2 CFR 200 § 200.521

Findings Citing § 200.521

Management decisions.

Total Findings
4,247
Across all audits in database
Showing Page
71 of 85
50 findings per page
About this section
Section 200.521 outlines the requirements for management decisions regarding audit findings, specifying that they must clarify whether findings are upheld, provide reasons, and detail expected actions from the auditee, including timelines for corrective measures. This section affects federal agencies, pass-through entities, and auditees by establishing responsibilities and timelines for addressing audit findings and ensuring accountability in federal funding.
View full section details →
FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
Auburn University
Compliance Requirement: M
2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing ...

2022-001 ? Subrecipient Monitoring Cluster: Research and Development Sponsoring Agency: Various agencies Award Names: Various awards Award Numbers: Various award numbers Assistance Listing Title: Various assistance listing titles Assistance Listing Number: Various assistance listing numbers Award Year: 2021 ? 2022 Pass-through entity: Various pass-through entities Criteria 2 CFR 200.332(d) notes that pass-through entity monitoring of the subrecipient must include: 1. Reviewing financial and performance reports required by the pass-through entity. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. 3. Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. 2 CFR 200.332(f) notes that a pass-through entity must verify that every subrecipient is audited as required by the Uniform Guidance when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in 2 CFR 200.501. Additionally, 2 CFR 200.332(b) indicates that entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section of the guidance. In this respect, University procedures include (amongst other items) obtaining a certification letter from the subrecipient, performing an initial risk assessment on all subrecipients and updating that risk assessment based on the Office of Sponsored Programs judgement. Condition Through our testing of 11 subrecipients, we noted the following: - For 4 of the 11 samples of subrecipients selected, we were unable to obtain the initial risk assessment form. - For 2 of the 11 samples of subrecipients selected, we were unable to obtain the certification letter. - For 8 of the 11 samples of subrecipients selected, there was a current year modification to the subaward agreement, however, we were unable to obtain evidence of management?s judgement with regards to whether a risk assessment form was necessary to be completed in accordance with the University?s procedures. - For 1 of the 11 samples of subrecipients selected, we were unable to obtain the original subrecipient commitment form. - For 11 of the 11 samples of subrecipients selected, we were unable to obtain evidence of the University?s annual review of the Uniform Guidance report. Cause The University indicated subrecipient reviews were not consistently performed in accordance with 2 CFR. Certain risk assessment forms were completed in prior years; however, the Office of Sponsored Programs was unable to locate the original completed forms. Additionally, due to reduced staffing levels within the Office of Sponsored Programs, the Uniform Guidance requirements (and related University procedures) around subrecipient reviews were not consistently performed and/or documented. Effect The lack of written procedures, and annual review of subrecipient awards in accordance with the procedures, may result in ineligible subrecipients receiving federal awards, subrecipient findings not being fully remediated and other monitoring procedures (based on risk level) not being performed. Questioned Costs None noted. Recommendation We recommend that the University reassess the design of its controls around subrecipient monitoring both prior to the execution of a subaward agreement and during the ongoing monitoring process. The University should also update its procedures related to the annual monitoring of subrecipients, inclusive of annual reviews of Uniform Guidance reports along with other required ongoing monitoring based on the risk rating of the subrecipient. Management?s Views and Corrective Action Plan Management?s Views and Corrective Action Plan are included at the end of this report after the summary schedule of prior audit findings and status.

FY End: 2022-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2022-041 Prior Year Finding Number: 2021-036 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury COVID-19 - Coronavirus Relief Fund ALN: 21.019 Award #: N/A Award Period: 03/01/2020 – 12/31/2021 Government Department/Agency: Office of Management and Budget (OMB) Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or s...

