Finding 2022-076 Compliance with Federal Subrecipient Monitoring Requirements The Department receives federal grant funds directly from the federal government for the Highway Planning and Construction Program (Program) and then subgrants, or passes through, a portion of the funds to cities and counties and other organizations that are considered to be either a subrecipient or a contractor. A subrecipient is a non-federal entity that expends federal awards received from a pass-through entity to carry out a federal program, but does not include an individual that is a beneficiary receiving direct payments from such a program. A contractor is a dealer, distributor, merchant, or other seller providing goods or services that are required to conduct a federal program; these goods or services may be for an organization?s own use or for the use of beneficiaries of the federal program. The Department executes an Intergovemental Agreement (IGA) between the Department and the subrecipient. Under Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), the Department is responsible for evaluating each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward and for ultimately ensuring the subrecipient is determined eligible. In some instances, in coordination with the Federal Highway Association (FHWA), a Metropolitan Planning Organization (MPO)? rather than the primary recipient, such as the Department?is responsible for performing eligibility determinations. As such, in those instances, the Department does not perform risk-assessments on these contracts and only is responsible for on-going monitoring. What was the purpose of our audit work and what work was performed? The purpose of the audit work was to determine whether the Department had effective internal controls in place and complied with subrecipient monitoring activities for the Program during Fiscal Year 2022. As part of our audit work, we reviewed the Department?s internal controls over compliance for subrecipient monitoring requirements for the Program, including the Department?s policies and procedures. We tested a random sample of 25 of the Department?s 92 subrecipients (27 percent) for the Program?for which the Department had an IGA in place during Fiscal Year 2022?to determine whether subrecipient monitoring procedures performed by Department staff during the year were compliant with federal regulations. Our testing included evaluating whether the Department performed risk assessments and determined the appropriate level of subrecipient monitoring for the entities, as required by federal Uniform Guidance. How were the results of the audit work measured? Our audit work was designed to measure the Department?s compliance with the following criteria: ? Federal regulations [2 CFR 200.303] state that the Department, as a federal grant recipient, must ?establish and maintain effective internal controls over the Federal awards that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulation, and the terms and conditions of the Federal award.? ? Federal regulations [2 CFR 200.332(b)] also state that the Department must evaluate each subrecipient?s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward and may include various factors. ? Federal regulations [2 CFR 200.332(d) through (f)] and [2 CFR 200.521] further require the Department to monitor the activities of its subrecipients, as necessary, to ensure that each subaward is used for authorized purposes, the subrecipient complies with the terms and conditions of the subaward, and that the subrecipient achieves performance goals. The Department?s monitoring must include: o Reviewing financial and programmatic reports submitted by the subrecipient o Following-up on and ensuring the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award o Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity What problems did the audit work identify? We determined that the Department did not comply with subrecipient monitoring requirements for the Highway Planning and Construction Program during Fiscal Year 2022, as noted below: ? The Department did not perform a risk assessment for 6 of the 25 subrecipients (24 percent) we tested, including subrecipients where eligibility was determined by a MPO. ? The Department improperly included one vendor in our population of subrecipients. The nature of services provided by the vendor was personal services, therefore, did not require the execution of an IGA. ? The Department did not provide supporting documentation for reviews of any Fiscal Year 2022 financial and programmatic reports. As a result, we were unable to determine if any reviews were conducted during the fiscal year, as required. Why did these problems occur? While the Department has created a subrecipient monitoring and risk assessment manual, the manual lacks clarity in a variety of areas, including the following: ? For contracts which extend over multiple fiscal years, the policies do not specify the frequency in which subrecipient risk-assessment should be reviewed or updated. ? There are multiple types of subrecipient contracts for which the full risk-assessment process may not be applicable, however, the current policies do not address acceptable exceptions to the policy. ? The Department?s current policies do not include guidance related to the review of financial and programmatic reports, including the extent to which required programmatic and financial reports should be obtained and reviewed. ? The Department?s policies and procedures do not clearly indicate that the Department is not required to complete a risk assessment when an MPO determines eligibility and therefore the nature of monitoring procedures to be performed is not defined. ? Requested audit documentation was not provided timely. Further, the Department did not provide sufficiently-detailed training to staff to ensure they were aware of and conducted required subrecipient monitoring responsibilities. Why do these problems matter? Performing timely and appropriate monitoring of subrecipients provides the Department with a method to ensure its subrecipients are complying with applicable federal grant requirements. By taking appropriate actions based on the results of its subrecipient monitoring activities, the Department can mitigate the risk of providing continuing funding to entities that may not be using funds in accordance with program requirements. Overall, the Department?s failure to comply with federal requirements could result in a loss of funding from the federal government. See Schedule of Findings and Questioned Costs for chart/table Recommendation 2022-076 The Department of Transportation should strengthen internal controls over and ensure that it complies with federal subrecipient monitoring requirements for the Highway Planning and Construction program by: A. Updating its current subrecipient monitoring and risk assessment policy to clarify the frequency in which a risk assessment is required to be completed or updated, as applicable for contracts that span multiple fiscal years, as well as direction regarding when it is acceptable to forgo performing a risk assessment and updating the policy to address the nature in which subrecipient programmatic and financial reports are reviewed B. Providing training to staff responsible for subrecipient monitoring activities related to the policies updated in Part A of the finding. Response Department of Transportation A. Agree Implementation Date: November 2023 The Department will update the policy to clarify the frequency in which the risk assessment is required to be completed or updated as applicable for contracts that span multiple fiscal years, as well as identifying exceptions, outlining when it is acceptable to forgo risk assessments. The Department will also update the policy to address the nature in which the subrecipient programmatic and financial reports are reviewed. The updates will be completed by November 2023. B. Agree Implementation Date: November 2023 The Department will provide training on the subrecipient monitoring policy manual to outline roles, responsibilities and the frequency of risk assessments that span over multiple fiscal years. The training will also provide guidance on the programmatic and financial information review process.
Finding 2022-076 Compliance with Federal Subrecipient Monitoring Requirements The Department receives federal grant funds directly from the federal government for the Highway Planning and Construction Program (Program) and then subgrants, or passes through, a portion of the funds to cities and counties and other organizations that are considered to be either a subrecipient or a contractor. A subrecipient is a non-federal entity that expends federal awards received from a pass-through entity to carry out a federal program, but does not include an individual that is a beneficiary receiving direct payments from such a program. A contractor is a dealer, distributor, merchant, or other seller providing goods or services that are required to conduct a federal program; these goods or services may be for an organization?s own use or for the use of beneficiaries of the federal program. The Department executes an Intergovemental Agreement (IGA) between the Department and the subrecipient. Under Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance), the Department is responsible for evaluating each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward and for ultimately ensuring the subrecipient is determined eligible. In some instances, in coordination with the Federal Highway Association (FHWA), a Metropolitan Planning Organization (MPO)? rather than the primary recipient, such as the Department?is responsible for performing eligibility determinations. As such, in those instances, the Department does not perform risk-assessments on these contracts and only is responsible for on-going monitoring. What was the purpose of our audit work and what work was performed? The purpose of the audit work was to determine whether the Department had effective internal controls in place and complied with subrecipient monitoring activities for the Program during Fiscal Year 2022. As part of our audit work, we reviewed the Department?s internal controls over compliance for subrecipient monitoring requirements for the Program, including the Department?s policies and procedures. We tested a random sample of 25 of the Department?s 92 subrecipients (27 percent) for the Program?for which the Department had an IGA in place during Fiscal Year 2022?to determine whether subrecipient monitoring procedures performed by Department staff during the year were compliant with federal regulations. Our testing included evaluating whether the Department performed risk assessments and determined the appropriate level of subrecipient monitoring for the entities, as required by federal Uniform Guidance. How were the results of the audit work measured? Our audit work was designed to measure the Department?s compliance with the following criteria: ? Federal regulations [2 CFR 200.303] state that the Department, as a federal grant recipient, must ?establish and maintain effective internal controls over the Federal awards that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulation, and the terms and conditions of the Federal award.? ? Federal regulations [2 CFR 200.332(b)] also state that the Department must evaluate each subrecipient?s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward and may include various factors. ? Federal regulations [2 CFR 200.332(d) through (f)] and [2 CFR 200.521] further require the Department to monitor the activities of its subrecipients, as necessary, to ensure that each subaward is used for authorized purposes, the subrecipient complies with the terms and conditions of the subaward, and that the subrecipient achieves performance goals. The Department?s monitoring must include: o Reviewing financial and programmatic reports submitted by the subrecipient o Following-up on and ensuring the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award o Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity What problems did the audit work identify? We determined that the Department did not comply with subrecipient monitoring requirements for the Highway Planning and Construction Program during Fiscal Year 2022, as noted below: ? The Department did not perform a risk assessment for 6 of the 25 subrecipients (24 percent) we tested, including subrecipients where eligibility was determined by a MPO. ? The Department improperly included one vendor in our population of subrecipients. The nature of services provided by the vendor was personal services, therefore, did not require the execution of an IGA. ? The Department did not provide supporting documentation for reviews of any Fiscal Year 2022 financial and programmatic reports. As a result, we were unable to determine if any reviews were conducted during the fiscal year, as required. Why did these problems occur? While the Department has created a subrecipient monitoring and risk assessment manual, the manual lacks clarity in a variety of areas, including the following: ? For contracts which extend over multiple fiscal years, the policies do not specify the frequency in which subrecipient risk-assessment should be reviewed or updated. ? There are multiple types of subrecipient contracts for which the full risk-assessment process may not be applicable, however, the current policies do not address acceptable exceptions to the policy. ? The Department?s current policies do not include guidance related to the review of financial and programmatic reports, including the extent to which required programmatic and financial reports should be obtained and reviewed. ? The Department?s policies and procedures do not clearly indicate that the Department is not required to complete a risk assessment when an MPO determines eligibility and therefore the nature of monitoring procedures to be performed is not defined. ? Requested audit documentation was not provided timely. Further, the Department did not provide sufficiently-detailed training to staff to ensure they were aware of and conducted required subrecipient monitoring responsibilities. Why do these problems matter? Performing timely and appropriate monitoring of subrecipients provides the Department with a method to ensure its subrecipients are complying with applicable federal grant requirements. By taking appropriate actions based on the results of its subrecipient monitoring activities, the Department can mitigate the risk of providing continuing funding to entities that may not be using funds in accordance with program requirements. Overall, the Department?s failure to comply with federal requirements could result in a loss of funding from the federal government. See Schedule of Findings and Questioned Costs for chart/table Recommendation 2022-076 The Department of Transportation should strengthen internal controls over and ensure that it complies with federal subrecipient monitoring requirements for the Highway Planning and Construction program by: A. Updating its current subrecipient monitoring and risk assessment policy to clarify the frequency in which a risk assessment is required to be completed or updated, as applicable for contracts that span multiple fiscal years, as well as direction regarding when it is acceptable to forgo performing a risk assessment and updating the policy to address the nature in which subrecipient programmatic and financial reports are reviewed B. Providing training to staff responsible for subrecipient monitoring activities related to the policies updated in Part A of the finding. Response Department of Transportation A. Agree Implementation Date: November 2023 The Department will update the policy to clarify the frequency in which the risk assessment is required to be completed or updated as applicable for contracts that span multiple fiscal years, as well as identifying exceptions, outlining when it is acceptable to forgo risk assessments. The Department will also update the policy to address the nature in which the subrecipient programmatic and financial reports are reviewed. The updates will be completed by November 2023. B. Agree Implementation Date: November 2023 The Department will provide training on the subrecipient monitoring policy manual to outline roles, responsibilities and the frequency of risk assessments that span over multiple fiscal years. The training will also provide guidance on the programmatic and financial information review process.
