2 CFR 200 § 200.521

Findings Citing § 200.521

Management decisions.

Total Findings
4,238
Across all audits in database
Showing Page
69 of 85
50 findings per page
About this section
Section 200.521 outlines the requirements for management decisions regarding audit findings, specifying that they must clarify whether findings are upheld, provide reasons, and detail expected actions from the auditee, including timelines for corrective measures. This section affects federal agencies, pass-through entities, and auditees by establishing responsibilities and timelines for addressing audit findings and ensuring accountability in federal funding.
View full section details →
FY End: 2022-12-31
American Bureau of Shipping
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Agency: Department of Commerce and Department of Health and Human Services Award Names: Standards/Guidance for Rapid Qualification of Metal-Based Additive Manufacturing and Development and Testing a Field-based Hazard/Near-Miss Sharing System for Commercial Fishing Vessels Award Numbers: 70NANB21H038 and U01OH012288 Assistance Listing Title: Measurement and Engineering Research and Standards and Occupational Safety and Health P...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Agency: Department of Commerce and Department of Health and Human Services Award Names: Standards/Guidance for Rapid Qualification of Metal-Based Additive Manufacturing and Development and Testing a Field-based Hazard/Near-Miss Sharing System for Commercial Fishing Vessels Award Numbers: 70NANB21H038 and U01OH012288 Assistance Listing Title: Measurement and Engineering Research and Standards and Occupational Safety and Health Program Assistance Listing Number: 11.609 and 93.262 Award Year: FY 2022 Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient?s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Condition Through our testing of 4 subrecipients out of a population of 10, we were able to obtain a documented initial risk assessment for each subrecipient selected and other evidence of monitoring such as meetings with the subrecipients. However, we were unable to obtain evidence that the Company obtained and reviewed the annual Uniform Guidance report or annual audited financial statements (if the entity was not subject to a Uniform Guidance audit) for each subrecipient selected for testing. Cause The Company performed an initial risk assessment but did not understand that obtaining the Uniform Guidance reports or financial statements needed to be completed annually as part of their subrecipient monitoring procedures. Effect The lack of an annual review of subrecipient audits may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend the Company implement a policy to review Uniform Guidance reports (or audited financial statements to the extent Uniform Guidance reports are not available) on an annual basis. When reviewing the reports, they should understand the type of opinion(s) expressed and whether there were any findings associated with their awards, document their review and assess whether there is any change in the risk assessment and subsequent monitoring needed of each subrecipient. Management? Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report.

FY End: 2022-12-31
American Bureau of Shipping
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Agency: Department of Commerce and Department of Health and Human Services Award Names: Standards/Guidance for Rapid Qualification of Metal-Based Additive Manufacturing and Development and Testing a Field-based Hazard/Near-Miss Sharing System for Commercial Fishing Vessels Award Numbers: 70NANB21H038 and U01OH012288 Assistance Listing Title: Measurement and Engineering Research and Standards and Occupational Safety and Health P...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Agency: Department of Commerce and Department of Health and Human Services Award Names: Standards/Guidance for Rapid Qualification of Metal-Based Additive Manufacturing and Development and Testing a Field-based Hazard/Near-Miss Sharing System for Commercial Fishing Vessels Award Numbers: 70NANB21H038 and U01OH012288 Assistance Listing Title: Measurement and Engineering Research and Standards and Occupational Safety and Health Program Assistance Listing Number: 11.609 and 93.262 Award Year: FY 2022 Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient?s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Condition Through our testing of 4 subrecipients out of a population of 10, we were able to obtain a documented initial risk assessment for each subrecipient selected and other evidence of monitoring such as meetings with the subrecipients. However, we were unable to obtain evidence that the Company obtained and reviewed the annual Uniform Guidance report or annual audited financial statements (if the entity was not subject to a Uniform Guidance audit) for each subrecipient selected for testing. Cause The Company performed an initial risk assessment but did not understand that obtaining the Uniform Guidance reports or financial statements needed to be completed annually as part of their subrecipient monitoring procedures. Effect The lack of an annual review of subrecipient audits may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend the Company implement a policy to review Uniform Guidance reports (or audited financial statements to the extent Uniform Guidance reports are not available) on an annual basis. When reviewing the reports, they should understand the type of opinion(s) expressed and whether there were any findings associated with their awards, document their review and assess whether there is any change in the risk assessment and subsequent monitoring needed of each subrecipient. Management? Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report.

FY End: 2022-12-31
American Physical Society
Compliance Requirement: M
Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is use...

Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the ?Transparency Act? that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions ? Our examination of the program?s subrecipient monitoring requirements includes the review and approval of financial and performance reports by the program managers. The financial reports are prepared by APS? grants administrator and submitted to the program managers whilst the performance reports and information are submitted by the subrecipients directly to the program managers. Of the program?s nineteen (19) subrecipients, we examined fifteen (15) subrecipients and observed that there was no consistent evidentiary documentation to support the monitoring oversight process performed by the respective program managers. However, we noted that APS did perform the required monitoring procedures and oversight of the subrecipients? financial and programmatic activities based on our review of program reports submitted to NSF, e-mail communication and minutes of meetings held during the year. We selected four (4) subrecipients and noted that for all the subrecipients selected, APS was unable to provide consistent evidentiary documentation to show that it had reviewed the subrecipients? single audit reports during the year. A subsequent review of the subrecipients? audit reports was performed and no reported deficiencies relating to APS? subawards was noted. We also tested a sample of two subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds and three grant amendments in the FSRS Reporting System to fulfil the FFATA requirements. Cause ? Management does not have adequate internal controls and policies in place to ensure that the monitoring controls performed over its subrecipients are documented appropriately and in a timely manner. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS? noncompliance with the reporting requirements.Effect or potential effect ? APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. Failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs ? None. Context ? These are conditions identified per review of APS? compliance with specified compliance requirements using a statistically valid sample. Recommendations ? BDO recommends that APS implement policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are consistently documented and maintained. BDO also recommends that APS establish policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS?s corrective action is described in the Management?s Corrective Action Plan included below.