Finding Number: 2022-041 Prior Year Finding Number: 2021-036 Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury COVID-19 - Coronavirus Relief Fund ALN: 21.019 Award #: N/A Award Period: 03/01/2020 – 12/31/2021 Government Department/Agency: Office of Management and Budget (OMB) Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We reviewed two sub-awards made during 2022 and found that OMB did not evaluate the risks or monitor the two subrecipients. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements. Questioned Costs – None. Context – This is a condition identified per review of OMB’s compliance with the specified requirements and general compliance principles. The total amount of expenditures passed through to subrecipients in fiscal year 2022 were $4,500,000. Effect – OMB is not in compliance with the stated provisions. Failure to properly monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the programs objectives. Cause – OMB does not have internal controls in place to properly monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that OMB implement policies, procedures, and controls to ensure subrecipients are monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. OMB will establish a robust framework featuring detailed monitoring procedures, regular compliance checks, and comprehensive oversight mechanisms to ensure subrecipients adhere to federal requirements. This framework aims to promote accountability, proper use of federal funds, mitigate risks, enhance transparency, and ensure subrecipients effectively fulfill their obligations under federal statutes. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2022-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2022-045 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury COVID-19 - Coronavirus State and Local Fiscal Recovery Funds ALN: 21.027 Award #: N/A Award Period: 03/03/2021 – 12/31/2024 Government Department/Agency: Office of Management and Budget (OMB) Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the t...

Finding Number: 2022-045 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Treasury COVID-19 - Coronavirus State and Local Fiscal Recovery Funds ALN: 21.027 Award #: N/A Award Period: 03/03/2021 – 12/31/2024 Government Department/Agency: Office of Management and Budget (OMB) Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We obtained a list of subrecipients from OMB and found that the list identified internal Government of the Virgin Islands (GVI) departments and offices as subrecipients. The list of subrecipients also included an external entity whose federal expenditures are part of the GVI Schedule of Expenditures of Federal Awards. As a result, the listing of subrecipients was amended to exclude 23 projects totaling $23,559,959. Using the amended listing of subrecipients, we selected 12 of 18 subrecipients and found the following: • 3 projects which OMB did not verify if the entity underwent a single audit as required by 2 CFR part 200, subpart F. • 1 project which OMB did not complete their monitoring workbook during the fiscal year • 5 projects in which there was no evidence the monitoring workbook was reviewed by the ARPA Grants Administrator. • 6 projects where entities were identified as subrecipients but were ultimately considered to be beneficiaries of SLFRF funds and not subrecipients. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements or proper identification of subrecipients. Questioned Costs – None. Context – This is a condition identified per review of OMB’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2022 were $56,490,165. The total amount of our sample totaled $46,452,928. Effect – OMB is not in compliance with the stated provisions. Failure to properly identify and monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the programs objectives. Cause – OMB does not have internal controls in place to properly identify and monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that OMB implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. Starting FY25, OMB will identify and monitor federal awarding agencies, requesting single audit results for applicable recipients and including them in monitoring reviews. For revenue replacement projects, Treasury's Final Rule FAQ (13.14) states that these funds do not create subrecipient relationships, thus exempting them from the Single Audit Act due to the absence of a federal program or purpose. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2022-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number 2022-051 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Education Consolidated Grant to the Outlying Areas, ALN: 84.403A Award #: Various Award Period: Various Government Department/Agency: Department of Education (VIDE) Criteria – Per Compliance Supplement, a pass-through entity (PTE) must: • Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: (1) the award as a subaward at the time of ...