The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department of Transportation (Department) in the previous year and has not been remediated as of June 30, 2022 because the original implementation date provided by the Department was in a subsequent fiscal year. This complete finding and recommendation can be found within the original report and the complete recommendation can be found within Section IV: Prior Audit Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table Finding 2021-068 The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department in the previous year and has not been remediated as of June 30, 2021, because the original implementation date provided by the Department is in a subsequent fiscal year. This complete finding and recommendation can be found in the original report and Section III: Prior Federal Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table. Finding 2020-075 FORMULA GRANTS FOR RURAL AREAS?INTERNAL CONTROLS AND COMPLIANCE WITH SUBRECIPIENT MONITORING The Department received funding from the Federal Transit Authority (FTA) for the Program during Fiscal Year 2020 and expended approximately $26.8 million under the Program; the expenditures included approximately $16.9 million from the Coronavirus Aid, Relief, and Economic Security Act (CARES Act). The objective of this Program is to initiate, improve, or continue public transportation services in rural areas. FTA provides financial and technical assistance to local public transit systems, including buses, subways, light rail, commuter rail, trolleys, and ferries. FTA also oversees safety measures and helps develop next-generation technology research. Approximately $26.0 million (97 percent) of the Program funds expended by the Department were passed through to subrecipients in order to carry out a portion of the Program. WHAT WAS THE PURPOSE OF OUR AUDIT WORK AND WHAT WORK WAS PERFORMED? The purpose of the audit work was to determine whether the Department had effective internal controls in place during Fiscal Year 2020 over the Program, and complied with the Program?s subrecipient monitoring activities. As part of our audit work, we reviewed the Department?s internal controls over compliance for the Program?s subrecipient monitoring. In addition, we tested a random sample of five of 45 Program subrecipients for Fiscal Year 2020 to determine whether the subrecipient monitoring procedures the Department performed during the year were compliant with federal requirements. HOW WERE THE RESULTS OF THE AUDIT WORK MEASURED? Our audit work was designed to measure the results of compliance with the following criteria: ? Federal regulations [2 CFR 200.332(b)] require that the Department evaluate each subrecipient?s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward and may include various factors. Federal regulations [2 CFR 200.332(d)-(f)] also require the Department to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Monitoring must include: ? Reviewing financial and programmatic reports. ? Following up and ensuring the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity, as required by 2 CFR 200.521. ? Federal regulation [2 CFR 200.303] states that the Department, as a federal grant recipient, must ?establish and maintain effective internal controls over the Federal awards that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulation, and the terms and conditions of the Federal award.? The Department?s internal control policies and procedures require the Internal Audit Division to obtain and review single audit certification forms, whereby subrecipients are required to certify whether they are subject to a Single Audit. Internal Audit Division staff are required to review each certification and related Single Audit report, as applicable, and perform follow-up activities related to deficiencies and audit findings. ? Additionally, the Department is required to report the total amount of federal awards expended to the Office of the State Controller (OSC) via the Exhibit K1, Schedule of Federal Assistance. The Exhibit K1 is the document through which state departments report federal expenditure information to the OSC, including separate columns to indicate types of expenditures, for statewide compilation and reporting. WHAT PROBLEMS DID THE AUDIT WORK IDENTIFY? We identified issues related to two of the five (40 percent) Program subrecipients identified by the Department for Fiscal Year 2020 as follows: ? The Department did not take sufficient steps to address one subrecipient?s failure to obtain a 2019 Single Audit. Specifically, the subrecipient received approximately $78,500 in pass-through Program funding from the Department and communicated to the Department in its single audit certification for the year ending December 31, 2019, that it was subject to a Single Audit; however, that audit had not been conducted as of the completion of our Fiscal Year 2020 audit testwork in April 2021. While it appeared that the Department communicated various times with the subrecipient about the missing audit, the Department did not assess possible impacts from the missing audit or take any action to institute alternate monitoring procedures of the subrecipient. ? For the second subrecipient tested, the Department inappropriately considered the entity to be a subrecipient rather than a vendor and incorrectly reported $20,936 in funds paid to the entity as subrecipient expenditures on its Exhibit K1 submitted to the OSC. WHY DID THESE PROBLEMS OCCUR? The Department?s subrecipient policies and procedures are voluminous and performed throughout multiple divisions within the Department. Therefore, the results of monitoring procedures performed are documented in various areas and not contained in one central location. The Department also does not have policies and procedures in place to identify appropriate actions to be taken when issues are identified. In addition, the Department lacks a process for analyzing the types of entities it is contracting with for the Program in order to separately identify the entities as vendors or subrecipients; rather, staff indicated that, during the contracting process, all contract expenditures related to this Program are recorded as subrecipient expenditures, including service-related or vendor contracts. WHY DO THESE PROBLEMS MATTER? Performing timely and appropriate identification and monitoring of subrecipients, including ensuring that they undergo required Single Audits, provides the Department with a method to identify federal grant-related issues and to ensure its compliance with federal subrecipient monitoring requirements. By taking appropriate actions to address the results of its monitoring, the Department can mitigate the risk of providing continuing funding to entities that may not be using funds in accordance with Program requirements. This is particularly important because the Department passes 97 percent of these Program funds to subrecipients. The Department?s failure to comply with federal requirements could result in a loss of funding from the federal government. See Schedule of Findings and Questioned Costs for chart/table RECOMMENDATION 2020-075 The Department of Transportation (Department) should ensure that it improves its internal controls over, and complies with, federal Formula Grants for Rural Areas and Tribal Transit Program requirements for subrecipient monitoring by: A Ensuring that subrecipient monitoring policies and procedures are centralized, condensed, and available to all personnel who are responsible for performing subrecipient monitoring activities. The policies and procedures should clearly list responsibilities for each division within the Department and be inclusive of all monitoring activities performed and contain clear directives for acting on subrecipients? failure to comply with requirements, including providing its single audit report, by assessing possible impacts from the noncompliance and instituting appropriate alternative procedures. B Implementing a process for analyzing its contracted entities during the contracting and awarding process by reviewing the nature and terms of contracts, separately identifying the contracted entities as vendors or subrecipients, and recording the contract expenditures appropriately based on this assessment. RESPONSE DEPARTMENT OF TRANSPORTATION A AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include identifying a centralized location for all policies and procedures related to subrecipient monitoring. We will look at all policies and procedures to ensure they clearly identify responsibilities and requirements for non-compliance. B AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include establishing a process by which an analysis of contracted entities will be performed to identify and properly record entities as a vendor or subrecipient.
The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department of Transportation (Department) in the previous year and has not been remediated as of June 30, 2022 because the original implementation date provided by the Department was in a subsequent fiscal year. This complete finding and recommendation can be found within the original report and the complete recommendation can be found within Section IV: Prior Audit Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table Finding 2021-068 The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department in the previous year and has not been remediated as of June 30, 2021, because the original implementation date provided by the Department is in a subsequent fiscal year. This complete finding and recommendation can be found in the original report and Section III: Prior Federal Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table. Finding 2020-075 FORMULA GRANTS FOR RURAL AREAS?INTERNAL CONTROLS AND COMPLIANCE WITH SUBRECIPIENT MONITORING The Department received funding from the Federal Transit Authority (FTA) for the Program during Fiscal Year 2020 and expended approximately $26.8 million under the Program; the expenditures included approximately $16.9 million from the Coronavirus Aid, Relief, and Economic Security Act (CARES Act). The objective of this Program is to initiate, improve, or continue public transportation services in rural areas. FTA provides financial and technical assistance to local public transit systems, including buses, subways, light rail, commuter rail, trolleys, and ferries. FTA also oversees safety measures and helps develop next-generation technology research. Approximately $26.0 million (97 percent) of the Program funds expended by the Department were passed through to subrecipients in order to carry out a portion of the Program. WHAT WAS THE PURPOSE OF OUR AUDIT WORK AND WHAT WORK WAS PERFORMED? The purpose of the audit work was to determine whether the Department had effective internal controls in place during Fiscal Year 2020 over the Program, and complied with the Program?s subrecipient monitoring activities. As part of our audit work, we reviewed the Department?s internal controls over compliance for the Program?s subrecipient monitoring. In addition, we tested a random sample of five of 45 Program subrecipients for Fiscal Year 2020 to determine whether the subrecipient monitoring procedures the Department performed during the year were compliant with federal requirements. HOW WERE THE RESULTS OF THE AUDIT WORK MEASURED? Our audit work was designed to measure the results of compliance with the following criteria: ? Federal regulations [2 CFR 200.332(b)] require that the Department evaluate each subrecipient?s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward and may include various factors. Federal regulations [2 CFR 200.332(d)-(f)] also require the Department to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Monitoring must include: ? Reviewing financial and programmatic reports. ? Following up and ensuring the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity, as required by 2 CFR 200.521. ? Federal regulation [2 CFR 200.303] states that the Department, as a federal grant recipient, must ?establish and maintain effective internal controls over the Federal awards that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulation, and the terms and conditions of the Federal award.? The Department?s internal control policies and procedures require the Internal Audit Division to obtain and review single audit certification forms, whereby subrecipients are required to certify whether they are subject to a Single Audit. Internal Audit Division staff are required to review each certification and related Single Audit report, as applicable, and perform follow-up activities related to deficiencies and audit findings. ? Additionally, the Department is required to report the total amount of federal awards expended to the Office of the State Controller (OSC) via the Exhibit K1, Schedule of Federal Assistance. The Exhibit K1 is the document through which state departments report federal expenditure information to the OSC, including separate columns to indicate types of expenditures, for statewide compilation and reporting. WHAT PROBLEMS DID THE AUDIT WORK IDENTIFY? We identified issues related to two of the five (40 percent) Program subrecipients identified by the Department for Fiscal Year 2020 as follows: ? The Department did not take sufficient steps to address one subrecipient?s failure to obtain a 2019 Single Audit. Specifically, the subrecipient received approximately $78,500 in pass-through Program funding from the Department and communicated to the Department in its single audit certification for the year ending December 31, 2019, that it was subject to a Single Audit; however, that audit had not been conducted as of the completion of our Fiscal Year 2020 audit testwork in April 2021. While it appeared that the Department communicated various times with the subrecipient about the missing audit, the Department did not assess possible impacts from the missing audit or take any action to institute alternate monitoring procedures of the subrecipient. ? For the second subrecipient tested, the Department inappropriately considered the entity to be a subrecipient rather than a vendor and incorrectly reported $20,936 in funds paid to the entity as subrecipient expenditures on its Exhibit K1 submitted to the OSC. WHY DID THESE PROBLEMS OCCUR? The Department?s subrecipient policies and procedures are voluminous and performed throughout multiple divisions within the Department. Therefore, the results of monitoring procedures performed are documented in various areas and not contained in one central location. The Department also does not have policies and procedures in place to identify appropriate actions to be taken when issues are identified. In addition, the Department lacks a process for analyzing the types of entities it is contracting with for the Program in order to separately identify the entities as vendors or subrecipients; rather, staff indicated that, during the contracting process, all contract expenditures related to this Program are recorded as subrecipient expenditures, including service-related or vendor contracts. WHY DO THESE PROBLEMS MATTER? Performing timely and appropriate identification and monitoring of subrecipients, including ensuring that they undergo required Single Audits, provides the Department with a method to identify federal grant-related issues and to ensure its compliance with federal subrecipient monitoring requirements. By taking appropriate actions to address the results of its monitoring, the Department can mitigate the risk of providing continuing funding to entities that may not be using funds in accordance with Program requirements. This is particularly important because the Department passes 97 percent of these Program funds to subrecipients. The Department?s failure to comply with federal requirements could result in a loss of funding from the federal government. See Schedule of Findings and Questioned Costs for chart/table RECOMMENDATION 2020-075 The Department of Transportation (Department) should ensure that it improves its internal controls over, and complies with, federal Formula Grants for Rural Areas and Tribal Transit Program requirements for subrecipient monitoring by: A Ensuring that subrecipient monitoring policies and procedures are centralized, condensed, and available to all personnel who are responsible for performing subrecipient monitoring activities. The policies and procedures should clearly list responsibilities for each division within the Department and be inclusive of all monitoring activities performed and contain clear directives for acting on subrecipients? failure to comply with requirements, including providing its single audit report, by assessing possible impacts from the noncompliance and instituting appropriate alternative procedures. B Implementing a process for analyzing its contracted entities during the contracting and awarding process by reviewing the nature and terms of contracts, separately identifying the contracted entities as vendors or subrecipients, and recording the contract expenditures appropriately based on this assessment. RESPONSE DEPARTMENT OF TRANSPORTATION A AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include identifying a centralized location for all policies and procedures related to subrecipient monitoring. We will look at all policies and procedures to ensure they clearly identify responsibilities and requirements for non-compliance. B AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include establishing a process by which an analysis of contracted entities will be performed to identify and properly record entities as a vendor or subrecipient.