FY End: 2022-12-31
American Physical Society
Compliance Requirement: M
Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is use...

Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the ?Transparency Act? that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions ? Our examination of the program?s subrecipient monitoring requirements includes the review and approval of financial and performance reports by the program managers. The financial reports are prepared by APS? grants administrator and submitted to the program managers whilst the performance reports and information are submitted by the subrecipients directly to the program managers. Of the program?s nineteen (19) subrecipients, we examined fifteen (15) subrecipients and observed that there was no consistent evidentiary documentation to support the monitoring oversight process performed by the respective program managers. However, we noted that APS did perform the required monitoring procedures and oversight of the subrecipients? financial and programmatic activities based on our review of program reports submitted to NSF, e-mail communication and minutes of meetings held during the year. We selected four (4) subrecipients and noted that for all the subrecipients selected, APS was unable to provide consistent evidentiary documentation to show that it had reviewed the subrecipients? single audit reports during the year. A subsequent review of the subrecipients? audit reports was performed and no reported deficiencies relating to APS? subawards was noted. We also tested a sample of two subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds and three grant amendments in the FSRS Reporting System to fulfil the FFATA requirements. Cause ? Management does not have adequate internal controls and policies in place to ensure that the monitoring controls performed over its subrecipients are documented appropriately and in a timely manner. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS? noncompliance with the reporting requirements.Effect or potential effect ? APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. Failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs ? None. Context ? These are conditions identified per review of APS? compliance with specified compliance requirements using a statistically valid sample. Recommendations ? BDO recommends that APS implement policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are consistently documented and maintained. BDO also recommends that APS establish policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS?s corrective action is described in the Management?s Corrective Action Plan included below.

FY End: 2022-12-31
American Physical Society
Compliance Requirement: M
Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is use...

Criteria - The Uniform Guidance in 2 CFR Section 200.303 requires that non-Federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to reasonably ensure compliance with Federal statues, regulations, and the terms and conditions of the Federal award. In accordance with the Uniform Guidance in 2 CFR Section 200.331, a pass-through entity (PTE) must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. reviewing financial and programmatic (performance and special reports) required by the PTE; 2. following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means; 3. issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Furthermore, under the requirements of the Federal Funding Accountability and Transparency Act (FFATA) (Pub. L. No. 109-282), as amended by Section 6202 of Public Law 110-252, hereafter referred as the ?Transparency Act? that are codified in 2 CFR Part 170, recipients (i.e., direct recipients) of grants or cooperative agreements are required to report first-tier subawards of $30,000 or more to the Federal Funding Accountability and Transparency Act Subaward Reporting System (FSRS). If a subaward/subcontract was subject to reporting under the Transparency Act, the action was required to be reported in FSRS no later than the last day of the month following the month in which the subaward/subcontract amendment obligation was made or in the subcontract award/subcontract modification was made. Conditions ? Our examination of the program?s subrecipient monitoring requirements includes the review and approval of financial and performance reports by the program managers. The financial reports are prepared by APS? grants administrator and submitted to the program managers whilst the performance reports and information are submitted by the subrecipients directly to the program managers. Of the program?s nineteen (19) subrecipients, we examined fifteen (15) subrecipients and observed that there was no consistent evidentiary documentation to support the monitoring oversight process performed by the respective program managers. However, we noted that APS did perform the required monitoring procedures and oversight of the subrecipients? financial and programmatic activities based on our review of program reports submitted to NSF, e-mail communication and minutes of meetings held during the year. We selected four (4) subrecipients and noted that for all the subrecipients selected, APS was unable to provide consistent evidentiary documentation to show that it had reviewed the subrecipients? single audit reports during the year. A subsequent review of the subrecipients? audit reports was performed and no reported deficiencies relating to APS? subawards was noted. We also tested a sample of two subrecipients and our examination of the monitoring and reporting requirements revealed that APS did not report the information on a subaward of $30,000 or more in federal funds and three grant amendments in the FSRS Reporting System to fulfil the FFATA requirements. Cause ? Management does not have adequate internal controls and policies in place to ensure that the monitoring controls performed over its subrecipients are documented appropriately and in a timely manner. There is also a lack of established monitoring and internal control procedures in place to ensure that reports required under the Transparency Act are prepared and submitted timely in FSRS Reporting System resulted in APS? noncompliance with the reporting requirements.Effect or potential effect ? APS is not in compliance with the subrecipient monitoring requirements as it did not maintain consistent documented evidence of its monitoring of subrecipients. Failure to comply with the reporting requirements of the Uniform Guidance could result in the awarding agency taking action such as reducing future funding. Questioned Costs ? None. Context ? These are conditions identified per review of APS? compliance with specified compliance requirements using a statistically valid sample. Recommendations ? BDO recommends that APS implement policies, procedures and controls that will ensure that all requisite reports are reviewed, and evidence of review are consistently documented and maintained. BDO also recommends that APS establish policies and procedure over the preparation and timely submission of reports required under the Transparency Act to ensure compliance with reporting requirements. Views of Responsible Officials - APS concurs with this finding. APS?s corrective action is described in the Management?s Corrective Action Plan included below.

