Finding 1079148 (2023-006)

Finding 2023-006 – Lack of County-Wide Internal Controls Over Major Federal Program - Coronavirus State and Local Fiscal Recovery Funds (Repeat Finding – 2022-006) PASS-THROUGH GRANTOR: Direct Grant FEDERAL AGENCY: U.S. Department of Treasury ASSISTANCE LISTING: 21.027 FEDERAL PROGRAM NAME: Coronavirus State and Local Fiscal Recovery Funds FEDERAL AWARD YEAR: 2021 CONTROL CATEGORY: Activities Allowed or Unallowed; Allowable Costs/Cost Principles; Period of Performance; Procurement and Suspension and Debarment; Reporting; Subrecipient Monitoring QUESTIONED COSTS: $-0- Condition: County-wide internal controls regarding Control Environment, Risk Assessment, Information and Communication, and Monitoring have not been designed. Cause of Condition: Policies and procedures have not been designed and implemented to ensure the County complies with grant requirements. Effect of Condition: This condition could result in noncompliance with grant requirements and could result in loss of federal funds to the County. Recommendation: OSAI recommends the County implement a system of internal controls to ensure compliance with grant requirements. Management Response: Chairman of the Board of County Commissioners: We will work to implement a Risk Assessment plan. We will implement controls to make sure we comply with grant requirements and that federal funds are expended in accordance with grant agreements and in a timely manner. We will ensure employees have the current and correct compliance supplement to work from. Criteria: The GAO Standards – Section 1 – Fundamental Concepts of Internal Control – OV1.01 states in part: Definition of Internal Control Internal control is a process effected by an entity’s oversight body, management, and other personnel that provides reasonable assurance that the objectives of an entity will be achieved. Additionally, GAO Standards – Section 2 – Establishing an Effective Internal Control System – OV2.04 states in part: Components, Principles, and Attributes Control Environment - The foundation for an internal control system. It provides the discipline and structure to help an entity achieve its objectives. Risk Assessment - Assesses the risks facing the entity as it seeks to achieve its objectives. This assessment provides the basis for developing appropriate risk responses. Information and Communication - The quality information management and personnel communicate and use to support the internal control system. Monitoring - Activities management establishes and operates to assess the quality of performance over time and promptly resolve the findings of audits and other reviews.