The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department of Transportation (Department) in the previous year and has not been remediated as of June 30, 2022 because the original implementation date provided by the Department was in a subsequent fiscal year. This complete finding and recommendation can be found within the original report and the complete recommendation can be found within Section IV: Prior Audit Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table Finding 2021-068 The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department in the previous year and has not been remediated as of June 30, 2021, because the original implementation date provided by the Department is in a subsequent fiscal year. This complete finding and recommendation can be found in the original report and Section III: Prior Federal Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table. Finding 2020-075 FORMULA GRANTS FOR RURAL AREAS?INTERNAL CONTROLS AND COMPLIANCE WITH SUBRECIPIENT MONITORING The Department received funding from the Federal Transit Authority (FTA) for the Program during Fiscal Year 2020 and expended approximately $26.8 million under the Program; the expenditures included approximately $16.9 million from the Coronavirus Aid, Relief, and Economic Security Act (CARES Act). The objective of this Program is to initiate, improve, or continue public transportation services in rural areas. FTA provides financial and technical assistance to local public transit systems, including buses, subways, light rail, commuter rail, trolleys, and ferries. FTA also oversees safety measures and helps develop next-generation technology research. Approximately $26.0 million (97 percent) of the Program funds expended by the Department were passed through to subrecipients in order to carry out a portion of the Program. WHAT WAS THE PURPOSE OF OUR AUDIT WORK AND WHAT WORK WAS PERFORMED? The purpose of the audit work was to determine whether the Department had effective internal controls in place during Fiscal Year 2020 over the Program, and complied with the Program?s subrecipient monitoring activities. As part of our audit work, we reviewed the Department?s internal controls over compliance for the Program?s subrecipient monitoring. In addition, we tested a random sample of five of 45 Program subrecipients for Fiscal Year 2020 to determine whether the subrecipient monitoring procedures the Department performed during the year were compliant with federal requirements. HOW WERE THE RESULTS OF THE AUDIT WORK MEASURED? Our audit work was designed to measure the results of compliance with the following criteria: ? Federal regulations [2 CFR 200.332(b)] require that the Department evaluate each subrecipient?s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward and may include various factors. Federal regulations [2 CFR 200.332(d)-(f)] also require the Department to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Monitoring must include: ? Reviewing financial and programmatic reports. ? Following up and ensuring the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity, as required by 2 CFR 200.521. ? Federal regulation [2 CFR 200.303] states that the Department, as a federal grant recipient, must ?establish and maintain effective internal controls over the Federal awards that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulation, and the terms and conditions of the Federal award.? The Department?s internal control policies and procedures require the Internal Audit Division to obtain and review single audit certification forms, whereby subrecipients are required to certify whether they are subject to a Single Audit. Internal Audit Division staff are required to review each certification and related Single Audit report, as applicable, and perform follow-up activities related to deficiencies and audit findings. ? Additionally, the Department is required to report the total amount of federal awards expended to the Office of the State Controller (OSC) via the Exhibit K1, Schedule of Federal Assistance. The Exhibit K1 is the document through which state departments report federal expenditure information to the OSC, including separate columns to indicate types of expenditures, for statewide compilation and reporting. WHAT PROBLEMS DID THE AUDIT WORK IDENTIFY? We identified issues related to two of the five (40 percent) Program subrecipients identified by the Department for Fiscal Year 2020 as follows: ? The Department did not take sufficient steps to address one subrecipient?s failure to obtain a 2019 Single Audit. Specifically, the subrecipient received approximately $78,500 in pass-through Program funding from the Department and communicated to the Department in its single audit certification for the year ending December 31, 2019, that it was subject to a Single Audit; however, that audit had not been conducted as of the completion of our Fiscal Year 2020 audit testwork in April 2021. While it appeared that the Department communicated various times with the subrecipient about the missing audit, the Department did not assess possible impacts from the missing audit or take any action to institute alternate monitoring procedures of the subrecipient. ? For the second subrecipient tested, the Department inappropriately considered the entity to be a subrecipient rather than a vendor and incorrectly reported $20,936 in funds paid to the entity as subrecipient expenditures on its Exhibit K1 submitted to the OSC. WHY DID THESE PROBLEMS OCCUR? The Department?s subrecipient policies and procedures are voluminous and performed throughout multiple divisions within the Department. Therefore, the results of monitoring procedures performed are documented in various areas and not contained in one central location. The Department also does not have policies and procedures in place to identify appropriate actions to be taken when issues are identified. In addition, the Department lacks a process for analyzing the types of entities it is contracting with for the Program in order to separately identify the entities as vendors or subrecipients; rather, staff indicated that, during the contracting process, all contract expenditures related to this Program are recorded as subrecipient expenditures, including service-related or vendor contracts. WHY DO THESE PROBLEMS MATTER? Performing timely and appropriate identification and monitoring of subrecipients, including ensuring that they undergo required Single Audits, provides the Department with a method to identify federal grant-related issues and to ensure its compliance with federal subrecipient monitoring requirements. By taking appropriate actions to address the results of its monitoring, the Department can mitigate the risk of providing continuing funding to entities that may not be using funds in accordance with Program requirements. This is particularly important because the Department passes 97 percent of these Program funds to subrecipients. The Department?s failure to comply with federal requirements could result in a loss of funding from the federal government. See Schedule of Findings and Questioned Costs for chart/table RECOMMENDATION 2020-075 The Department of Transportation (Department) should ensure that it improves its internal controls over, and complies with, federal Formula Grants for Rural Areas and Tribal Transit Program requirements for subrecipient monitoring by: A Ensuring that subrecipient monitoring policies and procedures are centralized, condensed, and available to all personnel who are responsible for performing subrecipient monitoring activities. The policies and procedures should clearly list responsibilities for each division within the Department and be inclusive of all monitoring activities performed and contain clear directives for acting on subrecipients? failure to comply with requirements, including providing its single audit report, by assessing possible impacts from the noncompliance and instituting appropriate alternative procedures. B Implementing a process for analyzing its contracted entities during the contracting and awarding process by reviewing the nature and terms of contracts, separately identifying the contracted entities as vendors or subrecipients, and recording the contract expenditures appropriately based on this assessment. RESPONSE DEPARTMENT OF TRANSPORTATION A AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include identifying a centralized location for all policies and procedures related to subrecipient monitoring. We will look at all policies and procedures to ensure they clearly identify responsibilities and requirements for non-compliance. B AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include establishing a process by which an analysis of contracted entities will be performed to identify and properly record entities as a vendor or subrecipient.
The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department of Transportation (Department) in the previous year and has not been remediated as of June 30, 2022 because the original implementation date provided by the Department was in a subsequent fiscal year. This complete finding and recommendation can be found within the original report and the complete recommendation can be found within Section IV: Prior Audit Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table Finding 2021-068 The following finding and recommendation relating to an internal control deficiency classified as a Significant Deficiency was communicated to the Department in the previous year and has not been remediated as of June 30, 2021, because the original implementation date provided by the Department is in a subsequent fiscal year. This complete finding and recommendation can be found in the original report and Section III: Prior Federal Recommendations of this report. See Schedule of Findings and Questioned Costs for chart/table. Finding 2020-075 FORMULA GRANTS FOR RURAL AREAS?INTERNAL CONTROLS AND COMPLIANCE WITH SUBRECIPIENT MONITORING The Department received funding from the Federal Transit Authority (FTA) for the Program during Fiscal Year 2020 and expended approximately $26.8 million under the Program; the expenditures included approximately $16.9 million from the Coronavirus Aid, Relief, and Economic Security Act (CARES Act). The objective of this Program is to initiate, improve, or continue public transportation services in rural areas. FTA provides financial and technical assistance to local public transit systems, including buses, subways, light rail, commuter rail, trolleys, and ferries. FTA also oversees safety measures and helps develop next-generation technology research. Approximately $26.0 million (97 percent) of the Program funds expended by the Department were passed through to subrecipients in order to carry out a portion of the Program. WHAT WAS THE PURPOSE OF OUR AUDIT WORK AND WHAT WORK WAS PERFORMED? The purpose of the audit work was to determine whether the Department had effective internal controls in place during Fiscal Year 2020 over the Program, and complied with the Program?s subrecipient monitoring activities. As part of our audit work, we reviewed the Department?s internal controls over compliance for the Program?s subrecipient monitoring. In addition, we tested a random sample of five of 45 Program subrecipients for Fiscal Year 2020 to determine whether the subrecipient monitoring procedures the Department performed during the year were compliant with federal requirements. HOW WERE THE RESULTS OF THE AUDIT WORK MEASURED? Our audit work was designed to measure the results of compliance with the following criteria: ? Federal regulations [2 CFR 200.332(b)] require that the Department evaluate each subrecipient?s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward and may include various factors. Federal regulations [2 CFR 200.332(d)-(f)] also require the Department to monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals. Monitoring must include: ? Reviewing financial and programmatic reports. ? Following up and ensuring the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award. ? Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity, as required by 2 CFR 200.521. ? Federal regulation [2 CFR 200.303] states that the Department, as a federal grant recipient, must ?establish and maintain effective internal controls over the Federal awards that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulation, and the terms and conditions of the Federal award.? The Department?s internal control policies and procedures require the Internal Audit Division to obtain and review single audit certification forms, whereby subrecipients are required to certify whether they are subject to a Single Audit. Internal Audit Division staff are required to review each certification and related Single Audit report, as applicable, and perform follow-up activities related to deficiencies and audit findings. ? Additionally, the Department is required to report the total amount of federal awards expended to the Office of the State Controller (OSC) via the Exhibit K1, Schedule of Federal Assistance. The Exhibit K1 is the document through which state departments report federal expenditure information to the OSC, including separate columns to indicate types of expenditures, for statewide compilation and reporting. WHAT PROBLEMS DID THE AUDIT WORK IDENTIFY? We identified issues related to two of the five (40 percent) Program subrecipients identified by the Department for Fiscal Year 2020 as follows: ? The Department did not take sufficient steps to address one subrecipient?s failure to obtain a 2019 Single Audit. Specifically, the subrecipient received approximately $78,500 in pass-through Program funding from the Department and communicated to the Department in its single audit certification for the year ending December 31, 2019, that it was subject to a Single Audit; however, that audit had not been conducted as of the completion of our Fiscal Year 2020 audit testwork in April 2021. While it appeared that the Department communicated various times with the subrecipient about the missing audit, the Department did not assess possible impacts from the missing audit or take any action to institute alternate monitoring procedures of the subrecipient. ? For the second subrecipient tested, the Department inappropriately considered the entity to be a subrecipient rather than a vendor and incorrectly reported $20,936 in funds paid to the entity as subrecipient expenditures on its Exhibit K1 submitted to the OSC. WHY DID THESE PROBLEMS OCCUR? The Department?s subrecipient policies and procedures are voluminous and performed throughout multiple divisions within the Department. Therefore, the results of monitoring procedures performed are documented in various areas and not contained in one central location. The Department also does not have policies and procedures in place to identify appropriate actions to be taken when issues are identified. In addition, the Department lacks a process for analyzing the types of entities it is contracting with for the Program in order to separately identify the entities as vendors or subrecipients; rather, staff indicated that, during the contracting process, all contract expenditures related to this Program are recorded as subrecipient expenditures, including service-related or vendor contracts. WHY DO THESE PROBLEMS MATTER? Performing timely and appropriate identification and monitoring of subrecipients, including ensuring that they undergo required Single Audits, provides the Department with a method to identify federal grant-related issues and to ensure its compliance with federal subrecipient monitoring requirements. By taking appropriate actions to address the results of its monitoring, the Department can mitigate the risk of providing continuing funding to entities that may not be using funds in accordance with Program requirements. This is particularly important because the Department passes 97 percent of these Program funds to subrecipients. The Department?s failure to comply with federal requirements could result in a loss of funding from the federal government. See Schedule of Findings and Questioned Costs for chart/table RECOMMENDATION 2020-075 The Department of Transportation (Department) should ensure that it improves its internal controls over, and complies with, federal Formula Grants for Rural Areas and Tribal Transit Program requirements for subrecipient monitoring by: A Ensuring that subrecipient monitoring policies and procedures are centralized, condensed, and available to all personnel who are responsible for performing subrecipient monitoring activities. The policies and procedures should clearly list responsibilities for each division within the Department and be inclusive of all monitoring activities performed and contain clear directives for acting on subrecipients? failure to comply with requirements, including providing its single audit report, by assessing possible impacts from the noncompliance and instituting appropriate alternative procedures. B Implementing a process for analyzing its contracted entities during the contracting and awarding process by reviewing the nature and terms of contracts, separately identifying the contracted entities as vendors or subrecipients, and recording the contract expenditures appropriately based on this assessment. RESPONSE DEPARTMENT OF TRANSPORTATION A AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include identifying a centralized location for all policies and procedures related to subrecipient monitoring. We will look at all policies and procedures to ensure they clearly identify responsibilities and requirements for non-compliance. B AGREE. IMPLEMENTATION DATE: JULY 2022. CDOT will work with various divisions to devise a plan that will comply with this finding and the recommendations noted within. This plan shall include establishing a process by which an analysis of contracted entities will be performed to identify and properly record entities as a vendor or subrecipient.