FY End: 2022-12-31
City of Elkhart
Compliance Requirement: M
FINDING 2022-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Subrecipient Monitoring Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number or Year (or Other Identifying Number): CY2021 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Condition and Context The City received a total State and Local ...

FINDING 2022-003 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Subrecipient Monitoring Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number or Year (or Other Identifying Number): CY2021 Compliance Requirement: Subrecipient Monitoring Audit Findings: Material Weakness, Modified Opinion Condition and Context The City received a total State and Local Fiscal Recovery Funds (SLFRF) allocation of $18,042,360. The City enlisted a non-profit, Heart City Health Center, Inc., to assist with public health information and paid them $50,000. The payment was made under the Responding to Public Health and Economic Impacts of COVID-19 eligible use category. Documentation to support the payment included an invoice from the Heart City Health Center, Inc., Board of Works Resolution 21-R-19, and Ordinance 5861. The Board of Works approved Resolution 21-R-19 on December 28, 2021. The resolution states in part, "Heart City Health Center is a separate legal entity from the City of Elkhart and as a separate legal entity, requires the formation of a subrecipient agreement to transfer funds from the City's ARPA Coronavirus State and Local Fiscal Recovery Funds allocation to Heart City Health . . . now, therefore be it resolved, the Board of Public Works approves Heart City Health Center Inc. as a subrecipient of fifty thousand dollars in ARPA state and local fiscal recovery funds, and authorizes the Department of Law to prepare an appropriates subrecipient agreement for execution by the Board of Works and Heart City Health Center Inc. for the purposes approved herein . . ." The City provided SLFRF award funds to the Heart City Health Center, Inc. to carry out a program on the City's behalf, making the Heart City Health Center, Inc. a subrecipient of the City, as noted in their resolution, and, therefore, subject to subrecipient monitoring. The City was unable provide a copy of the subaward agreement or other supporting documentation to show evaluation of the subrecipient's risk of noncompliance or monitoring activities demonstrating compliance with the subrecipient monitoring requirement. The lack of internal controls and noncompliance were systemic issues throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." 2 CFR 200.331(a) states in part: "Subrecipients. A subaward is for the purpose of carrying out a portion of a Federal award and creates a Federal assistance relationship with the subrecipient. . . . Characteristics which support the classification of the non-Federal entity as a subrecipient include when the non- Federal entity: (1) Determines who is eligible to receive what Federal assistance; (2) Has its performance measured in relation to whether objectives of a Federal program were met; (3) Has responsibility for programmatic decision-making; (4) Is responsible for adherence to applicable Federal program requirements specified in the Federal award; and . . ." 2 CFR 200.332 states in part: "All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward . . . (1) Federal award identification. (i) Subrecipient name (which must match the name associated with its unique entity identifier); (ii) Subrecipient's unique entity identifier; (iii) Federal Award Identification Number (FAIN); (iv) Federal Award Date (see the definition of Federal award date in ? 200.1 of this part) of award to the recipient by the Federal agency; (v) Subaward Period of Performance Start and End Date; (vi) Subaward Budget Period Start and End Date; (vii) Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient; (viii) Total Amount of Federal Funds Obligated to the subrecipient by the passthrough entity including the current financial obligation; (ix) Total Amount of the Federal Award committed to the subrecipient by the passthrough entity; (x) Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA); (xi) Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity; (xii) Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement; (xiii) Identification of whether the award is R&D; and (xiv) Indirect cost rate for the Federal award (including if the de minimis rate is charged) per ? 200.414. (2) All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports; (4) (i) An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the passthrough entity must determine the appropriate rate in collaboration with the subrecipient, which is either: (A) The negotiated indirect cost rate between the pass-through entity and the subrecipient; which can be based on a prior negotiated rate between a different PTE and the same subrecipient. If basing the rate on a previously negotiated rate, the pass-through entity is not required to collect information justifying this rate, but may elect to do so; (B) The de minimis indirect cost rate. (ii) The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. Subrecipients can elect to use the cost allocation method to account for indirect costs in accordance with ? 200.405(d). (5) A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient's records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and (6) Appropriate terms and conditions concerning closeout of the subaward. . . . (b) Evaluate each subrecipient's risk of noncompliance with Federal statues, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring . . . (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the passthrough entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. . . ." Cause The system of internal controls as established by management of the City was not properly designed nor implemented. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the City's management statements of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. The City was responsible for providing a subaward agreement and monitoring the nonprofit. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the City. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the City design and implement a proper system of internal controls and develop policies and procedures to ensure subrecipients are provided with an adequate subaward agreement and monitored as appropriate. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.

FY End: 2022-12-31
Wabanaki Health and Wellness
Compliance Requirement: M
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS)...

Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.

FY End: 2022-12-31
Wabanaki Health and Wellness
Compliance Requirement: M
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS)...

Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.

FY End: 2022-12-31
Wabanaki Health and Wellness
Compliance Requirement: M
Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS)...

