Finding Text
During our audit, for 10 or 10 sub-recipients we selected for testing, we found that management did not document or retain supporting documents to support its risk assessment conclusions used to determine the extent of subrecipient monitoring performed during the year. In addition,
management did not retain support for its monitoring activities of subrecipients.