Material Weakness in Internal Control over Subrecipient Monitoring and Material Noncompliance Research and Development Cluster Criteria: In accordance with 2 CFR 200.331, a pass-through entity must make a case-by-case determination whether each agreement it makes for the disbursement of federal program funds casts the party receiving the funds in the role of a subrecipient or a contractor. Additionally, in accordance with 2 CFR 200.332(b), the pass-through entity must evaluate each subrecipient’s risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for the purpose of determining the appropriate subrecipient monitoring. In furtherance of this, the pass-through entity should inquire as to whether or not the subrecipient was subject to a Single Audit. If the subrecipient was subject to a Single Audit, the pass-through entity must request the Single Audit report and review for any findings or questioned costs. In accordance with 2 CFR 200.521, the pass-through entity should issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity as applicable. Condition: The Organization does not document its evaluation of each party that it engages in business with as to whether they are a contractor or a subrecipient. For three (3) of the three (3) such parties selected for testing, the Organization did not maintain documentation regarding whether the entity was a subrecipient or a contractor. Furthermore, as it relates to the monitoring of entities determined to be subrecipients, the Organization has not formally documented its subrecipient monitoring procedures to ensure that subrecipients are in compliance with federal statutes, regulations, and the terms and conditions of the subawards. For three (3) of the three (3) subrecipients selected for testing, the Organization did not inquire as to whether the entity was subject to a Single Audit. Consequently, the Organization did not request the Single Audit report nor did they review them for any findings pertinent to the federal award provided to the subrecipient from the pass-through entity. Cause: The Organization did not have an effective process in place to determine whether entities receiving pass-through funds are subrecipients or contractors. However, it was noted that the Organization implemented a process during the year to properly document whether a company is a contractor or a subrecipient. Furthermore, once that determination has been made, the Organization did not have a process in place for evaluating subrecipients and their compliance with the applicable requirements of the Uniform Guidance. Effect or potential effect: Lack of proper consideration of subrecipient or contractor status may result in the Organization improperly classifying a recipient of federal funds, which may impact the recipient’s compliance with the Uniform Guidance. Furthermore, by not performing adequate monitoring over subrecipients, the Organization is not appropriately monitoring whether subrecipients are in compliance with grant requirements. Questioned costs: None. Context: Our sample was not intended to be statistically valid. Recommendation: The Organization should have instituted a process whereby all entities that receive federal funds have proper documentation supporting their classification as a subrecipient or a contractor for the entire year. Additionally, the Organization should maintain a standardized checklist for all such entities that support their rationale for the classification. This checklist should be prepared by an employee with knowledge of the grant and approved by a second individual. Furthermore, as it relates to subrecipient monitoring, the Organization should institute an annual process whereby all subrecipients are asked whether they received a Single Audit. If the subrecipient was subject to a Single Audit, the Organization should receive and review the Single Audit report. The reviewer should submit a memorandum of any findings relevant to their federal grant, which should then be submitted to the project manager or other designated person for approval. Views of responsible officials and planned corrective actions: Management's response is reported in "Management's Views and Corrective Action Plan" included at the end of this report. Identification of prior year finding: 2021-006
Reference Number: 2022-011 Category of Finding: Subrecipient Monitoring Type of Finding: Material Weakness and Material Instance of Noncompliance State Administering Department: California Department of Public Health (Public Health) Assistance Listing Number: 93.323 Federal Program Title: Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) Federal Award Number and Year: NU50CK000539; 2021 Criteria Title 2 - Grants and Agreements. Subtitle A - Office of Management and Budget Guidance for Grants and Agreements. Chapter II - Office of Management and Budget Guidance. Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D - Post Federal Award Requirements. §200.303 Internal controls (2 CFR 200.303): The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Title 2 - Grants and Agreements. Subtitle A - Office of Management and Budget Guidance for Grants and Agreements. Chapter II - Office of Management and Budget Guidance. Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D - Post Federal Award Requirements. §200.332 Requirements for pass-through entities (2 CFR 200.332): All pass-through entities must: (b) Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient’s prior experience with the same or similar subawards: (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving cross-cutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section §200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in §200.501. (g) Consider whether the results of the subrecipient’s audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity’s own records. Condition Public Health did not establish a formal risk assessment process over its subrecipients of federal awards to determine the frequency and extent of subrecipient monitoring to be performed. While Public Health received reimbursement invoices from subrecipients, there did not appear to be other financial or programmatic monitoring to verify subrecipents compliance with applicable requirements. In addition, Public Health did not obtain Single Audit reports from those subrecipients as required. Identification as a Repeat Finding Finding 2021-014 was reported in the immediate prior year. Cause Procedures to perform the required subrecipient monitoring were not established nor performed by Public Health. Effect By not properly evaluating the risk of noncompliance, Public Health may inadvertently award grant funds to subrecipients who lack the necessary mechanisms or understanding to adhere to federal statutes. This increases the likelihood of noncompliance arising during the performance of the grant-funded activities. Furthermore, failure to perform monitoring procedures or obtain Single Audit reports increases the risk for not properly identifying subrecipient program control weaknesses, noncompliance, and performing sufficient follow-up on any subrecipient corrective action. Questioned Costs No questioned costs were identified. Context Disbursements to subrecipients for the ELC program totaled $301,107,041, or 31.0% of total reported program expenditures. Recommendation Public Health should establish and document formal procedures for conducting risk assessments of its subrecipients, including criteria for evaluating organizational capacity, financial stability, compliance history, and programmatic capabilities. Public Health should also develop and implement specific subrecipient monitoring procedures and establish a process for obtaining Single Audit reports from its subrecipients. Furthermore, a monitoring mechanism should be implemented to track compliance with the single audit mandate among subrecipients, including regular follow-ups and documentation of communication efforts. Views of Responsible Officials and Corrective Action Plan Management’s response is reported in “Management’s Response and Corrective Action Plan” included in a separate section at the end of this report.
Federal Awarding Agency: USTreasuryImpact: Significant Deficiency, NoncomplianceAL Number and Title: 21.019 Coronavirus Relief Fund (CRF) ? COVID-19Federal Award Number: SLT0031, SLT0073Applicable Compliance Requirement: Subrecipient MonitoringCondition:DCCED staff did not issue timely management decisions for three of the four CRF single audit findings requiring follow-up during FY 22.Context:Federal regulations require pass-through entities to issue a management decision for audit findings relating to federal awards provided to subrecipients. The management decision must clearly state whether or not the audit finding is sustained, the reasons for the decision, and the adequacy of the subrecipient?s proposed corrective actions to address the findings.Of the three untimely management decisions, two were issued past the six month requirement and one has not been issued as of the end of FY 22. For the two management decisions issued past the six month requirement, one was two months and the other was 11 months past the requirement as of the end of FY 22.Cause:Due to staff oversight, DCCED?s single audit procedures did not require management decisions to be issued within the six month requirement. Further, the procedures did not require a supervisory review.Criteria:Title 2 CFR 200.332(d)(3) states that pass-through entities? monitoring of subrecipients must include issuing a management decision for audit findings that relate to federal awards provided to subrecipients.Title 2 CFR 200.521(d) states a management decision must be issued within six months of acceptance of the audit report by the federal audit clearinghouse.Effect:The lack of timely management decisions may result in subrecipients not taking appropriate corrective action. Noncompliance with federal regulations may result in the federal awarding agency imposing additional conditions or taking corrective action, including additional reporting requirements.Questioned Costs:NoneRecommendation:DCCED?s DAS director should revise single audit procedures to ensure management decisions are issued within six months. Further, procedures should include adequate supervisory review.Views of Responsible Officials:Management agrees with the finding.
FINDING 2022-206The Department did not complete required subrecipient monitoring of the Elementary and Secondary School Emergency Relief (ESSER) Fund of the Education Stabilization Fund.Type of Finding: Material Noncompliance, Material WeaknessAssistance Listing Title: Elementary and Secondary School Emergency Relief Fund; Emergency Assistance for Non-Public Schools; ARPA ESSER III; ARPA ESSER - Homeless Children and YouthAssistance Listing Number: 84.425D; 84.425R; 84.425U; 84.425WFederal Award Number: S425D210043; S425D200043; S425R210024; S425U210043; S425W210013Program Year: January 5, 2021 ? September 30, 2023; May 18, 2020 ? September 30, 2022; February 11, 2021 ? September 30, 2023; March 24, 2021 ? September 30, 2024; April 23, 2021 ? September 30, 2024Federal Agency: Department of EducationCompliance Requirement: Subrecipient MonitoringQuestioned Costs: NoneCriteria: The U.S. Code of Federal Regulations (CFR) 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, superseding the Office of Management and Budget (OMB) Circular A-102, Grants and Cooperative Agreements with State and Local Governments, describes the pass-through entity?s responsibility for administering necessary requirements on subrecipients so that the federal award is used in accordance with federal regulations.Specifically, 2 CFR 200.332(d) and 2 CFR 25.200 identify the requirements for the Department as the pass- through entity in providing subawards. This includes communication of certain information, such as the subrecipient?s unique entity identifier and required registration in the System for Award Management (SAM). In addition, the Department must evaluate each subrecipient?s risk of noncompliance with federal statutes and the terms and conditions of the subaward when determining the extent of subrecipient monitoring to be completed to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that the subaward performance goals are achieved. In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, monitoring must include a review of financial and performance reports required by the pass-through entity, follow up on any deficiencies identified in the subrecipient that are detected through audits, on-site reviews and other means, and issuing a management decision for audit findings, as required by 2 CFR 200.521.Finally, 2 CFR 200.303 requires the Department to establish and maintain effective internal control over the federal award that provides reasonable assurance that the Department is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award.Condition: The Department initially received ESSER funding in fiscal year 2021 and integrated ESSER monitoring with the general subrecipient monitoring used for other federal programs. The Department?s 2020- 2021 Monitoring Tool included only one indicator related to the ESSER program and did not adequately address all subrecipient monitoring requirements. However, in fiscal year 2021, the Department determined that the existing monitoring procedures were not robust enough for the additional requirements associated with ESSER subrecipient monitoring and discontinued those procedures without implementing any alternative procedures during fiscal year 2022.This was a finding included in the Single Audit Report for the year ended June 30, 2021, and the Department provided a corrective action plan to monitor subrecipients. However, the Department did not implement the plan until after the audit period, in fiscal year 2023.Cause: The Department realized the current procedures were not sufficient to meet the monitoring requirements of ESSER and indicated a monitoring process specific to the ESSER program compliance requirements was being developed; however, it was not developed in a timely manner to comply with federal requirements.Effect: The Department is not in compliance with subrecipient monitoring requirements. Without adequate monitoring of subrecipients, the Department is exposed to an increased risk of making improper payments for unallowable or unsupported costs.Recommendation: We recommend that the Department implement procedures to ensure compliance with all requirements as a pass-through entity. We also recommend that the Department design and implement effective control procedures to ensure subrecipient monitoring activities are complete and appropriate.Management?s View: The Department agrees with this finding.Corrective Action: It was not until the end of the 2022 legislative session that spending authority was given to the State Department of Education to use ARP ESSER administrative funds to hire additional staff to meet the robust requirements identified by the U.S. Department of Education. Up to that point, only one full-time person was handling all of the needs associated with ESSER funds. Since then, two positions have been hired. The ESSER Data and Reporting Coordinator began in April 2022, and the ESSER Monitoring Coordinator began in June 2022. While developing the monitoring procedures began in July 2022, it was after the audit timeframe. The Department now has in place all ESSER monitoring policies and procedures and will complete year one monitoring before May 5, 2023.Auditor?s Concluding Remarks: We thank the Department for its cooperation and assistance throughout the audit.
FINDING 2022-206The Department did not complete required subrecipient monitoring of the Elementary and Secondary School Emergency Relief (ESSER) Fund of the Education Stabilization Fund.Type of Finding: Material Noncompliance, Material WeaknessAssistance Listing Title: Elementary and Secondary School Emergency Relief Fund; Emergency Assistance for Non-Public Schools; ARPA ESSER III; ARPA ESSER - Homeless Children and YouthAssistance Listing Number: 84.425D; 84.425R; 84.425U; 84.425WFederal Award Number: S425D210043; S425D200043; S425R210024; S425U210043; S425W210013Program Year: January 5, 2021 ? September 30, 2023; May 18, 2020 ? September 30, 2022; February 11, 2021 ? September 30, 2023; March 24, 2021 ? September 30, 2024; April 23, 2021 ? September 30, 2024Federal Agency: Department of EducationCompliance Requirement: Subrecipient MonitoringQuestioned Costs: NoneCriteria: The U.S. Code of Federal Regulations (CFR) 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, superseding the Office of Management and Budget (OMB) Circular A-102, Grants and Cooperative Agreements with State and Local Governments, describes the pass-through entity?s responsibility for administering necessary requirements on subrecipients so that the federal award is used in accordance with federal regulations.Specifically, 2 CFR 200.332(d) and 2 CFR 25.200 identify the requirements for the Department as the pass- through entity in providing subawards. This includes communication of certain information, such as the subrecipient?s unique entity identifier and required registration in the System for Award Management (SAM). In addition, the Department must evaluate each subrecipient?s risk of noncompliance with federal statutes and the terms and conditions of the subaward when determining the extent of subrecipient monitoring to be completed to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that the subaward performance goals are achieved. In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, monitoring must include a review of financial and performance reports required by the pass-through entity, follow up on any deficiencies identified in the subrecipient that are detected through audits, on-site reviews and other means, and issuing a management decision for audit findings, as required by 2 CFR 200.521.Finally, 2 CFR 200.303 requires the Department to establish and maintain effective internal control over the federal award that provides reasonable assurance that the Department is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award.Condition: The Department initially received ESSER funding in fiscal year 2021 and integrated ESSER monitoring with the general subrecipient monitoring used for other federal programs. The Department?s 2020- 2021 Monitoring Tool included only one indicator related to the ESSER program and did not adequately address all subrecipient monitoring requirements. However, in fiscal year 2021, the Department determined that the existing monitoring procedures were not robust enough for the additional requirements associated with ESSER subrecipient monitoring and discontinued those procedures without implementing any alternative procedures during fiscal year 2022.This was a finding included in the Single Audit Report for the year ended June 30, 2021, and the Department provided a corrective action plan to monitor subrecipients. However, the Department did not implement the plan until after the audit period, in fiscal year 2023.Cause: The Department realized the current procedures were not sufficient to meet the monitoring requirements of ESSER and indicated a monitoring process specific to the ESSER program compliance requirements was being developed; however, it was not developed in a timely manner to comply with federal requirements.Effect: The Department is not in compliance with subrecipient monitoring requirements. Without adequate monitoring of subrecipients, the Department is exposed to an increased risk of making improper payments for unallowable or unsupported costs.Recommendation: We recommend that the Department implement procedures to ensure compliance with all requirements as a pass-through entity. We also recommend that the Department design and implement effective control procedures to ensure subrecipient monitoring activities are complete and appropriate.Management?s View: The Department agrees with this finding.Corrective Action: It was not until the end of the 2022 legislative session that spending authority was given to the State Department of Education to use ARP ESSER administrative funds to hire additional staff to meet the robust requirements identified by the U.S. Department of Education. Up to that point, only one full-time person was handling all of the needs associated with ESSER funds. Since then, two positions have been hired. The ESSER Data and Reporting Coordinator began in April 2022, and the ESSER Monitoring Coordinator began in June 2022. While developing the monitoring procedures began in July 2022, it was after the audit timeframe. The Department now has in place all ESSER monitoring policies and procedures and will complete year one monitoring before May 5, 2023.Auditor?s Concluding Remarks: We thank the Department for its cooperation and assistance throughout the audit.