Finding Number: 2022-007 Repeat Finding: Yes Type of Finding: Material Weakness in Internal Control and Material Noncompliance Description: Subrecipient Monitoring and Management Major Programs AL#93.665 - Emergency Grants to Address Mental and Substance Use Disorders During COVID-19 ? Direct Award (DHHS) ? Award numbers: 6H79FG000252-01M003 and 6H79FG000689-01M004 AL#93.772 - Tribal Public Health Capacity Building and Quality Improvement Umbrella Cooperative Agreement ? Direct Award (DHHS) ? Award numbers: 5NU38OT000257-04-00 and 5NU38OT000257-05-00 Questioned Costs: None How the questioned costs were computed: N/A Compliance Requirement: Subrecipient Monitoring Condition: The Organization did not comply with any of the subrecipient monitoring and management requirements in accordance with 2 CFR Part 200.332. Criteria: The subrecipient monitoring and management requirements that are codified in 2 CFR Part 200.332 requires the pass-through entity must: Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes: Federal award identification; All requirements imposed by the pass-through entity on the subrecipient so that the Federal award is used in accordance with Federal statutes, regulations and the terms and conditions of the Federal award; Any additional requirements that the pass-through entity imposes on the subrecipient in order for the pass-through entity to meet its own responsibility to the Federal awarding agency including identification of any required financial and performance reports. An approved federally recognized indirect cost rate negotiated between the subrecipient and the Federal Government. If no approved rate exists, the pass-through entity must determine the appropriate rate in collaboration with the subrecipient, which is either: The negotiated indirect cost rate between the pass-through entity and the subrecipient; The de minimis indirect cost rate The pass-through entity must not require use of a de minimis indirect cost rate if the subrecipient has a Federally approved rate. A requirement that the subrecipient permit the pass-through entity and auditors to have access to the subrecipient?s records and financial statements as necessary for the pass-through entity to meet the requirements of this part; and Appropriate terms and conditions concerning closeout of the subaward. Evaluate each subrecipient?s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in ? 200.208. Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: Reviewing financial and performance reports required by the pass-through entity. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521. The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section ? 200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. Depending upon the pass-through entity's assessment of risk posed by the subrecipient, the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: Providing subrecipients with training and technical assistance on program-related matters; and Performing on-site reviews of the subrecipient's program operations; Arranging for agreed-upon-procedures engagements as described in ? 200.425. Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501. Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. Consider taking enforcement action against noncompliant subrecipients as described in ? 200.339 of this part and in program regulations. Cause: The Organization?s management was not aware of the subrecipient monitoring and management requirements. Effect: The Organization was not in compliance with any of the subrecipient monitoring and management requirements, resulting in a material noncompliance and a material weakness in internal controls over compliance. Recommendation: We recommend the Organization implement systems and procedures to ensure compliance with the subrecipient monitoring and management compliance requirements.

FY End: 2022-12-31
County of Lycoming, Pennsylvania
Compliance Requirement: M
Federal Program: Assistance Listing #14.228, Community Development Block Grant, U.S. Department of Housing and Urban Development, Passed through the Pennsylvania Department of Community and Economic Development, Pass-Through Entity Identifying Numbers: C000066177, C000067301, C000070907, C000073805, C000076178, C000075471 and C000062142 Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-...

Federal Program: Assistance Listing #14.228, Community Development Block Grant, U.S. Department of Housing and Urban Development, Passed through the Pennsylvania Department of Community and Economic Development, Pass-Through Entity Identifying Numbers: C000066177, C000067301, C000070907, C000073805, C000076178, C000075471 and C000062142 Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-Through Entity Identifying Number: N/A Prior Year Finding Number 2021-004 Criteria: The requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles and Audit Requirements for Federal Awards (Uniform Guidance), §200.331 Requirements for Pass-through Entities, requires entities who pass federal funding through to subrecipients evaluate each subrecipient's risk of noncompliance. As detailed in 2 CFR sections 200.331(d) through (f), the Uniform Guidance requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. This includes issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient, as detailed in 2 CFR section 200.521. Condition: As part of our follow-up on previous audit findings, it was noted that the County is not performing monitoring activities over its subrecipient in compliance with the Uniform Guidance. Additionally, it was noted that the County did not issue a management decision for an audit finding pertaining to the Federal award provided to the subrecipient in a prior year. Questioned Costs: N/A Cause: The County does not have in place sufficient monitoring activities for its subrecipient, representing a significant deficiency in internal control over compliance. Effect: The County is not in compliance with certain requirements of the Uniform Guidance. Context: Title IV-E funding is passed through to the Lycoming-Clinton Mental Health and Intellectual Disabilities Joinder Board. The governing body of the Joinder consists of the Board of Commissioners of Lycoming and Clinton Counties, which allow each County 50% control. While it has been determined that the County has risk assessment and subrecipient monitoring policies and procedures in place for its pass-through entities related to other federal programs, management at the County has taken the position that the Title IV-E program is being monitored because of the unique nature of the funding being passed through to the Joinder Board. Recommendation: We recommend that County management perform monitoring activities for the Title IV-E program similar to the policies and procedures it has in place for its other pass-through activities. Views of Responsible Officials and Planned Corrective Actions: Management understands and is working to provide better oversight and monitoring of entities that receive pass-through grant dollars. See corrective action plan.

FY End: 2022-12-31
County of Lycoming, Pennsylvania
Compliance Requirement: M
Federal Program: Assistance Listing #14.228, Community Development Block Grant, U.S. Department of Housing and Urban Development, Passed through the Pennsylvania Department of Community and Economic Development, Pass-Through Entity Identifying Numbers: C000066177, C000067301, C000070907, C000073805, C000076178, C000075471 and C000062142 Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-...