Finding Number 2022-051 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Education Consolidated Grant to the Outlying Areas, ALN: 84.403A Award #: Various Award Period: Various Government Department/Agency: Department of Education (VIDE) Criteria – Per Compliance Supplement, a pass-through entity (PTE) must: • Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: (1) the award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); (2) all requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); and (3) any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). • Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). • Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We sampled subawards to 3 out of 10 subrecipients and found no supporting documentation that VIDE verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. Additionally, there was no evidence of award monitoring performed for 2 of the 3 subrecipients tested. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements. Questioned Costs – None. Context – This is a condition identified per review of VIDE’s compliance with the specified requirements and general compliance principles. The total amount of expenditures passed through to subrecipients in fiscal year 2022 were $1,051,727. Effect – VIDE is not in compliance with the stated provisions. Failure to properly monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the programs objectives. Cause – VIDE does not have internal controls in place to properly monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that VIDE implement policies, procedures, and controls to ensure subrecipients are monitored in accordance with federal statutes. Views of Responsible Officials - The Government concurs with the auditor’s findings and recommendations. VIDE is committed to strengthening controls to ensure subrecipient compliance with federal audit requirements under 2 CFR Part 200, Subpart F. This includes implementing effective measures, such as explicit reporting requirements in subrecipient agreements and providing training to internal staff on subrecipient monitoring requirements and ensure consistent implementation. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2022-09-30
The Virgin Islands Hsg Finance Authority - Paradise Mills Apartments
Compliance Requirement: M
Finding Number: 2022-082 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Homeland Security Disaster Grants - Public Assistance (Presidentially Declared Disasters) ALN: 97.036 Award #: FEMA-4335-DR, FEMA-4340-DR-VI, FEMA-4513-DR Award Periods: 09/20/2017 – 09/07/2026 09/07/2017 – 09/16/2025 04/02/2020 – 05/11/2023 Government Department/Agency: Virgin Islands Territorial Emergency Management Agency (VITEMA) Criteria – A pass-through entity...

Finding Number: 2022-082 Prior Year Finding Number: N/A Compliance Requirement: Subrecipient Monitoring Program: U.S. Department of Homeland Security Disaster Grants - Public Assistance (Presidentially Declared Disasters) ALN: 97.036 Award #: FEMA-4335-DR, FEMA-4340-DR-VI, FEMA-4513-DR Award Periods: 09/20/2017 – 09/07/2026 09/07/2017 – 09/16/2025 04/02/2020 – 05/11/2023 Government Department/Agency: Virgin Islands Territorial Emergency Management Agency (VITEMA) Criteria – A pass-through entity (PTE) must: Identify the Award and Applicable Requirements – Clearly identify to the subrecipient: 1. The award as a subaward at the time of subaward (or subsequent subaward modification) by providing the information described in 2 CFR section 200.331(a)(1); 2. All requirements imposed by the PTE on the subrecipient so that the federal award is used in accordance with federal statutes, regulations, and the terms and conditions of the award (2 CFR section 200.331(a)(2)); 3. Any additional requirements that the PTE imposes on the subrecipient in order for the PTE to meet its own responsibility for the federal award (e.g., financial, performance, and special reports) (2 CFR section 200.331(a)(3)). Evaluate Risk – Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR section 200.332(b)). This evaluation of risk may include consideration of such factors as the following: 1. The subrecipient’s prior experience with the same or similar subawards; 2. The results of previous audits including whether or not the subrecipient receives single audit in accordance with 2 CFR Part 200, Subpart F, and the extent to which the same or similar subaward has been audited as a major program; 3. Whether the subrecipient has new personnel or new or substantially changed systems; and 4. The extent and results of federal awarding agency monitoring (e.g., if the subrecipient also receives federal awards directly from a federal awarding agency). Monitor – Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR sections 200.332(d) through (f)). In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, subaward monitoring must include the following: 1. Reviewing financial and programmatic (performance and special reports) required by the PTE. 2. Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the PTE detected through audits, on-site reviews, and other means. 3. Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the PTE as required by 2 CFR section 200.521. Further, the Uniform Guidance in 2 CFR Section 200.303, Internal Controls, requires that non-federal entities receiving Federal awards (i.e., auditee management) establish and maintain internal control designed to ensure compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. Condition – We selected 8 of 25 subrecipients and found the following: • 5 instances where we were unable to obtain subrecipient agreements. • 8 instances where we were unable to obtain Quarterly Progress Reports. • 3 instances with no Certification Letter of Completion of Work and Disaster Response and Recovery Final Inspection Report. • 8 instances with no supporting documentation that VITEMA verified that subrecipients expected to be audited as required by 2 CFR part 200, subpart F. Further, it does not appear that the controls in place are operating at a level of precision to ensure compliance with the subrecipient monitoring compliance requirements or proper identification of subrecipients. Questioned Costs – None. Context – This is a condition identified per review of VITEMA’s compliance with the specified requirements using a statistically valid sample. The total amount of expenditures passed through to subrecipients in fiscal year 2022 were $205,714,063. The total amount of our sample totaled $190,927,885. Effect – VITEMA is not in compliance with the stated provisions. Failure to properly identify and monitor subrecipients can result in noncompliance with laws and regulations and failure to meet the programs objectives. Cause – VITEMA does not have internal controls in place to properly identify and monitor subrecipients to ensure adherence to applicable federal regulations, including expending federal awards for allowable expenditures. Recommendation – We recommend that VITEMA implement policies, procedures, and controls to ensure subrecipients are identified and monitored in accordance with federal statutes. Views of Responsible Officials – The Government concurs with the auditor’s findings and recommendations. The formal process for completing and retaining Subrecipient Agreements is now operational to ensure compliance with programmatic obligations. As the Recipient, the Territory is responsible for notifying the Subrecipient when federal funds are obligated and providing them with a subrecipient agreement outlining the program's terms and conditions. The Disaster Program Financial Specialist is responsible for ensuring that the subrecipient agreement is signed by both the Applicant and the Governor's Authorized Representative and provided to the Territorial Public Assistance Officer. The planned corrective actions are presented in the Government’s Corrective Action Plan attached as Appendix B to the Single Audit Report.