FINDING 2022-206The Department did not complete required subrecipient monitoring of the Elementary and Secondary School Emergency Relief (ESSER) Fund of the Education Stabilization Fund.Type of Finding: Material Noncompliance, Material WeaknessAssistance Listing Title: Elementary and Secondary School Emergency Relief Fund; Emergency Assistance for Non-Public Schools; ARPA ESSER III; ARPA ESSER - Homeless Children and YouthAssistance Listing Number: 84.425D; 84.425R; 84.425U; 84.425WFederal Award Number: S425D210043; S425D200043; S425R210024; S425U210043; S425W210013Program Year: January 5, 2021 ? September 30, 2023; May 18, 2020 ? September 30, 2022; February 11, 2021 ? September 30, 2023; March 24, 2021 ? September 30, 2024; April 23, 2021 ? September 30, 2024Federal Agency: Department of EducationCompliance Requirement: Subrecipient MonitoringQuestioned Costs: NoneCriteria: The U.S. Code of Federal Regulations (CFR) 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, superseding the Office of Management and Budget (OMB) Circular A-102, Grants and Cooperative Agreements with State and Local Governments, describes the pass-through entity?s responsibility for administering necessary requirements on subrecipients so that the federal award is used in accordance with federal regulations.Specifically, 2 CFR 200.332(d) and 2 CFR 25.200 identify the requirements for the Department as the pass- through entity in providing subawards. This includes communication of certain information, such as the subrecipient?s unique entity identifier and required registration in the System for Award Management (SAM). In addition, the Department must evaluate each subrecipient?s risk of noncompliance with federal statutes and the terms and conditions of the subaward when determining the extent of subrecipient monitoring to be completed to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that the subaward performance goals are achieved. In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, monitoring must include a review of financial and performance reports required by the pass-through entity, follow up on any deficiencies identified in the subrecipient that are detected through audits, on-site reviews and other means, and issuing a management decision for audit findings, as required by 2 CFR 200.521.Finally, 2 CFR 200.303 requires the Department to establish and maintain effective internal control over the federal award that provides reasonable assurance that the Department is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award.Condition: The Department initially received ESSER funding in fiscal year 2021 and integrated ESSER monitoring with the general subrecipient monitoring used for other federal programs. The Department?s 2020- 2021 Monitoring Tool included only one indicator related to the ESSER program and did not adequately address all subrecipient monitoring requirements. However, in fiscal year 2021, the Department determined that the existing monitoring procedures were not robust enough for the additional requirements associated with ESSER subrecipient monitoring and discontinued those procedures without implementing any alternative procedures during fiscal year 2022.This was a finding included in the Single Audit Report for the year ended June 30, 2021, and the Department provided a corrective action plan to monitor subrecipients. However, the Department did not implement the plan until after the audit period, in fiscal year 2023.Cause: The Department realized the current procedures were not sufficient to meet the monitoring requirements of ESSER and indicated a monitoring process specific to the ESSER program compliance requirements was being developed; however, it was not developed in a timely manner to comply with federal requirements.Effect: The Department is not in compliance with subrecipient monitoring requirements. Without adequate monitoring of subrecipients, the Department is exposed to an increased risk of making improper payments for unallowable or unsupported costs.Recommendation: We recommend that the Department implement procedures to ensure compliance with all requirements as a pass-through entity. We also recommend that the Department design and implement effective control procedures to ensure subrecipient monitoring activities are complete and appropriate.Management?s View: The Department agrees with this finding.Corrective Action: It was not until the end of the 2022 legislative session that spending authority was given to the State Department of Education to use ARP ESSER administrative funds to hire additional staff to meet the robust requirements identified by the U.S. Department of Education. Up to that point, only one full-time person was handling all of the needs associated with ESSER funds. Since then, two positions have been hired. The ESSER Data and Reporting Coordinator began in April 2022, and the ESSER Monitoring Coordinator began in June 2022. While developing the monitoring procedures began in July 2022, it was after the audit timeframe. The Department now has in place all ESSER monitoring policies and procedures and will complete year one monitoring before May 5, 2023.Auditor?s Concluding Remarks: We thank the Department for its cooperation and assistance throughout the audit.
FINDING 2022-206The Department did not complete required subrecipient monitoring of the Elementary and Secondary School Emergency Relief (ESSER) Fund of the Education Stabilization Fund.Type of Finding: Material Noncompliance, Material WeaknessAssistance Listing Title: Elementary and Secondary School Emergency Relief Fund; Emergency Assistance for Non-Public Schools; ARPA ESSER III; ARPA ESSER - Homeless Children and YouthAssistance Listing Number: 84.425D; 84.425R; 84.425U; 84.425WFederal Award Number: S425D210043; S425D200043; S425R210024; S425U210043; S425W210013Program Year: January 5, 2021 ? September 30, 2023; May 18, 2020 ? September 30, 2022; February 11, 2021 ? September 30, 2023; March 24, 2021 ? September 30, 2024; April 23, 2021 ? September 30, 2024Federal Agency: Department of EducationCompliance Requirement: Subrecipient MonitoringQuestioned Costs: NoneCriteria: The U.S. Code of Federal Regulations (CFR) 2 CFR Part 200, Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards, superseding the Office of Management and Budget (OMB) Circular A-102, Grants and Cooperative Agreements with State and Local Governments, describes the pass-through entity?s responsibility for administering necessary requirements on subrecipients so that the federal award is used in accordance with federal regulations.Specifically, 2 CFR 200.332(d) and 2 CFR 25.200 identify the requirements for the Department as the pass- through entity in providing subawards. This includes communication of certain information, such as the subrecipient?s unique entity identifier and required registration in the System for Award Management (SAM). In addition, the Department must evaluate each subrecipient?s risk of noncompliance with federal statutes and the terms and conditions of the subaward when determining the extent of subrecipient monitoring to be completed to ensure that the subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that the subaward performance goals are achieved. In addition to procedures identified as necessary based upon the evaluation of subrecipient risk or specifically required by the terms and conditions of the award, monitoring must include a review of financial and performance reports required by the pass-through entity, follow up on any deficiencies identified in the subrecipient that are detected through audits, on-site reviews and other means, and issuing a management decision for audit findings, as required by 2 CFR 200.521.Finally, 2 CFR 200.303 requires the Department to establish and maintain effective internal control over the federal award that provides reasonable assurance that the Department is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award.Condition: The Department initially received ESSER funding in fiscal year 2021 and integrated ESSER monitoring with the general subrecipient monitoring used for other federal programs. The Department?s 2020- 2021 Monitoring Tool included only one indicator related to the ESSER program and did not adequately address all subrecipient monitoring requirements. However, in fiscal year 2021, the Department determined that the existing monitoring procedures were not robust enough for the additional requirements associated with ESSER subrecipient monitoring and discontinued those procedures without implementing any alternative procedures during fiscal year 2022.This was a finding included in the Single Audit Report for the year ended June 30, 2021, and the Department provided a corrective action plan to monitor subrecipients. However, the Department did not implement the plan until after the audit period, in fiscal year 2023.Cause: The Department realized the current procedures were not sufficient to meet the monitoring requirements of ESSER and indicated a monitoring process specific to the ESSER program compliance requirements was being developed; however, it was not developed in a timely manner to comply with federal requirements.Effect: The Department is not in compliance with subrecipient monitoring requirements. Without adequate monitoring of subrecipients, the Department is exposed to an increased risk of making improper payments for unallowable or unsupported costs.Recommendation: We recommend that the Department implement procedures to ensure compliance with all requirements as a pass-through entity. We also recommend that the Department design and implement effective control procedures to ensure subrecipient monitoring activities are complete and appropriate.Management?s View: The Department agrees with this finding.Corrective Action: It was not until the end of the 2022 legislative session that spending authority was given to the State Department of Education to use ARP ESSER administrative funds to hire additional staff to meet the robust requirements identified by the U.S. Department of Education. Up to that point, only one full-time person was handling all of the needs associated with ESSER funds. Since then, two positions have been hired. The ESSER Data and Reporting Coordinator began in April 2022, and the ESSER Monitoring Coordinator began in June 2022. While developing the monitoring procedures began in July 2022, it was after the audit timeframe. The Department now has in place all ESSER monitoring policies and procedures and will complete year one monitoring before May 5, 2023.Auditor?s Concluding Remarks: We thank the Department for its cooperation and assistance throughout the audit.
2022-007 - Noncompliance with Subrecipient Monitoring RequirementsAward Years: 2018, 2020 - 2022Award Numbers: DUE-2044358, NA18OAR4170098, OIA-2019511, OIA-2119688Compliance Requirement: Subrecipient MonitoringRepeat Finding: Yes (Prior Year Finding No. 2021-010)See Schedule of Findings and Questioned Costs for chart/tableCondition:For the second consecutive year, UL Lafayette did not adequately monitor subrecipients of the R&D Cluster programs. In a non-statistical sample of five subawards out of a population of 49 subawards, it was noted that for four (80%) of the subrecipients evaluated UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit or that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards. Additionally, for all five (100%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients? risk of noncompliance with federal regulations and the terms of the subaward.Criteria:2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring.Per 2 CFR 200.332(f), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient?s fiscal year.2 CFR 200.332(d)(2) requires that pass-through entities follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies provided to the subrecipient from the pass-through entities detected through audits, on-site reviews, and written confirmation from the subrecipient.2 CFR 200.332(d)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient?s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings.Cause:UL Lafayette management indicated that it was working on internal procedures to adequately monitor subrecipients as result of the prior-year finding. However, management has yet to finalize and apply these procedures on all active subrecipients.Effect:Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency.Recommendation:UL Lafayette should strengthen controls to ensure the timely review of all required subrecipient audit reports in order to evaluate the impact of any findings noted in the audits and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations.Management?s Response and Corrective Action Plan:Management did not concur with the finding, noting it did not have sufficient time in fiscal year 2022 for corrective action and provided its progress on addressing the finding (B-83).
2022-007 - Noncompliance with Subrecipient Monitoring RequirementsAward Years: 2018, 2020 - 2022Award Numbers: DUE-2044358, NA18OAR4170098, OIA-2019511, OIA-2119688Compliance Requirement: Subrecipient MonitoringRepeat Finding: Yes (Prior Year Finding No. 2021-010)See Schedule of Findings and Questioned Costs for chart/tableCondition:For the second consecutive year, UL Lafayette did not adequately monitor subrecipients of the R&D Cluster programs. In a non-statistical sample of five subawards out of a population of 49 subawards, it was noted that for four (80%) of the subrecipients evaluated UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit or that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards. Additionally, for all five (100%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients? risk of noncompliance with federal regulations and the terms of the subaward.Criteria:2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring.Per 2 CFR 200.332(f), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient?s fiscal year.2 CFR 200.332(d)(2) requires that pass-through entities follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies provided to the subrecipient from the pass-through entities detected through audits, on-site reviews, and written confirmation from the subrecipient.2 CFR 200.332(d)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient?s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings.Cause:UL Lafayette management indicated that it was working on internal procedures to adequately monitor subrecipients as result of the prior-year finding. However, management has yet to finalize and apply these procedures on all active subrecipients.Effect:Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency.Recommendation:UL Lafayette should strengthen controls to ensure the timely review of all required subrecipient audit reports in order to evaluate the impact of any findings noted in the audits and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations.Management?s Response and Corrective Action Plan:Management did not concur with the finding, noting it did not have sufficient time in fiscal year 2022 for corrective action and provided its progress on addressing the finding (B-83).