Federal Program: Assistance Listing #14.228, Community Development Block Grant, U.S. Department of Housing and Urban Development, Passed through the Pennsylvania Department of Community and Economic Development, Pass-Through Entity Identifying Numbers: C000066177, C000067301, C000070907, C000073805, C000076178, C000075471 and C000062142 Assistance Listing #21.023, Emergency Rental Assistance Program, U.S. Department of Treasury, Passed through the Pennsylvania Department of Human Services, Pass-Through Entity Identifying Number: N/A Prior Year Finding Number 2021-004 Criteria: The requirements of Title 2 U.S. Code of Federal Regulations Part 200, Uniform Administrative Requirements, Cost Principles and Audit Requirements for Federal Awards (Uniform Guidance), §200.331 Requirements for Pass-through Entities, requires entities who pass federal funding through to subrecipients evaluate each subrecipient's risk of noncompliance. As detailed in 2 CFR sections 200.331(d) through (f), the Uniform Guidance requires pass-through entities to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. This includes issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient, as detailed in 2 CFR section 200.521. Condition: As part of our follow-up on previous audit findings, it was noted that the County is not performing monitoring activities over its subrecipient in compliance with the Uniform Guidance. Additionally, it was noted that the County did not issue a management decision for an audit finding pertaining to the Federal award provided to the subrecipient in a prior year. Questioned Costs: N/A Cause: The County does not have in place sufficient monitoring activities for its subrecipient, representing a significant deficiency in internal control over compliance. Effect: The County is not in compliance with certain requirements of the Uniform Guidance. Context: Title IV-E funding is passed through to the Lycoming-Clinton Mental Health and Intellectual Disabilities Joinder Board. The governing body of the Joinder consists of the Board of Commissioners of Lycoming and Clinton Counties, which allow each County 50% control. While it has been determined that the County has risk assessment and subrecipient monitoring policies and procedures in place for its pass-through entities related to other federal programs, management at the County has taken the position that the Title IV-E program is being monitored because of the unique nature of the funding being passed through to the Joinder Board. Recommendation: We recommend that County management perform monitoring activities for the Title IV-E program similar to the policies and procedures it has in place for its other pass-through activities. Views of Responsible Officials and Planned Corrective Actions: Management understands and is working to provide better oversight and monitoring of entities that receive pass-through grant dollars. See corrective action plan.

FY End: 2022-11-30
Cook County, Illinios
Compliance Requirement: M
Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, an...

Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D?Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? SECTION III: FEDERAL AWARDS FINDINGS AND QUESTIONED COSTS (Continued) Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 (Continued) CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE Based on discussions with management, the cause of this finding resulted from subrecipients being identified as vendors in the grant application. Also, the Program Lead informed Finance late which did not allow sufficient time to mobilize CCH staff and/or external consultant to perform subrecipient monitoring. EFFECT Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH?s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the current audit period, we noted 27 subrecipients were awarded funds. During our review of 6 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support DPH?s evaluation of each subrecipients risk of noncompliance and the frequency of monitoring to be conducted by DPH based on the assessed risk. Also, we noted no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including DPH?s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). SECTION III: FEDERAL AWARDS FINDINGS AND QUESTIONED COSTS (Continued) Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 (Continued) CONTEXT (Continued) In addition, while we noted that DPH does have a draft policy manual regarding the monitoring of its subrecipients, we noted the manual does not currently address or include the process and related procedures for conducting both fiscal and programmatic monitoring. Specifically, the draft manual does not: a) include any related checklists and/or forms being utilized, b) address the performance of risk assessments, or c) detail the frequency and type of monitoring (i.e., desk review, site visit) to be conducted based on assessed risks. IDENTIFICATION OF REPEATED FINDINGS None. RECOMMENDATION We recommend DPH update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332 and once updated the draft policy should be finalized and implemented. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County?s corrective action plan is on page 64.

FY End: 2022-11-30
Cook County, Illinios
Compliance Requirement: M
Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, an...

Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 CRITERIA 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D?Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? SECTION III: FEDERAL AWARDS FINDINGS AND QUESTIONED COSTS (Continued) Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 (Continued) CONDITION During the current audit period, the Cook County Department of Public Health (DPH) did not perform adequate monitoring of its subrecipients as required by Federal regulations. CAUSE Based on discussions with management, the cause of this finding resulted from subrecipients being identified as vendors in the grant application. Also, the Program Lead informed Finance late which did not allow sufficient time to mobilize CCH staff and/or external consultant to perform subrecipient monitoring. EFFECT Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and DPH?s inability to adequately perform risk assessments on its subrecipient(s). QUESTIONED COSTS None. CONTEXT During the current audit period, we noted 27 subrecipients were awarded funds. During our review of 6 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support DPH?s evaluation of each subrecipients risk of noncompliance and the frequency of monitoring to be conducted by DPH based on the assessed risk. Also, we noted no documentation was provided to verify whether the subrecipients were required to have a Single Audit conducted, including DPH?s review of the report, and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). SECTION III: FEDERAL AWARDS FINDINGS AND QUESTIONED COSTS (Continued) Subrecipient Monitoring Federal Department ? U.S. Department of Health and Human Services Federal Award Identification Number and Year: NH75OT000024 and 2021 COVID-19 - Activities to Support State, Tribal, Local and Territorial (STLT) Health Department Response to Public Health or Healthcare Crises, Federal Assistance Listing # 93.391 County Department ? Department of Public Health Finding 2022 ? 009 (Continued) CONTEXT (Continued) In addition, while we noted that DPH does have a draft policy manual regarding the monitoring of its subrecipients, we noted the manual does not currently address or include the process and related procedures for conducting both fiscal and programmatic monitoring. Specifically, the draft manual does not: a) include any related checklists and/or forms being utilized, b) address the performance of risk assessments, or c) detail the frequency and type of monitoring (i.e., desk review, site visit) to be conducted based on assessed risks. IDENTIFICATION OF REPEATED FINDINGS None. RECOMMENDATION We recommend DPH update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332 and once updated the draft policy should be finalized and implemented. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. VIEWS OF RESPONSIBLE OFFICIALS AND PLANNED CORRECTIVE ACTIONS The County agrees with the finding and recommendation. The County?s corrective action plan is on page 64.