FY End: 2022-09-30
Commonwealth of the Northern Mariana Islands
Compliance Requirement: M
Finding No. 2022-031 Federal Agency: U.S. Department of the Treasury AL Program: 21.027 Coronavirus State and Local Fiscal Recovery Funds Federal Award No.: COVID-19 Area: Subrecipient Monitoring Questioned Costs: $61,003,095 Criteria: Per the U.S. Treasury Interim and Final Rules, the U.S. Treasury is aligning the definition of subrecipient in the final rule with the definition of subrecipient in the Uniform Guidance, wherein, subrecipients are entities that receive a subaward from a recipient ...

Finding No. 2022-031 Federal Agency: U.S. Department of the Treasury AL Program: 21.027 Coronavirus State and Local Fiscal Recovery Funds Federal Award No.: COVID-19 Area: Subrecipient Monitoring Questioned Costs: $61,003,095 Criteria: Per the U.S. Treasury Interim and Final Rules, the U.S. Treasury is aligning the definition of subrecipient in the final rule with the definition of subrecipient in the Uniform Guidance, wherein, subrecipients are entities that receive a subaward from a recipient to carry out a program or project on behalf of the recipient with the recipient’s Federal award funding but does not include an individual that is a beneficiary of such award. The recipient remains responsible for monitoring and overseeing the subrecipient’s use of Fiscal Recovery Funds and other activities related to the award to ensure that the subrecipient complies with the statutory and regulatory requirements and the terms and conditions of the award. Recipients also remain responsible for reporting to Treasury on their subrecipients’ use of payments from the Fiscal Recovery Funds for the duration of the award. Accordingly, in accordance with 2 CFR § 200.332, pass-through entity (PTE) must: 1. Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the information provided below. A PTE must provide the best available information when some of the information below is unavailable. A PTE must provide the unavailable information when it is obtained. One of the required information includes: (1) Federal award identification: (i) Subrecipient’s unique entity identifier; (ii) Federal Award Identification Number (FAIN); (iii) Subaward Period of Performance Start and End Date; (iv) Subaward Budget Period Start and End Date; (v) Amount of Federal Funds Obligated in the subaward; (vi) Total Amount of Federal Funds Obligated to the subrecipient by the PTE, including the current financial obligation; (vii) Total Amount of Federal Funds Obligated to the subrecipient by the PTE, including the current financial obligation; and (viii) Assistance Listings title and number; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at the time of disbursement. (2) All requirements of the subaward, including requirements imposed by Federal statutes, regulations, and the terms and conditions of the Federal award; (3) Any additional requirements that the pass-through entity imposes on the subrecipient for the pass-through entity to meet its responsibilities under the Federal award. This includes information and certifications (see § 200.415) required for submitting financial and performance reports that the pass-through entity must provide to the Federal agency; (4) A requirement that the subrecipient permit the pass-through entity and auditors to access the subrecipient's records and financial statements for the pass-through entity to fulfill its monitoring requirements; and (5) Appropriate terms and conditions concerning the closeout of the subaward. 2. Evaluate each subrecipient’s fraud risk and risk of noncompliance with a subaward to determine the appropriate subrecipient monitoring described in paragraph (f) of this section. When evaluating a subrecipient’s risk, a PTE should consider the following: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits. This includes considering whether or not the subrecipient receives a Single Audit in accordance with subpart F and the extent to which the same or similar subawards have been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of any Federal agency monitoring (for example, if the subrecipient also receives Federal awards directly from the Federal agency). 