN: 84.425H Award #: S425H200003, S425H210003 Award Period: 06/29/2020 - 09/30/2022 01/13/2021 - 09/30/2023 Criteria A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that nonfederal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 10 out of 27 subrecipients and noted that, all 10 samples where VIDE and OMB failed to provide the evidence of monitoring and reviewing sub-grantee to ensure effective management of sub-awards. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements or proper identification of subrecipients. Questioned Costs – None. Context – This is a condition identified per review of VIDE and OMB’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 was $4,220,685. The total amount of our sample totaled $3,051,101. Effect – VIDE and OMB are not in compliance with the stated provisions. Failure to properly identify and monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the program's objectives. Cause – VIDE and OMB do not have internal controls in place to properly identify and monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that VIDE and OMB implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. During the period under review, gaps in documentation and monitoring were impacted by staff turnover, leadership transitions, and programmatic shifts, which limited the consistency and precision of subrecipient oversight across programs. In response, Office of Federal Grants (OFG) has taken steps to reinforce its role as the pass-through entity and to formalize monitoring expectations and processes. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.
Finding Number: 2023-086 Prior Year Finding Number: 2022-082 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Homeland Security Government Department/Agency: Virgin Islands Territorial Emergency Management Agency (VITEMA) Disaster Grants - Public Assistance (Presidentially Declared Disasters) ALN: 97.036 Award#: FEMA-4335-DR, FEMA-4340-DR-VI, FEMA-4513-DR Award Periods: 09/20/2017 – 09/07/2026 09/07/2017 – 09/16/2025 04/02/2020 – 05/11/2023 Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 8 of 27 subrecipients and found the following: - 4 instances where we were unable to obtain subrecipient agreements. - 8 instances with no supporting documentation that VITEMA verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements or proper identification of subrecipients. Questioned Costs – None. Context – This is a condition identified per review of VITEMA’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2023 was $134,242,935. The total amount of our sample totaled $124,398,401. Effect – VITEMA is not in compliance with the stated provisions. Failure to properly identify and monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the program's objectives. Cause – VITEMA does not have internal controls in place to properly identify and monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that VITEMA implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. The formal process for completing and retaining Subrecipient Agreements is now operational to ensure compliance with programmatic obligations. As the Recipient, the Territory is responsible for notifying the Subrecipient when federal funds are obligated and providing them with a subrecipient agreement outlining the program's terms and conditions. The Disaster Program Financial Specialist is responsible for ensuring that the subrecipient agreement is signed by both the Applicant and the Governor's Authorized Representative and provided to the Territorial Public Assistance Officer. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.
Finding No.: 2023-020 Federal Agency: U.S. Department of Health and Human Services AL Program: 93.243 Substance Abuse and Mental Health Services – Projects of Regional and National Significance Federal Award No.: 5U79SP020711-04 Questioned Costs: $134,802 Area: Subrecipient Monitoring/Overpayment on Return of Federal Funds Criteria: In accordance with applicable subrecipient monitoring requirements per 2 CFR 200.332, a pass- through entity (PTE) must: 1) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, is used in accordance with the terms and conditions of the subaward, and achieves performance goals. 2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies detected through audits, on-site reviews, and other means, pertaining to the subaward. 3) Issue a management decision as required by 2 CFR 200.521 for audit findings pertaining to the Federal award provided to the subrecipient from the PTE . Condition: RepMar did not perform the required monitoring activities for a subrecipient and did not issue a management decision with respect to the subrecipient’s FY2018 Single Audit report dated February 22, 2023. The Single Audit reported questioned costs of $43,335 for noncompliance with allowable costs/cost principles requirements and questioned costs of $91,467 for noncompliance with procurement and suspension and debarment requirements. Furthermore, in the grantor’s March 2023 management decision communication, RepMar was required to refund the grantor for Federal funds reported for noncompliance in the same subrecipient’s FY2016 and FY2017 Single Audit reports. RepMar has since determined that the July 2024 refund included a $267,244 overpayment due to calculation error. Cause: RepMar lacks effective internal control policies and procedures governing subrecipient monitoring. Effect: RepMar is in noncompliance with applicable subrecipient monitoring requirements and overpayment of Federal funds returned. Questioned cost of $134,802 results. Recommendation: RepMar should more closely monitor subrecipients in accordance with subrecipient monitoring requirements. Views of Responsible Officials: RepMar’s Corrective Action Plan does not indicate disagreement and provides planned corrective action.