2022-007 - Noncompliance with Subrecipient Monitoring RequirementsAward Years: 2018, 2020 - 2022Award Numbers: DUE-2044358, NA18OAR4170098, OIA-2019511, OIA-2119688Compliance Requirement: Subrecipient MonitoringRepeat Finding: Yes (Prior Year Finding No. 2021-010)See Schedule of Findings and Questioned Costs for chart/tableCondition:For the second consecutive year, UL Lafayette did not adequately monitor subrecipients of the R&D Cluster programs. In a non-statistical sample of five subawards out of a population of 49 subawards, it was noted that for four (80%) of the subrecipients evaluated UL Lafayette was unable to provide documentation that ensured each subrecipient obtained the required audit or that the audit was reviewed so that timely and appropriate action could be taken for any findings pertaining to the federal awards. Additionally, for all five (100%) of the subrecipients evaluated, UL Lafayette could not provide evidence that the required risk analyses were performed to evaluate each subrecipients? risk of noncompliance with federal regulations and the terms of the subaward.Criteria:2 CFR 200.332(b) requires pass-through entities to evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring.Per 2 CFR 200.332(f), pass-through entities are responsible for verifying that every subrecipient is audited as required by 2 CFR Part 200, subpart F when it is expected that the subrecipient's federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in CFR 200.501 of $750,000 or more in federal awards during the subrecipient?s fiscal year.2 CFR 200.332(d)(2) requires that pass-through entities follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies provided to the subrecipient from the pass-through entities detected through audits, on-site reviews, and written confirmation from the subrecipient.2 CFR 200.332(d)(2) and (3) require pass-through entities to issue a management decision on applicable audit findings in accordance with 2 CFR 200.521, within six months after acceptance of the subrecipient?s audit report by the Federal Audit Clearinghouse, and ensure that the subrecipient takes timely and appropriate corrective action on all findings.Cause:UL Lafayette management indicated that it was working on internal procedures to adequately monitor subrecipients as result of the prior-year finding. However, management has yet to finalize and apply these procedures on all active subrecipients.Effect:Failure to properly monitor subrecipients results in noncompliance with federal regulations and increases the likelihood of improper payments which may have to be returned to the federal awarding agency.Recommendation:UL Lafayette should strengthen controls to ensure the timely review of all required subrecipient audit reports in order to evaluate the impact of any findings noted in the audits and issue management decision letters, if applicable. In addition, UL Lafayette should strengthen controls to ensure risk assessments are performed and documented on all subrecipients in accordance with federal regulations.Management?s Response and Corrective Action Plan:Management did not concur with the finding, noting it did not have sufficient time in fiscal year 2022 for corrective action and provided its progress on addressing the finding (B-83).
Reference Number:2022-010Prior Year Finding:NoFederal Agency:U.S. Department of the TreasuryState Agency:Department of Community AffairsFederal Program:COVID-19 - Homeowner Assistance FundAssistance Listing Number:21.026Award Number and Year:HAF0019 (2021)Compliance Requirement:Subrecipient MonitoringType of FindingSignificant Deficiency in Internal Control over Compliance, Other MattersCriteria or specific requirement:Compliance ? Per 2 CFR section 200.332(a), all pass-through entities must ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward.Required information includes:i. Subrecipient name (which must match the name associated with its unique entity identifier);ii. Subrecipient's unique entity identifier;iii. Federal Award Identification Number (FAIN);iv. Federal Award Date (see the definition of Federal award date in ? 200.1 of this part) of award to the recipient by the Federal agency;v. Subaward Period of Performance Start and End Date;vi. Subaward Budget Period Start and End Date;vii. Amount of Federal Funds Obligated by this action by the pass-through entity to the subrecipient;viii. Total Amount of Federal Funds Obligated to the subrecipient by the pass-through entity including the current financial obligation;ix. Total Amount of the Federal Award committed to the subrecipient by the pass-through entity;x. Federal award project description, as required to be responsive to the Federal Funding Accountability and Transparency Act (FFATA);xi. Name of Federal awarding agency, pass-through entity, and contact information for awarding official of the Pass-through entity;xii. Assistance Listings number and Title; the pass-through entity must identify the dollar amount made available under each Federal award and the Assistance Listings Number at time of disbursement;xiii. Identification of whether the award is R&D; andxiv. Indirect cost rate for the Federal award (including if the de minimis rate is charged) per section 200.414.2 CFR section 200.332 also states that pass-through entities must:(d) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as:1) The subrecipient's prior experience with the same or similar subawards;2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F - Audit Requirements of this part, and the extent to which the same or similar subaward has been audited as a major program;3) Whether the subrecipient has new personnel or new or substantially changed systems;4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency).(e) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include:(1) Reviewing financial and performance reports required by the pass-through entity.(2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means.(3) Issuing a management decision for audit findings pertaining to the Federal award provided to the subrecipient from the pass-through entity as required by ? 200.521 Management decision.(f) Verify that every subrecipient is audited as required by Subpart F - Audit Requirements of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in ? 200.501 Audit requirements.Control ? Per 2 CFR section 200.303(a), a non-Federal entity must: Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in ?Standards for Internal Control in the Federal Government? issued by the Comptroller General of the United States or the ?Internal Control Integrated Framework?, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO).Condition:The Department of Community Affairs (Department) did not comply with subrecipient monitoring requirements for the program.Context:The Department issued one subaward under the program and it was noted that the subaward did not include all required Federal Award information, nor did the Department perform a risk assessment of the subrecipient or perform monitoring activities for the award.Questioned costs:None noted.Cause:The Department?s procedures and controls were not effective to ensure the subaward was issued in compliance with Federal requirements, nor that it performed a risk assessment or timely monitoring of subrecipient.Effect:Excluding the required federal grant award information at the time of the subaward may cause subrecipients and their auditors to be uninformed about specific program and other regulations that apply to the funds they receive. There is also the potential for subrecipients to have incomplete Schedules of Expenditures of Federal Awards (SEFA) in their Single Audit reports, and federal funds may not be properly audited at the subrecipient level in accordance with the Uniform Guidance.Not conducting during the award monitoring may result in a failure of the Division to detect that its subrecipients used subawards for unauthorized purposes, managed them in violation of the terms and conditions of the subawards, or that subaward performance goals were not achieved.Without ensuring subrecipients have obtained audits as required by Subpart F, there is an increased risk that subrecipients could be inappropriately spending and/or inaccurately tracking and reporting federal funds over multiple year periods, and these discrepancies may not be properly monitored, detected, and corrected by Division personnel on a timely basis.Recommendation:The Department should review and enhance internal controls and procedures to ensure that all required information is included in all subawards, that proper subrecipient monitoring is conducted, and that evaluation of independent audits is performed.Views of responsible officials:As recommended, the Department of Community Affairs (DCA) will review current procedures to ensure that all subaward information required by the federal Uniform Guidance is included in all subaward contracts and grant agreements. The DCA has also reviewed its current subrecipient monitoring procedures for standard subawards made by the agency and has determined that no internal control enhancements are required. The HAF award was a unique grant relationship for DCA in that the entire award was passed through to another New Jersey State government agency that is a direct affiliate of the Department. Monitoring procedures were determined based on the close working relationship with our affiliate organization and the fact that less than 1 percent of the grant award was expended through June 30, 2022. Current procedures included a risk assessment of the subrecipient and performance of the single audit desk review of the independent audit report. In addition, the Director of Audit, and the Executive Director of the subgrantee affiliate participate in weekly meetings where updates on the program status can be determined. DCA?s subrecipient monitoring plan also includes the hiring of an Integrity Monitor to oversee and monitor the use of the HAF funds as well as compliance with all HAF program reporting requirements. As program disbursement activity is continuing to increase with the HAF program(s) created more fully up and running, DCA is currently targeting the Integrity Monitor hire to take place sometime within the next three to six months.
Criteria or specific requirement: According to ?200.332 Requirements for pass-through entities of 2 CFR Part 200, all pass-through entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. In addition, the pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: ? Reviewing financial and performance reports required by the pass-through entity. ? Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. ? Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ?200.521 Management Decision. Condition: We noted the Organization is not in compliance with requirements related to the subrecipient monitoring of grants. Questioned costs: None Context: During our testing, we noted the following exceptions: ? The Organization lacked a process to review the audits of subrecipients that would allow the Organization to identify any potential deficiencies that would require follow-up. ? The Organization lacked a process to complete a risk assessment that would allow the Organization to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Cause: The Organization does not have internal controls in place to ensure compliance with Federal regulations or the terms and conditions of the Federal award. Effect: The lack of internal controls over this compliance requirement provides an opportunity for noncompliance. Noncompliance results in possible Federal funds provided to ineligible subrecipients. Repeat Finding: Yes ? 2021-004 Recommendation: We recommend that the Organization create effective internal controls and procedures over subrecipient monitoring and tracking that allow for compliance with all applicable Federal laws, regulations, and compliance requirements of various Federal grants. Views of responsible officials: The ROAMS grant did not clarify with the Network partners that receive $20,000 yearly stipends whether they were subrecipients or contractors, but instead assumed everyone was a contractor. We agree to this as a finding. We have since followed up with the stipend partners and all but one has declared their stipends as contracts. ROAMS agrees with the classification of three as contractors and one as a subrecipient which is described below: ? Union County General Hospital (UCGH): Both ROAMS and UCGH see this relationship as a contractor. The stipend pays for a Tele-OB room in their facility and the budget even lists rent as part of the reason for the stipend. The stipend per the MoU also supports their participation in the monthly Governing Council meetings, data collection, IT support for the program implementation and decision making. ? Questa Health Center/Presbyterian Medical Services (Questa): Both ROAMS and Questa see this relationship as a contractor. The stipend pays for an OB room in their facility and is even listed as rent in the stipend budget. The stipend per the MoU also supports their participation in the monthly Governing Council and decision making. ? UNM Envision (UNM): UNM declared a portion of their stipend over the three-year period they received as subrecipient. They declared $39,635 as subrecipient and they received a total of $68,000 from ROAMS. ROAMS always saw the relationship as a contractor and not a subrecipient and we do not understand why they have declared a portion of their stipend as subrecipient. UNM was not an essential grant partner, joined in year two to assist with data review, participated in the Governing Council, and ROAMS has a data evaluation agreement with UNM that we understood as a contract. This different understanding of the relationships highlights the audit finding that the type of relationship should be agreed upon upfront. ? Miners Colfax Medical Center (MCMC): sees themselves as a subrecipient and we agree. They are a state hospital and the other Labor and Delivery hospital in the ROAMS grant, and like Holy Cross Medical Center have a very high data reporting burden and serve as the home for the patients. The Memorandum of Agreement signed by all Network partners outlines their obligations in section IV Provision of Services and VI Records and Information (a. b. and c.). As we have investigated the monitoring of subrecipients verses a contractor, we have found that the same follow up is necessary, as long as the subrecipient receives less than $750,000 in federal funds in a year, which is the case for MCMC. Our procedures for paying the stipend for both the contractors and one subrecipient (MCMC), have been attendance at the monthly Governing Council meetings, and deliverables from data collection, to IT support and meetings, workflow meetings, and clinical meetings. Reminders of deliverables that are pending are in the monthly Governing Council notes as is the attendance. ROAMS and the network partners were very clear in written documents and practice that the quarterly stipend payment was linked to participation and deliverables. We can provide you with monthly Governing Council notes to show this. A draft policy is in the works that will have the network partners formally declare their relationship as contractor or subrecipient and outline the monitoring of subrecipients. From our research we do not see the subrecipient monitoring being significantly different from a contractor unless the $750,000 threshold is met. The ROAMS grant did not clarify with the Network partners that receive $20,000 yearly stipends whether they were subrecipients or contractors, but instead assumed everyone was a contractor. We agree to this as a finding. We have followed up with the stipend partners and all but one has declared their stipends as contracts. ROAMS agrees with the classification of three as contractors. The ROAMS Director will request from the entities the audits for the CFO review to review for deficiencies on an annual basis.