3. Monitor the activities of a subrecipient as necessary to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward. The PTE is responsible for monitoring the overall performance of a subrecipient to ensure that the goals and objectives of the subaward are achieved. In monitoring a subrecipient, a PTE must: (1) Review financial and performance reports. (2) Ensure that the subrecipient takes corrective action on all significant developments that negatively affect the subaward. Significant developments include Single Audit findings related to the subaward, other audit findings, site visits, and written notifications from a subrecipient of adverse conditions which will impact their ability to meet the milestones or the objectives of a subaward. When significant developments negatively impact the subaward, a subrecipient must provide the pass-through entity with information on their plan for corrective action and any assistance needed to resolve the situation. (3) Issue a management decision for audit findings pertaining only to the Federal award provided to the subrecipient from the PTE as required by §200.521. (4) Resolve audit findings specifically related to the subaward. However, the PTE is not responsible for resolving cross-cutting audit findings that apply to the subaward and other Federal awards or subawards. If a subrecipient has a current Single Audit report and has not been excluded from receiving Federal funding (meaning, has not been debarred or suspended), the PTE may rely on the subrecipient’s cognizant agency for audit or oversight agency for audit to perform audit follow-up and make management decisions related to cross-cutting audit findings in accordance with section § 200.513(a)(4)(viii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. 4. Verify that a subrecipient is audited as required by subpart F. 5. Consider whether the results of a subrecipient's audit, site visits, or other monitoring necessitate adjustments to the pass-through entity's records. Further, in accordance with 31 CFR § 19.300, prior to entering into subawards with award funds, recipients must verify that such subrecipients are not suspended, debarred, or otherwise excluded from receiving federal funds. Condition: 1. Of seventeen subrecipients tested, aggregating $60,403,095 of a total population of $61,003,095, the following were noted: a. For seventeen (or 100%), documentations of the risk assessments performed and verification as to whether the subrecipients are not suspended or debarred were not provided. b. For two (or 12%), subrecipient agreements were not provided. No questioned costs are presented as amounts are questioned at Condition 1a. c. For two (or 12%), subrecipients’ unique entity identifiers, the federal award identification numbers (FAIN), amounts of federal funds obligated by this action by the PTE to the subrecipients, total amount of federal funds obligated to the subrecipients by the PTE, including the current financial obligations and the appropriate terms and conditions concerning the closeout of the subawards, were not included in the subrecipient agreements. No questioned costs are presented as amounts are questioned at Condition 1a. d. For ten (or 59%), subawards were supported with financial assistance request letters from the subrecipients and not with a subaward agreement that CNMI utilizes for other subawards. Accordingly, other than the date of request, amount requested and purpose of the financial assistance, all other required subaward information pursuant to 2 CFR § 200.332, were not indicated. No questioned costs as amounts are questioned at Condition 1a. e. For one (or 6%), no monitoring procedures were performed. No questioned cost is presented as the amount is questioned at Condition 1a. 2. Of sixteen subrecipient monitoring procedure requirements tested, aggregating $58,537,352 of a total population of $58,537,352, for sixteen (or 100%), documentation on monitoring procedures performed were not provided. In addition, documentation of preventive measures taken to mitigate risk from subrecipients that showed elevated risk factors or for identified unallowable activities were not documented and no verification as to whether the subrecipients are subject to the audit requirements. 