Finding Text
Condition: Through the process of gaining an understanding of the County’s internal control structure for federal programs, it was noted that county-wide internal controls regarding Control Environment, Risk Assessment, Information and Communication, and Monitoring have not been designed.
Cause of Condition: Policies and procedures have not been designed and implemented to ensure the County complies with grant requirements.
Effect of Condition: This condition could result in noncompliance with grant requirements and could result in the loss of federal funds for the County.
Recommendation: OSAI recommends that the County design and implement a system of internal controls to ensure compliance with grant requirements.
Management Response:
Board of County Commissioners: The Board of County Commissioners is responsible for the overall fiscal concerns of the county. See OKLA. STAT. Title 19, § 345. The Board of County Commissioners, with the cooperation and participation of all elected officials, reviews, develops and implements policies and procedures to create a strong internal control environment. The Board of County Commissioners will work with all elected officials, the third-party administrator, and federal, state and local partners to develop policies, procedures, and internal controls designed to accurately track grants, including the application process, verification, oversight, and reporting of grant requirements. These policies and procedures will be designed to identify requirements for recipients and sub-recipients of grants, ensure accurate equipment and real property management, procurement, recipient and subrecipient monitoring and reporting. Further, policies will ensure a proper understanding of all grant requirements and compliance of the same. To assist in this process, the Board of County Commissioners engaged a third-party administrator to oversee the grant process, including application, eligibility, review, requirements, contracting, recipient tracking and oversight, and documentation and reporting. The Board of County Commissioners will work with the third-party administrator to ensure proper grant administration.
Criteria: The GAO Standards – Section 1 – Fundamental Concepts of Internal Control – OV1.01 states in part:
Definition of Internal Control
Internal control is a process effected by an entity’s oversight body, management, and other personnel that provides reasonable assurance that the objectives of an entity will be achieved.
Additionally, GAO Standards – Section 2 – Establishing an Effective Internal Control System – OV2.04 states in part:
Components, Principles, and Attributes
Control Environment - The foundation for an internal control system. It provides the discipline and structure to help an entity achieve its objectives.
Risk Assessment - Assesses the risks facing the entity as it seeks to achieve its objectives. This assessment provides the basis for developing appropriate risk responses.
Information and Communication - The quality information management and personnel communicate and use to support the internal control system.
Monitoring - Activities management establishes and operates to assess the quality of performance over time and promptly resolve the findings of audits and other reviews.