FY End: 2022-09-30
State of Michigan
Compliance Requirement: M
FINDING 2022-040 Formula Grants for Rural Areas and Tribal Transit Program, ALN 20.509, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MDOT did not ensure its review of subrecipient single audit* reports and issuance of management decisions were completed within six months of the Federal Audit Clearinghouse (FAC) acceptance date. MDOT's process is to begin its review of subrecipient single audits after all applicable audit...

FINDING 2022-040 Formula Grants for Rural Areas and Tribal Transit Program, ALN 20.509, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MDOT did not ensure its review of subrecipient single audit* reports and issuance of management decisions were completed within six months of the Federal Audit Clearinghouse (FAC) acceptance date. MDOT's process is to begin its review of subrecipient single audits after all applicable audits are received. Therefore, it reviewed the 2020 and 2021 single audits in March 2022 and March and April 2023, respectively. We noted: a. For all 9 sampled 2020 single audits, MDOT's reviews were not timely and ranged between 72 and 229 days late. b. MDOT had not reviewed any of its subrecipient 2021 single audits as of September 30, 2022, which should have been reviewed between June 2022 and September 2022. In addition, MDOT did not issue management decision letters within six months of the FAC acceptance date for 3 subrecipient single audit reports. Each of these reports contained material weaknesses. Criteria Federal regulation 2 CFR 200.501 requires nonfederal entities who expend $750,000 or more in federal awards during their fiscal year to obtain a single audit for that fiscal year. Also, federal regulation 2 CFR 200.332(f) requires the pass-through entity to verify these subrecipients are audited as required by Subpart F of the Uniform Guidance, Audit Requirements, when it is expected the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the $750,000 threshold. In addition, federal regulation 2 CFR 200.521 requires MDOT to issue a management decision letter on the appropriateness of all audit findings related to its federal awards and the subrecipient's corrective action plan within six months of acceptance by the FAC. Cause MDOT informed us an oversight occurred due to employee turnover and the need to update its procedures. Effect MDOT limited the State's assurance its subrecipients complied with grant requirements and implemented corrective action for audit findings to prevent future sanctions or disallowed costs, which could necessitate adjustments to MDOT's records. The federal grantor agency could issue sanctions or disallowance related to noncompliance. Known Questioned Costs None. Recommendation We recommend MDOT ensure its review of subrecipient single audit reports and issuance of management decisions are completed within six months of the FAC acceptance date. Management Views MDOT agrees with the finding.

FY End: 2022-09-30
State of Michigan
Compliance Requirement: M
FINDING 2022-040 Formula Grants for Rural Areas and Tribal Transit Program, ALN 20.509, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MDOT did not ensure its review of subrecipient single audit* reports and issuance of management decisions were completed within six months of the Federal Audit Clearinghouse (FAC) acceptance date. MDOT's process is to begin its review of subrecipient single audits after all applicable audit...

FINDING 2022-040 Formula Grants for Rural Areas and Tribal Transit Program, ALN 20.509, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MDOT did not ensure its review of subrecipient single audit* reports and issuance of management decisions were completed within six months of the Federal Audit Clearinghouse (FAC) acceptance date. MDOT's process is to begin its review of subrecipient single audits after all applicable audits are received. Therefore, it reviewed the 2020 and 2021 single audits in March 2022 and March and April 2023, respectively. We noted: a. For all 9 sampled 2020 single audits, MDOT's reviews were not timely and ranged between 72 and 229 days late. b. MDOT had not reviewed any of its subrecipient 2021 single audits as of September 30, 2022, which should have been reviewed between June 2022 and September 2022. In addition, MDOT did not issue management decision letters within six months of the FAC acceptance date for 3 subrecipient single audit reports. Each of these reports contained material weaknesses. Criteria Federal regulation 2 CFR 200.501 requires nonfederal entities who expend $750,000 or more in federal awards during their fiscal year to obtain a single audit for that fiscal year. Also, federal regulation 2 CFR 200.332(f) requires the pass-through entity to verify these subrecipients are audited as required by Subpart F of the Uniform Guidance, Audit Requirements, when it is expected the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the $750,000 threshold. In addition, federal regulation 2 CFR 200.521 requires MDOT to issue a management decision letter on the appropriateness of all audit findings related to its federal awards and the subrecipient's corrective action plan within six months of acceptance by the FAC. Cause MDOT informed us an oversight occurred due to employee turnover and the need to update its procedures. Effect MDOT limited the State's assurance its subrecipients complied with grant requirements and implemented corrective action for audit findings to prevent future sanctions or disallowed costs, which could necessitate adjustments to MDOT's records. The federal grantor agency could issue sanctions or disallowance related to noncompliance. Known Questioned Costs None. Recommendation We recommend MDOT ensure its review of subrecipient single audit reports and issuance of management decisions are completed within six months of the FAC acceptance date. Management Views MDOT agrees with the finding.