3. Of sixty monitoring procedure requirements tested at the invoice/disbursement level, aggregating $58,438,922 of a total population of $61,003,095, the following were noted: a. For six (or 10%), review and approval of invoices and/or payments to ensure that subrecipients used the subaward for authorized purposes in compliance with Federal statutes, regulations, and the terms and conditions of the subawards, were not evident. No questioned costs are presented as expenditures pertain to subawards that were questioned at Condition 1a for Award Numbers CNMI22037 and COVID-19 Care Force Project. b. For twenty-four (or 40%), either the check payments and/or invoices or equivalent documentations were not provided; accordingly, the CNMI was not able to substantiate that monitoring procedures were performed to ensure that subrecipients used the subaward for authorized purposes in compliance with Federal statutes, regulations, and the terms and conditions of the subawards. No questioned costs are presented as expenditures pertain to subawards that were questioned at Condition 1a for Award Numbers NMPMG, CNMI 22037, CNMI22044 and COVID-19 Care Force Project and at Condition 2 for Award Reference Number 5302. Cause: The CNMI does not have approved/adopted written subrecipient monitoring policies and procedures. In addition, the CNMI failed to enforce compliance with subrecipient monitoring requirements and lacks monitoring controls over the following: 1. Monitoring activities of a subrecipient to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward; 2. Adequate documentation and systematic filing of relevant documentation supporting program costs. In addition, for award number CNMI22044, the Entity’s management has determined that it should be classified as a contractor under the agreement as the Entity’s role is to promote the program within the CNMI, develop a marketing and promotional campaign and disburse the award to the recipients identified by the CNMI. The Entity was not involved in reviewing and deciding which grant applicant is eligible to receive the grant. CNMI’s role in the review of grant applications and eligibility determination may have caused confusion as to whether the Entity that received the funds is a subrecipient or a contractor. As of the auditor’s report date, the CNMI and the Entity have yet to conclude whether the Entity received the funds in the role of a subrecipient or a contractor. Effect: The CNMI is in noncompliance with applicable subrecipient monitoring requirements and questioned costs of $61,003,095 for Condition 1. Identification as a Repeat Finding: Finding No. 2021-033 Recommendation: We recommend the CNMI establish approved/adopted written subrecipient monitoring policies and procedures and an approved template that includes all required clauses needed for subrecipient agreements. In addition, CNMI should implement monitoring internal control procedures over the following: 1. Preventive measures taken to mitigate risk from subrecipients that showed elevated risk factors or for identified unallowable activities are adequately documented. Recommendation, continued: 2. Verification that subrecipients are audited as required by subpart F; 3. Monitoring activities of a subrecipient to ensure that the subrecipient complies with Federal statutes, regulations, and the terms and conditions of the subaward; 4. Provide subrecipients with training and technical assistance on program-related matters, including thorough explanation of their role as subrecipients; 5. Adequate documentation and systematic filing of relevant documentation to support program costs. Views of Responsible Officials: Conditions 1 to 3 - The Department of Finance agrees with this finding. The Department has recently adopted and approved (August 2025) a Subrecipient Monitoring Policy and Procedures which specifically focused on the implementation of 2 CFR 200.331. Refer to CNMI’s Corrective Action Plan for additional information.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-08-31
Public Allies, INC
Compliance Requirement: M
Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing ...

