Finding 1114546 (2024-001)

Department of Justice Federal Financial Assistance Listing #16.582 Crime Victim Assistance Activities Allowed and Allowable Costs Significant Deficiency in Internal Control over Compliance Department of Health and Human Services Federal Financial Assistance Listing #93.912 Rural Health Care Services Outreach, Rural Health Network Development and Small Health Care Provider Quality Improvement Activities Allowed and Allowable Costs, Period of Performance Significant Deficiency in Internal Control over Compliance Criteria: 2 CFR 200.303 (a) establishes that the auditee must establish and maintain effective internal control over the federal award that provides assurance that the entity is managing the federal award in compliance with federal statutes, regulations, and conditions of the federal award. Condition: Our testing over activities allowed and allowable costs and period of performance identified five employee timecards that were not reviewed and approved by an individual other than the employee. Cause: There was a lapse the internal control process which allowed the employees to approve their own timecards in these instances. Effect: The lack of a secondary review of employee timecards could result in improper expenditures being allocated to the federal award. Questioned Costs: None reported. Context: A non-statistical sample of 48 transactions was selected for testing for program 16.582, which accounted for $159,466 of $529,020 of federal program payroll expenditures. One employee timecard was not reviewed and approved by an individual other than the employee. A non-statistical sample of 60 transactions was selected for testing for program 93.912, which accounted for $109,039 of $1,092,627 of federal program payroll expenditures. four employee timecards were not reviewed and approved by an individual other than the employee. Repeat Finding from Prior Year: No Recommendation: We recommend the Organization review and strengthen the controls surrounding employee timecard approvals to ensure that all timecards are reviewed and approved by an individual other than the employee. Views of Responsible Officials: Management agrees with the finding.