Criteria or specific requirement: According to ?200.332 Requirements for pass-through entities of 2 CFR Part 200, all pass-through entities must evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. In addition, the pass-through entity must monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: ? Reviewing financial and performance reports required by the pass-through entity. ? Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. ? Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by ?200.521 Management Decision. Condition: We noted the Organization is not in compliance with requirements related to the subrecipient monitoring of grants. Questioned costs: None Context: During our testing, we noted the following exceptions: ? The Organization lacked a process to review the audits of subrecipients that would allow the Organization to identify any potential deficiencies that would require follow-up. ? The Organization lacked a process to complete a risk assessment that would allow the Organization to evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. Cause: The Organization does not have internal controls in place to ensure compliance with Federal regulations or the terms and conditions of the Federal award. Effect: The lack of internal controls over this compliance requirement provides an opportunity for noncompliance. Noncompliance results in possible Federal funds provided to ineligible subrecipients. Repeat Finding: Yes ? 2021-004 Recommendation: We recommend that the Organization create effective internal controls and procedures over subrecipient monitoring and tracking that allow for compliance with all applicable Federal laws, regulations, and compliance requirements of various Federal grants. Views of responsible officials: The ROAMS grant did not clarify with the Network partners that receive $20,000 yearly stipends whether they were subrecipients or contractors, but instead assumed everyone was a contractor. We agree to this as a finding. We have since followed up with the stipend partners and all but one has declared their stipends as contracts. ROAMS agrees with the classification of three as contractors and one as a subrecipient which is described below: ? Union County General Hospital (UCGH): Both ROAMS and UCGH see this relationship as a contractor. The stipend pays for a Tele-OB room in their facility and the budget even lists rent as part of the reason for the stipend. The stipend per the MoU also supports their participation in the monthly Governing Council meetings, data collection, IT support for the program implementation and decision making. ? Questa Health Center/Presbyterian Medical Services (Questa): Both ROAMS and Questa see this relationship as a contractor. The stipend pays for an OB room in their facility and is even listed as rent in the stipend budget. The stipend per the MoU also supports their participation in the monthly Governing Council and decision making. ? UNM Envision (UNM): UNM declared a portion of their stipend over the three-year period they received as subrecipient. They declared $39,635 as subrecipient and they received a total of $68,000 from ROAMS. ROAMS always saw the relationship as a contractor and not a subrecipient and we do not understand why they have declared a portion of their stipend as subrecipient. UNM was not an essential grant partner, joined in year two to assist with data review, participated in the Governing Council, and ROAMS has a data evaluation agreement with UNM that we understood as a contract. This different understanding of the relationships highlights the audit finding that the type of relationship should be agreed upon upfront. ? Miners Colfax Medical Center (MCMC): sees themselves as a subrecipient and we agree. They are a state hospital and the other Labor and Delivery hospital in the ROAMS grant, and like Holy Cross Medical Center have a very high data reporting burden and serve as the home for the patients. The Memorandum of Agreement signed by all Network partners outlines their obligations in section IV Provision of Services and VI Records and Information (a. b. and c.). As we have investigated the monitoring of subrecipients verses a contractor, we have found that the same follow up is necessary, as long as the subrecipient receives less than $750,000 in federal funds in a year, which is the case for MCMC. Our procedures for paying the stipend for both the contractors and one subrecipient (MCMC), have been attendance at the monthly Governing Council meetings, and deliverables from data collection, to IT support and meetings, workflow meetings, and clinical meetings. Reminders of deliverables that are pending are in the monthly Governing Council notes as is the attendance. ROAMS and the network partners were very clear in written documents and practice that the quarterly stipend payment was linked to participation and deliverables. We can provide you with monthly Governing Council notes to show this. A draft policy is in the works that will have the network partners formally declare their relationship as contractor or subrecipient and outline the monitoring of subrecipients. From our research we do not see the subrecipient monitoring being significantly different from a contractor unless the $750,000 threshold is met. The ROAMS grant did not clarify with the Network partners that receive $20,000 yearly stipends whether they were subrecipients or contractors, but instead assumed everyone was a contractor. We agree to this as a finding. We have followed up with the stipend partners and all but one has declared their stipends as contracts. ROAMS agrees with the classification of three as contractors. The ROAMS Director will request from the entities the audits for the CFO review to review for deficiencies on an annual basis.
Federal Agency: United States Department of Agriculture Federal Programs: Child and Adult Care Food Program (10.558) Federal Award Numbers: 202120N105044, 202121N115044, 202222N115044, 202221N115044, 202121N202044, 202120N202044, 202121N109944, 202120N109944, 202121N119944, 202121H170644, 202222N202044, 202221N202044, 202222N119944, 202221N119944 Federal Award Years: 2021 and 2022 State Agency: Department of Health Reference: 2022-003 Criteria Title 2 U.S. Code of Federal Regulations Part 200 (2 CFR 200), Uniform Administrative Requirements, Cost Principles, and Audit Requirements, section 200.332(d) states all pass-through entities must monitor the activities of the subrecipient as necessary to ensure that he subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.303(a) states the nonfederal entity must Establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition For 3 of 40 subrecipients selected, the Department did not review the cases by the scheduled due date for the single audit reports as required in accordance with 2 CFR 200.332(d). The Department of Health (the Department) did not have effective internal controls in place to ensure that all required single audits of the program?s subrecipients were reviewed, followed-up, or appropriate action was taken and as necessary issued a management decision pertaining to the audit finding in accordance with 2 CFR 200, as applicable. The Department maintains an internal clearinghouse tracker (the tracker) to track the subrecipients single audit status. The tracker tracks subrecipients that are exempt from single audit requirements as well as the status and follow-up required for the subrecipients with single audits. Cause The condition is due to DOH Audit Clearinghouse personnel not operating as intended, due to COVID-19 personnel reassignments, to ensure the timely review of all single audit reports for all subrecipients receiving federal funding from the Department. Possible Asserted Effect Failure to properly obtain and review subrecipient single audit reports may result in the use of federal funding not being in compliance with federal statues, regulations, and the terms and conditions of subawards. Questioned Costs None. Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding for the Department was included in the 2019 Single Audit Report as finding number 2019 032 at pages 90?92. Recommendation We recommend the Department to continue working on the implementation of its replacement computerized system to (1) identify all subrecipients required to have a single audit, (2) ensure that sanctions are imposed in a timely manner for subrecipients that do not submit timely single audit reports, and (3) issue management decisions within six months for all single audit reports that contain findings relevant to the Department?s programs. In the interim, we recommend that manual internal control procedures be implemented by the Department to ensure that all subrecipients that require a single audit to be completed submit the report on a timely basis and, if applicable, respond to management decision letters be issued by the Department. Views of Responsible Officials Recommendation accepted. Reference the corrective action plan for further details.
Federal Agency: United States Department of Agriculture Federal Programs: Child and Adult Care Food Program (10.558) Federal Award Numbers: 202120N105044, 202121N115044, 202222N115044, 202221N115044, 202121N202044, 202120N202044, 202121N109944, 202120N109944, 202121N119944, 202121H170644, 202222N202044, 202221N202044, 202222N119944, 202221N119944 Federal Award Years: 2021 and 2022 State Agency: Department of Health Reference: 2022-003 Criteria Title 2 U.S. Code of Federal Regulations Part 200 (2 CFR 200), Uniform Administrative Requirements, Cost Principles, and Audit Requirements, section 200.332(d) states all pass-through entities must monitor the activities of the subrecipient as necessary to ensure that he subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.303(a) states the nonfederal entity must Establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition For 3 of 40 subrecipients selected, the Department did not review the cases by the scheduled due date for the single audit reports as required in accordance with 2 CFR 200.332(d). The Department of Health (the Department) did not have effective internal controls in place to ensure that all required single audits of the program?s subrecipients were reviewed, followed-up, or appropriate action was taken and as necessary issued a management decision pertaining to the audit finding in accordance with 2 CFR 200, as applicable. The Department maintains an internal clearinghouse tracker (the tracker) to track the subrecipients single audit status. The tracker tracks subrecipients that are exempt from single audit requirements as well as the status and follow-up required for the subrecipients with single audits. Cause The condition is due to DOH Audit Clearinghouse personnel not operating as intended, due to COVID-19 personnel reassignments, to ensure the timely review of all single audit reports for all subrecipients receiving federal funding from the Department. Possible Asserted Effect Failure to properly obtain and review subrecipient single audit reports may result in the use of federal funding not being in compliance with federal statues, regulations, and the terms and conditions of subawards. Questioned Costs None. Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding for the Department was included in the 2019 Single Audit Report as finding number 2019 032 at pages 90?92. Recommendation We recommend the Department to continue working on the implementation of its replacement computerized system to (1) identify all subrecipients required to have a single audit, (2) ensure that sanctions are imposed in a timely manner for subrecipients that do not submit timely single audit reports, and (3) issue management decisions within six months for all single audit reports that contain findings relevant to the Department?s programs. In the interim, we recommend that manual internal control procedures be implemented by the Department to ensure that all subrecipients that require a single audit to be completed submit the report on a timely basis and, if applicable, respond to management decision letters be issued by the Department. Views of Responsible Officials Recommendation accepted. Reference the corrective action plan for further details.
Federal Agency: United States Department of Agriculture Federal Programs: Child and Adult Care Food Program (10.558) Federal Award Numbers: 202120N105044, 202121N115044, 202222N115044, 202221N115044, 202121N202044, 202120N202044, 202121N109944, 202120N109944, 202121N119944, 202121H170644, 202222N202044, 202221N202044, 202222N119944, 202221N119944 Federal Award Years: 2021 and 2022 State Agency: Department of Health Reference: 2022-003 Criteria Title 2 U.S. Code of Federal Regulations Part 200 (2 CFR 200), Uniform Administrative Requirements, Cost Principles, and Audit Requirements, section 200.332(d) states all pass-through entities must monitor the activities of the subrecipient as necessary to ensure that he subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.303(a) states the nonfederal entity must Establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition For 3 of 40 subrecipients selected, the Department did not review the cases by the scheduled due date for the single audit reports as required in accordance with 2 CFR 200.332(d). The Department of Health (the Department) did not have effective internal controls in place to ensure that all required single audits of the program?s subrecipients were reviewed, followed-up, or appropriate action was taken and as necessary issued a management decision pertaining to the audit finding in accordance with 2 CFR 200, as applicable. The Department maintains an internal clearinghouse tracker (the tracker) to track the subrecipients single audit status. The tracker tracks subrecipients that are exempt from single audit requirements as well as the status and follow-up required for the subrecipients with single audits. Cause The condition is due to DOH Audit Clearinghouse personnel not operating as intended, due to COVID-19 personnel reassignments, to ensure the timely review of all single audit reports for all subrecipients receiving federal funding from the Department. Possible Asserted Effect Failure to properly obtain and review subrecipient single audit reports may result in the use of federal funding not being in compliance with federal statues, regulations, and the terms and conditions of subawards. Questioned Costs None. Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding for the Department was included in the 2019 Single Audit Report as finding number 2019 032 at pages 90?92. Recommendation We recommend the Department to continue working on the implementation of its replacement computerized system to (1) identify all subrecipients required to have a single audit, (2) ensure that sanctions are imposed in a timely manner for subrecipients that do not submit timely single audit reports, and (3) issue management decisions within six months for all single audit reports that contain findings relevant to the Department?s programs. In the interim, we recommend that manual internal control procedures be implemented by the Department to ensure that all subrecipients that require a single audit to be completed submit the report on a timely basis and, if applicable, respond to management decision letters be issued by the Department. Views of Responsible Officials Recommendation accepted. Reference the corrective action plan for further details.
Federal Agency: United States Department of Agriculture Federal Programs: Child and Adult Care Food Program (10.558) Federal Award Numbers: 202120N105044, 202121N115044, 202222N115044, 202221N115044, 202121N202044, 202120N202044, 202121N109944, 202120N109944, 202121N119944, 202121H170644, 202222N202044, 202221N202044, 202222N119944, 202221N119944 Federal Award Years: 2021 and 2022 State Agency: Department of Health Reference: 2022-003 Criteria Title 2 U.S. Code of Federal Regulations Part 200 (2 CFR 200), Uniform Administrative Requirements, Cost Principles, and Audit Requirements, section 200.332(d) states all pass-through entities must monitor the activities of the subrecipient as necessary to ensure that he subaward is used for authorized purposes, in compliance with federal statutes, regulations, and the terms and conditions of the subaward, and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and other means. (3) Issuing a management decision for audit findings pertaining to the federal award provided to the subrecipient from the pass-through entity as required by 2 CFR 200.521. Additionally, 2 CFR 200.303(a) states the nonfederal entity must Establish and maintain effective internal control over the federal award that provides reasonable assurance that the nonfederal entity is managing the federal award in compliance with federal statutes, regulations, and the terms and conditions of the federal award. Condition For 3 of 40 subrecipients selected, the Department did not review the cases by the scheduled due date for the single audit reports as required in accordance with 2 CFR 200.332(d). The Department of Health (the Department) did not have effective internal controls in place to ensure that all required single audits of the program?s subrecipients were reviewed, followed-up, or appropriate action was taken and as necessary issued a management decision pertaining to the audit finding in accordance with 2 CFR 200, as applicable. The Department maintains an internal clearinghouse tracker (the tracker) to track the subrecipients single audit status. The tracker tracks subrecipients that are exempt from single audit requirements as well as the status and follow-up required for the subrecipients with single audits. Cause The condition is due to DOH Audit Clearinghouse personnel not operating as intended, due to COVID-19 personnel reassignments, to ensure the timely review of all single audit reports for all subrecipients receiving federal funding from the Department. Possible Asserted Effect Failure to properly obtain and review subrecipient single audit reports may result in the use of federal funding not being in compliance with federal statues, regulations, and the terms and conditions of subawards. Questioned Costs None. Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding for the Department was included in the 2019 Single Audit Report as finding number 2019 032 at pages 90?92. Recommendation We recommend the Department to continue working on the implementation of its replacement computerized system to (1) identify all subrecipients required to have a single audit, (2) ensure that sanctions are imposed in a timely manner for subrecipients that do not submit timely single audit reports, and (3) issue management decisions within six months for all single audit reports that contain findings relevant to the Department?s programs. In the interim, we recommend that manual internal control procedures be implemented by the Department to ensure that all subrecipients that require a single audit to be completed submit the report on a timely basis and, if applicable, respond to management decision letters be issued by the Department. Views of Responsible Officials Recommendation accepted. Reference the corrective action plan for further details.
