Answer: Management lacks documented policies for monitoring subrecipients and has not kept records of monitoring results.
Trend: This oversight may lead to increased risk and potential compliance issues in future audits.
List: Recommend creating and maintaining clear monitoring policies, retaining documentation of assessments, and conducting regular reviews.
Finding Text
During our audit, we found that management did not document its subrecipient monitoring policies and procedures, nor did it retain documentation supporting the results of its monitoring and periodic risk assessments.