Finding 2022-002: Subrecipient Monitoring Federal Department: Americorps (Corporation for National and Community Service) Pass-through Agencies: Connecticut Office of Higher Education Illinois Department of Public Health Illinois Department of Human Services Indiana Department of Workforce Development Wisconsin National and Community Service Board Americorps State and National, Federal Assistance Listing Number 94.006 Criteria 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, Subpart D - Post Federal Award Requirements Standards for Financial and Program Management, Section 200.332. Requirements for pass-through entities, requires that ?All pass-through entities must: (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F?Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in Section 200.208 Specific conditions. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by Section 200.521 Management decision. (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: (1) Providing subrecipients with training and technical assistance on program-related matters; and (2) Performing on-site reviews of the subrecipient's program operations; (3) Arranging for agreed-upon-procedures engagements as described in Section 200.425 Audit services. (f) Verify that every subrecipient is audited as required by Subpart F?Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in Section 200.501 Audit requirements. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in Section 200.338 Remedies for noncompliance of this part and in program regulations.? Condition During the current audit period, we noted Public Allies did not perform adequate monitoring of its subrecipient as required by Federal regulations. Cause Based on discussions with management, this occurred due to staffing turnovers, which resulted in challenges and a disruption in the planned implementation and/or carrying out of the monitoring plan and risk assessment as well as collection of adequate documentation to meet requirements. Effect Failure to adequately communicate and monitor the activities and performance of a subrecipient could result in Federal awards being used for unauthorized purposes and Public Allies? inability to adequately perform risk assessments on its subrecipient(s). Questioned Costs None. Context During the current audit period, we noted 12 subrecipients were awarded funds. During our review of 3 subrecipients, we noted adequate documentation was not maintained to support both the financial and programmatic monitoring of these subrecipients. Specifically, we noted documentation was not maintained to support Public Allies? evaluation of each subrecipients risk of noncompliance. Also, while Public Allies did obtain a copy of the subrecipient?s Single Audit Report, we were not provided with any evidence of Public Allies? review of the report, including and if applicable, issuance of a management decision on audit findings noted as required by 2 CFR 200.332d(3). Identification of Repeated Findings None. Recommendation We recommend Public Allies update its written procedures to document the monitoring of its subrecipients in accordance with 2 CFR 200.332. Also, adequate staff resources and training should be in place to oversee the process of completing the required subrecipient monitoring, including documentation of the evaluation of the subrecipient risk of noncompliance and review of the Single Audit report, as required by federal regulations. Views of Responsible Official and Planned Corrective Action Public Allies agree with the finding and recommendation. See Public Allies? Corrective Action Plan on pages 41-42.