FY End: 2022-09-30
State of Michigan
Compliance Requirement: M
FINDING 2022-061 Disaster Grants - Public Assistance (Presidentially Declared Disasters), ALN 97.036, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MSP did not appropriately monitor its subrecipients to ensure they complied with the Uniform Guidance. MSP utilized a tracking sheet to identify those subrecipients that required a single audit and a form to document its review of subrecipient single audits. We sampled 5 subre...

FINDING 2022-061 Disaster Grants - Public Assistance (Presidentially Declared Disasters), ALN 97.036, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MSP did not appropriately monitor its subrecipients to ensure they complied with the Uniform Guidance. MSP utilized a tracking sheet to identify those subrecipients that required a single audit and a form to document its review of subrecipient single audits. We sampled 5 subrecipients and noted for 2 (40%): a. MSP did not appropriately identify or document if the subrecipients required a single audit. Therefore, MSP did not monitor these subrecipients to ensure the status or submission of their single audit reports. We verified both subrecipients obtained the required single audits. b. MSP did not complete single audit report review forms. Therefore, MSP did not take steps to determine whether a management decision letter was needed. We verified there were no findings related to both subrecipients' federal awards. Criteria Federal regulation 2 CFR 200.501 requires nonfederal entities who expend $750,000 or more in federal awards during their fiscal year to obtain a single audit for that fiscal year. Also, federal regulation 2 CFR 200.332(f) requires the pass-through entity to verify these subrecipients are audited as required by Subpart F of the Uniform Guidance, Audit Requirements, when it is expected the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the $750,000 threshold. In addition, federal regulation 2 CFR 200.521(d) requires MSP to issue a management decision letter on the appropriateness of all audit findings related to its federal awards and the subrecipient's corrective action plan within six months of acceptance by the FAC. Cause MSP informed us a miscommunication between its staff regarding its query of subrecipient expenditure data resulted in subrecipients being excluded from the tracking sheet. Effect MSP limited the State's assurance that its subrecipients complied with grant requirements and implemented corrective actions for audit findings to prevent future sanctions or disallowed costs, which could necessitate adjustments to MSP's records. The federal grantor agency could issue sanctions or disallowances related to noncompliance. Known Questioned Costs None. Recommendation We recommend MSP appropriately monitor its subrecipients to ensure they comply with the Uniform Guidance. Management Views MSP agrees with the finding.

FY End: 2022-09-30
State of Michigan
Compliance Requirement: M
FINDING 2022-061 Disaster Grants - Public Assistance (Presidentially Declared Disasters), ALN 97.036, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MSP did not appropriately monitor its subrecipients to ensure they complied with the Uniform Guidance. MSP utilized a tracking sheet to identify those subrecipients that required a single audit and a form to document its review of subrecipient single audits. We sampled 5 subre...

FINDING 2022-061 Disaster Grants - Public Assistance (Presidentially Declared Disasters), ALN 97.036, Subrecipient Monitoring - Subrecipient Audits See Schedule of Findings and Questioned Costs for chart/table. Condition MSP did not appropriately monitor its subrecipients to ensure they complied with the Uniform Guidance. MSP utilized a tracking sheet to identify those subrecipients that required a single audit and a form to document its review of subrecipient single audits. We sampled 5 subrecipients and noted for 2 (40%): a. MSP did not appropriately identify or document if the subrecipients required a single audit. Therefore, MSP did not monitor these subrecipients to ensure the status or submission of their single audit reports. We verified both subrecipients obtained the required single audits. b. MSP did not complete single audit report review forms. Therefore, MSP did not take steps to determine whether a management decision letter was needed. We verified there were no findings related to both subrecipients' federal awards. Criteria Federal regulation 2 CFR 200.501 requires nonfederal entities who expend $750,000 or more in federal awards during their fiscal year to obtain a single audit for that fiscal year. Also, federal regulation 2 CFR 200.332(f) requires the pass-through entity to verify these subrecipients are audited as required by Subpart F of the Uniform Guidance, Audit Requirements, when it is expected the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the $750,000 threshold. In addition, federal regulation 2 CFR 200.521(d) requires MSP to issue a management decision letter on the appropriateness of all audit findings related to its federal awards and the subrecipient's corrective action plan within six months of acceptance by the FAC. Cause MSP informed us a miscommunication between its staff regarding its query of subrecipient expenditure data resulted in subrecipients being excluded from the tracking sheet. Effect MSP limited the State's assurance that its subrecipients complied with grant requirements and implemented corrective actions for audit findings to prevent future sanctions or disallowed costs, which could necessitate adjustments to MSP's records. The federal grantor agency could issue sanctions or disallowances related to noncompliance. Known Questioned Costs None. Recommendation We recommend MSP appropriately monitor its subrecipients to ensure they comply with the Uniform Guidance. Management Views MSP agrees with the finding.

FY End: 2022-09-30
New Mexico Mortgage Finance Authority
Compliance Requirement: M
Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: HOME Investment Partnerships Program Assistance Listing Number: 14.239 Federal Award Identification Number and Year: M22-SG350100 & M21-SP350100 - 2022 Award Period: October 1, 2021 through September 30, 2022 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: A pass-through entity must monitor the activities of the subrecipient ...

Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: HOME Investment Partnerships Program Assistance Listing Number: 14.239 Federal Award Identification Number and Year: M22-SG350100 & M21-SP350100 - 2022 Award Period: October 1, 2021 through September 30, 2022 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: A pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: ? Reviewing financial and programmatic (performance and special reports) required by the PTE. ? Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Condition: During our testing, we noted the Authority did not have adequate internal controls designed to properly monitor its? subrecipients. Questioned costs: None Context: During our testing of subrecipient monitoring, it was noted that there was not proper follow up conducted for 3 out of 8 subrecipients tested. The Authority did not follow its policies and procedures to ensure findings and questions were properly addressed by the subrecipient. The sample was a statistically valid sample. Cause: The Authority does not have a policy in place to ensure that subrecipients were responding to its monitoring reports in a timely manner. Effect: The lack of internal controls over this compliance requirement provides an opportunity for noncompliance by subrecipients of the grant. Recommendation: We recommend the Authority design controls to ensure subrecipients are responding to and addressing questions and findings within its monitoring reports. Views of responsible officials and planned corrective actions: There is no disagreement with the audit finding. The Authority uses the Tracker database to track monitoring deadlines electronically. The Tracker automatically sends reminders to all staff in the department every two weeks to follow up with pending and outstanding monitoring issues. However, some staff were not using the Tracker as intended. The Director will enforce and monitor the use of the Tracker and ensure staff follow up on the monitorings by the required deadlines. Name of the contact person responsible for corrective action: Chief Housing Officer Planned completion date for corrective action plan: November 30, 2022

FY End: 2022-09-30
New Mexico Mortgage Finance Authority
Compliance Requirement: M
Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: HOME Investment Partnerships Program Assistance Listing Number: 14.239 Federal Award Identification Number and Year: M22-SG350100 & M21-SP350100 - 2022 Award Period: October 1, 2021 through September 30, 2022 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: A pass-through entity must monitor the activities of the subrecipient ...

Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: HOME Investment Partnerships Program Assistance Listing Number: 14.239 Federal Award Identification Number and Year: M22-SG350100 & M21-SP350100 - 2022 Award Period: October 1, 2021 through September 30, 2022 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: A pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: ? Reviewing financial and programmatic (performance and special reports) required by the PTE. ? Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Condition: During our testing, we noted the Authority did not have adequate internal controls designed to properly monitor its? subrecipients. Questioned costs: None Context: During our testing of subrecipient monitoring, it was noted that there was not proper follow up conducted for 3 out of 8 subrecipients tested. The Authority did not follow its policies and procedures to ensure findings and questions were properly addressed by the subrecipient. The sample was a statistically valid sample. Cause: The Authority does not have a policy in place to ensure that subrecipients were responding to its monitoring reports in a timely manner. Effect: The lack of internal controls over this compliance requirement provides an opportunity for noncompliance by subrecipients of the grant. Recommendation: We recommend the Authority design controls to ensure subrecipients are responding to and addressing questions and findings within its monitoring reports. Views of responsible officials and planned corrective actions: There is no disagreement with the audit finding. The Authority uses the Tracker database to track monitoring deadlines electronically. The Tracker automatically sends reminders to all staff in the department every two weeks to follow up with pending and outstanding monitoring issues. However, some staff were not using the Tracker as intended. The Director will enforce and monitor the use of the Tracker and ensure staff follow up on the monitorings by the required deadlines. Name of the contact person responsible for corrective action: Chief Housing Officer Planned completion date for corrective action plan: November 30, 2022

FY End: 2022-09-30
New Mexico Mortgage Finance Authority
Compliance Requirement: N
Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: ARRA Tax Credit Assistance Program (TCAP) Assistance Listing Number: 14.258 Federal Award Identification Number and Year: M-09-ES-35-0100 - 2022 Award Period: October 1, 2021 through September 30, 2022 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: A pass-through entity must monitor the activities of the subrecipient as neces...

Federal Agency: U.S. Department of Housing and Urban Development Federal Program Name: ARRA Tax Credit Assistance Program (TCAP) Assistance Listing Number: 14.258 Federal Award Identification Number and Year: M-09-ES-35-0100 - 2022 Award Period: October 1, 2021 through September 30, 2022 Type of Finding: ? Significant Deficiency in Internal Control over Compliance ? Other Matters Criteria or specific requirement: A pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: ? Reviewing financial and programmatic (performance and special reports) required by the PTE. ? Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Criteria or specific requirement (Continued): Grantees must perform asset management functions, or contract for performance of these services at the owner?s expense, to ensure compliance with Section 42 of the IRC and with the long term viability of projects funded by TCAP (ARRA, 123 Stat. 221). Condition: During our testing, we noted the Authority did not have adequate internal controls designed to properly monitor its? subrecipients. Questioned costs: None Context: During our testing of subrecipient monitoring, it was noted that there was not proper follow up conducted for one out of five subrecipients tested. The Authority did not follow its policies and procedures to ensure findings and questions were properly addressed by the subrecipient. The sample was a statistically valid sample. Cause: The Authority does not have a policy in place to ensure that subrecipients were responding to its monitoring reports in a timely manner. Effect: The lack of internal controls over this compliance requirement provides an opportunity for noncompliance by subrecipients of the grant. Recommendation: We recommend the Authority design controls to ensure subrecipients are responding to and addressing questions and findings within its monitoring reports. Views of responsible officials and planned corrective actions: There is no disagreement with the audit finding. The Authority uses the Tracker database to track monitoring deadlines electronically. The Tracker automatically sends reminders to all staff in the department every two weeks to follow up with pending and outstanding monitoring issues. However, some staff were not using the Tracker as intended. The Director will enforce and monitor the use of the Tracker and ensure staff follow up on the monitorings by the required deadlines. Name of the contact person responsible for corrective action: Chief Housing Officer Planned completion date for corrective action plan: November 30, 2022

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

« 1 67 68 70 71 85 »