Reference Number: 2021-014 Category of Finding: Subrecipient Monitoring Type of Finding: Material Weakness and Material Instance of Noncompliance State Administering Department: California Department of Public Health (Public Health) Assistance Listing Number: 93.323 Federal Program Title: Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) Federal Award Number and Year: NU50CK000539; 2021 Criteria: Title 2 - Grants and Agreements. Subtitle A - Office of Management and Budget Guidance for Grants and Agreements. Chapter II - Office of Management and Budget Guidance. Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D - Post Federal Award Requirements. §200.303 Internal controls (2 CFR 200.303): The non-Federal entity must: (b) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Title 2 - Grants and Agreements. Subtitle A - Office of Management and Budget Guidance for Grants and Agreements. Chapter II - Office of Management and Budget Guidance. Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D - Post Federal Award Requirements. §200.332 Requirements for pass-through entities (2 CFR 200.332): All pass-through entities must: (c) Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section§200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in §200.501. (g) Consider whether the results of the subrecipient’s audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity’s own records. Condition: Public Health did not establish a formal risk assessment process over its subrecipients of federal awards to determine the frequency and extent of subrecipient monitoring to be performed. While Public Health received reimbursement invoices from subrecipients, there did not appear to be other financial or programmatic monitoring to verify subrecipents compliance with applicable requirements. In addition, Public Health did not obtain Single Audit reports from those subrecipients as required. Identification as a Repeat Finding This was not a repeat finding from the immediate prior year. Cause: Public Health failed to identify and report its federal expenditures related to its subrecipient agreement with its bona fide agent. Consequently, required subrecipient monitoring procedures were not designed nor implemented by Public Health. Effect: By not properly evaluating the risk of noncompliance, Public Health may inadvertently award grant funds to subrecipients who lack the necessary mechanisms or understanding to adhere to federal statutes. This increases the likelihood of noncompliance arising during the implementation of the grant-funded activities. Furthermore, failure to perform monitoring procedures or obtain Single Audit reports increases the risk for not properly identifying subrecipient program control weaknesses, noncompliance, and performing sufficient follow-up on any subrecipient corrective action. Questioned Costs: No questioned costs were identified. Context: Disbursements to subrecipients for the ELC program totaled $367,405,431, or 76.5% of total reported program expenditures. Recommendation: Public Health should establish and document formal procedures for conducting risk assessments of its subrecipients, including criteria for evaluating organizational capacity, financial stability, compliance history, and programmatic capabilities. Public Health should also develop and implement specific subrecipient monitoring procedures and establish a process for obtaining single audit reports from its subrecipients. Furthermore, a monitoring mechanism should be implemented to track compliance with the single audit mandate among subrecipients, including regular follow-ups and documentation of communication efforts. Views of Responsible Officials and Corrective Action Plan Management’s response is reported in “Management’s Response and Corrective Action Plan” included in a separate section at the end of this report
Reference Number: 2021-014 Category of Finding: Subrecipient Monitoring Type of Finding: Material Weakness and Material Instance of Noncompliance State Administering Department: California Department of Public Health (Public Health) Assistance Listing Number: 93.323 Federal Program Title: Epidemiology and Laboratory Capacity for Infectious Diseases (ELC) Federal Award Number and Year: NU50CK000539; 2021 Criteria: Title 2 - Grants and Agreements. Subtitle A - Office of Management and Budget Guidance for Grants and Agreements. Chapter II - Office of Management and Budget Guidance. Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D - Post Federal Award Requirements. §200.303 Internal controls (2 CFR 200.303): The non-Federal entity must: (b) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). Title 2 - Grants and Agreements. Subtitle A - Office of Management and Budget Guidance for Grants and Agreements. Chapter II - Office of Management and Budget Guidance. Part 200 - Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards. Subpart D - Post Federal Award Requirements. §200.332 Requirements for pass-through entities (2 CFR 200.332): All pass-through entities must: (c) Evaluate each subrecipient’s risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: (1) The subrecipient’s prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a Single Audit in accordance with Subpart F of this part, and the extent to which the same or similar subaward has been audited as a major program; (3) Whether the subrecipient has new personnel or new or substantially changed systems; and (4) The extent and results of Federal awarding agency monitoring (e.g., if the subrecipient also receives Federal awards directly from a Federal awarding agency). (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. Pass-through entity monitoring of the subrecipient must include: (1) Reviewing financial and performance reports required by the pass-through entity. (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass-through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward. (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by §200.521. (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings. If a subrecipient has a current Single Audit report posted in the Federal Audit Clearinghouse and has not otherwise been excluded from receipt of Federal funding (e.g., has been debarred or suspended), the pass-through entity may rely on the subrecipient's cognizant audit agency or cognizant oversight agency to perform audit follow-up and make management decisions related to cross-cutting findings in accordance with section§200.513(a)(3)(vii). Such reliance does not eliminate the responsibility of the pass-through entity to issue subawards that conform to agency and award-specific requirements, to manage risk through ongoing subaward monitoring, and to monitor the status of the findings that are specifically related to the subaward. (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient’s Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in §200.501. (g) Consider whether the results of the subrecipient’s audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity’s own records. Condition: Public Health did not establish a formal risk assessment process over its subrecipients of federal awards to determine the frequency and extent of subrecipient monitoring to be performed. While Public Health received reimbursement invoices from subrecipients, there did not appear to be other financial or programmatic monitoring to verify subrecipents compliance with applicable requirements. In addition, Public Health did not obtain Single Audit reports from those subrecipients as required. Identification as a Repeat Finding This was not a repeat finding from the immediate prior year. Cause: Public Health failed to identify and report its federal expenditures related to its subrecipient agreement with its bona fide agent. Consequently, required subrecipient monitoring procedures were not designed nor implemented by Public Health. Effect: By not properly evaluating the risk of noncompliance, Public Health may inadvertently award grant funds to subrecipients who lack the necessary mechanisms or understanding to adhere to federal statutes. This increases the likelihood of noncompliance arising during the implementation of the grant-funded activities. Furthermore, failure to perform monitoring procedures or obtain Single Audit reports increases the risk for not properly identifying subrecipient program control weaknesses, noncompliance, and performing sufficient follow-up on any subrecipient corrective action. Questioned Costs: No questioned costs were identified. Context: Disbursements to subrecipients for the ELC program totaled $367,405,431, or 76.5% of total reported program expenditures. Recommendation: Public Health should establish and document formal procedures for conducting risk assessments of its subrecipients, including criteria for evaluating organizational capacity, financial stability, compliance history, and programmatic capabilities. Public Health should also develop and implement specific subrecipient monitoring procedures and establish a process for obtaining single audit reports from its subrecipients. Furthermore, a monitoring mechanism should be implemented to track compliance with the single audit mandate among subrecipients, including regular follow-ups and documentation of communication efforts. Views of Responsible Officials and Corrective Action Plan Management’s response is reported in “Management’s Response and Corrective Action Plan” included in a separate section at the end of this report
Criteria: • §200.303 Internal controls establishes that “The non-Federal entity must (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award, (b) Comply with the U.S. Constitution, Federal statutes, regulations, and the terms and conditions of the Federal awards, (c) Evaluate and monitor the non-Federal entity's compliance with statutes, regulations and the terms and conditions of Federal awards., (d) Take prompt action when instances of noncompliance are identified including noncompliance identified in audit findings. • • 2 CFR §200.332 Requirements for pass-through entities establishes that “All pass-through entities must: Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. • • Pass-through entity monitoring of the subrecipient must include (1) Reviewing financial and performance reports required by the pass-through entity; (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass- through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward; (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521; and (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings”. Condition: The Chapter 11 Subrecipients Management and Monitoring Manual, subrecipients with risk assessment profile classified as High-High Risk (HH), require an annual site visit. However, during the year ended June 30, 2020, from six (6) subrecipients classified as HH, two (2) were not visited during the period. The subrecipients not visited were the following: Cause: Lack of implementation of work plan that includes monitoring process for at least major subrecipients before year end, in order to avoid noncompliance on subrecipients’ procedures. Effects: • • Noncompliance may be performed by subrecipients without timely evaluation to remediate possible questioned costs, which may result in delay receipt of funds through remediation be implemented. • • Incomplete monitoring process can prevent COR3 from timely detection of a material noncompliance from subrecipients. Questioned Costs: None. Identification as a repeat finding: Finding is a repeat of a finding in the immediately prior year and was identified as finding number 2019-07. Recommendation: • • We recommend management to implement a work plan for monitoring subrecipients to ascertain that major subrecipients be monitored during the year, or at reaching to determine threshold on used federal funds used in order to timely react to and avoid possible non-compliances. • • In addition, we recommended management to ascertain that all procedures related to the monitoring process be implemented.
Criteria: • §200.303 Internal controls establishes that “The non-Federal entity must (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award, (b) Comply with the U.S. Constitution, Federal statutes, regulations, and the terms and conditions of the Federal awards, (c) Evaluate and monitor the non-Federal entity's compliance with statutes, regulations and the terms and conditions of Federal awards., (d) Take prompt action when instances of noncompliance are identified including noncompliance identified in audit findings. • • 2 CFR §200.332 Requirements for pass-through entities establishes that “All pass-through entities must: Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved. • • Pass-through entity monitoring of the subrecipient must include (1) Reviewing financial and performance reports required by the pass-through entity; (2) Following-up and ensuring that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the Federal award provided to the subrecipient from the pass- through entity detected through audits, on-site reviews, and written confirmation from the subrecipient, highlighting the status of actions planned or taken to address Single Audit findings related to the particular subaward; (3) Issuing a management decision for applicable audit findings pertaining only to the Federal award provided to the subrecipient from the pass-through entity as required by § 200.521; and (4) The pass-through entity is responsible for resolving audit findings specifically related to the subaward and not responsible for resolving crosscutting findings”. Condition: The Chapter 11 Subrecipients Management and Monitoring Manual, subrecipients with risk assessment profile classified as High-High Risk (HH), require an annual site visit. However, during the year ended June 30, 2020, from six (6) subrecipients classified as HH, two (2) were not visited during the period. The subrecipients not visited were the following: Cause: Lack of implementation of work plan that includes monitoring process for at least major subrecipients before year end, in order to avoid noncompliance on subrecipients’ procedures. Effects: • • Noncompliance may be performed by subrecipients without timely evaluation to remediate possible questioned costs, which may result in delay receipt of funds through remediation be implemented. • • Incomplete monitoring process can prevent COR3 from timely detection of a material noncompliance from subrecipients. Questioned Costs: None. Identification as a repeat finding: Finding is a repeat of a finding in the immediately prior year and was identified as finding number 2019-07. Recommendation: • • We recommend management to implement a work plan for monitoring subrecipients to ascertain that major subrecipients be monitored during the year, or at reaching to determine threshold on used federal funds used in order to timely react to and avoid possible non-compliances. • • In addition, we recommended management to ascertain that all procedures related to the monitoring process be implemented.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.
Federal Agency: U.S. Department of Housing and Urban Development Federal Program: 14.218 Entitlement Grants Cluster: Community Development Block Grants/Entitlement Grants Identification Number: B-15-MC-42-0018; B-16-MC-42-0018; B-17-MC-42-0018; B-18-MC-42-0018; B-19- MC-42-0018 Requirement: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Reporting; Special Tests and Provisions Type of Finding: Material weakness in internal control over major program; Noncompliance Criteria: Section 2 CFR 200.331 of the Uniform Guidance states that pass-thru entities must evaluate each subrecipient's risk of noncompliance with federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring. This evaluation may include, but is not limited to, (1) The subrecipient's prior experience with the same or similar subawards; (2) The results of previous audits including whether or not the subrecipient receives a single audit and the extent to which the same or similar subaward has been audited as a major program; and (3) Whether the subrecipient has new personnel or new or substantially changed systems. Based on the results of the evaluation, the City would then have to consider the extent to which monitoring procedures are required. At a minimum, the City must, (1) Review financial and performance reports required by the City, (2) Follow-up and ensure that the subrecipient takes timely and appropriate action on all deficiencies pertaining to the federal award provided to the subrecipient from the City detected through audits, on-site reviews, and other means, and (3) Issue a management decision for audit findings pertaining to the federal award provided to the subrecipient from the City as required by Section 200.521 of the Uniform Guidance. Additionally, the City must perform monitoring visits as stipulated in the contracts between the City and the subrecipients. Condition: The City does not have policies and procedures in place to perform the required risk assessment of subrecipients to determine the extent of monitoring procedures, and then perform and document the monitoring procedures performed. Cause: There is no documentation of any subrecipient risk assessment being performed for grants provided to subrecipients for 2019, and only partial documentation of any subrecipient monitoring procedures being performed. Effect: Subrecipient monitoring procedures were not properly performed and documented by the City. Questioned costs: There are no questioned costs associated with this finding. Context: The City needs to create and implement a policy to perform risk assessment of subrecipients, in order to determine the extent of monitoring procedures and performance of the monitoring procedures themselves. Recommendation: We recommend the City implement procedures to ensure risk assessment of subrecipients prior to each subaward is performed in accordance with the Uniform Guidance requirements and thoroughly documented. We further recommend that the required subrecipient monitoring be performed and documented for each subaward.