FY End: 2022-06-30
State of Arizona
Compliance Requirement: AB
Assistance Listings number and name: 12.401 National Guard Military Operations and Maintenance (O&M) Projects Award numbers and years: W912L2-21-2-1000, October 1, 2020 through September 30, 2021; W912L2-22-2-1000, October 1, 2021 through September 30, 2022 Federal agency: U.S. Department of Defense Compliance requirements: Activities allowed or unallowed and allowable costs/cost principles Questioned costs: $125,288 Condition—Contrary to federal regulations and its policies, the Department of ...

Assistance Listings number and name: 12.401 National Guard Military Operations and Maintenance (O&M) Projects Award numbers and years: W912L2-21-2-1000, October 1, 2020 through September 30, 2021; W912L2-22-2-1000, October 1, 2021 through September 30, 2022 Federal agency: U.S. Department of Defense Compliance requirements: Activities allowed or unallowed and allowable costs/cost principles Questioned costs: $125,288 Condition—Contrary to federal regulations and its policies, the Department of Emergency Military Affairs (Department) did not always retain documentation supporting the payroll costs it charged to the program. Specifically, the Department had not retained the personnel action forms supporting and approving employees’ pay rates and authorizing them to work on the program for 4 of 21 employees we tested, as follows: • $123,968 for 3 employees’ annual payroll costs and employee-related expenses for which each employee’s salaries and wages and authorization to work on the program were not supported by documented personnel action forms. • $1,320 for 1 employee whose previous personnel action form authorized their working on the program but whose most recent pay rate increase was not supported by a documented personnel action form. Effect—The Department’s failure to retain documentation supporting payroll costs could potentially result in the Department being required to return monies spent on unallowable costs to the federal agency or adjust its program’s costs so that monies are spent for allowable costs.1 During fiscal year 2022, the Department paid 323 employees $15,486,984 of salaries and wages, including employee-related expenses, that were charged to the program. There is a risk that the Department could have potentially charged additional payroll costs to the program without maintaining the required supporting documentation. Finally, the Department is at risk that this finding applies to other federal programs it administers. Cause—The Department’s Administrative Services Office (Office) was not adequately trained to follow the documentation and record retention policy. Specifically, the Office reported that it did not retain the personnel action records as they were unaware that all employee personnel records were required to be retained for 5 years after an employee’s termination. Instead, the Office interpreted the policy to only require these documents to be retained for 5 years after the documents were originally created. Criteria—The Department’s record retention policies require its Administrative Services Office to retain for 5 years after an employee’s termination all the employee’s employment records, including personnel action forms authorizing employee pay rate changes and program assignments.2 Federal regulation requires the Department to retain all records related to a federal program for a period of 3 years from the date the program’s final report was submitted to the federal awarding agency or pass-through grantor (2 CFR §200.334). Also, federal regulation requires the Department to maintain records for salaries and wages charged to federal awards that accurately reflect the work performed and are supported by policies and internal controls to ensure they are accurate, allowable, and properly allocated (2 CFR §200.430[i][1][i]). Further, federal regulation requires establishing and maintaining effective internal control over federal awards that provides reasonable assurance that federal programs are being managed in compliance with all applicable laws, regulations, and award terms (2 CFR §200.303). Recommendations—The Department should: 1. Ensure documentation is retained for all personnel actions to demonstrate employees’ salaries and wages, including employee-related expenses, are authorized to be charged to the program. 2. Review all employee personnel files for employees currently paid under the program to ensure the required documentation has been retained. If the documentation has not been retained, program management should review the employees’ activities to ensure they are allowable under the program and prepare and retain the required documentation. Further, if employee activities are determined to be unallowable, coordinate with the U.S. Department of Defense to adjust future federal reimbursement requests or repay any unallowable costs the Department charged to the program. 3. Train its Administrative Services Office and Department employees who are responsible for administering federal programs on the documentation and record retention requirements for payroll costs charged to federal programs. The State’s corrective action plan at the end of this report includes the views and planned corrective action of its responsible officials. We are not required to and have not audited these responses and planned corrective actions and therefore provide no assurances as to their accuracy. 1 Federal Uniform Guidance requires federal awarding agencies to follow up on audit findings and issue a management decision to ensure the recipient, the Office, takes appropriate and timely corrective action (2 CFR §200.513[c]). Further, it requires that federal awarding agencies’ management decisions clearly state whether or not the audit finding is sustained, the reasons for the decision, and the expected auditee action to repay disallowed costs, make financial adjustments, or take other action, as directed by the federal awarding agencies (2 CFR §200.521). 2 Arizona Department of Emergency Military Affairs (DEMA), State Human Resources Administration. (2007, October). DEMA Directive 20.1, section 1.3. Retrieved 9/13/2023 from https://dema.az.gov/sites/default/files/2023-08/20.1_State_Human_Resources_Administration_20071001.pdf.

« 1 69 70 72 73 85 »