Finding Text
Finding 2024-001: Lack of documentation of review and approval - Material Weakness Program name:Office for Coastal Management Assistance Listing: 11.473 Federal award Identification number: 20 NFWF 339630 Federal award year: 9/1/2020 - 9/30/2024 Federal awarding agency: U.S. Department of Commerce Criteria - In accordance with 2 CFR 200.303, recipients and subrecipients must establish, document and maintain effective internal control over Federal awards. These controls should be in compliance with Federal statutes, regulations, and the terms and conditions of the award, and should align with standards such as the “Standards for Internal Control in the Federal Government” (Green Book) or the COSO framework. This includes controls over: Expenses: Ensuring proper documentation and approval. (2 CFR 200.400(d) ) Reporting: Ensuring financial reports are accurate, complete, and reviewed prior to submission (2 CFR 200.328). Condition - The Organization has limited written processes of certain transaction classes. There was a pervasive lack of documentation of approval over transactions, including expenses, and reporting. Cause - The Organization did not maintain or consistently apply documentation protocols for internal control reviews. Formal documentation practices were not in place during the audit period. Effect - Lack of documentation as evidence that controls over compliance were being performed. Documentation should be maintained as evidence that sufficient control activities are in place and would effectively prevent or detect and correct noncompliance. Controls must be followed for every transaction and documentation of the control being performed must be maintained. Questioned costs - None identified. Perspective - The deficiency was pervasive across multiple compliance areas and was not isolated to a specific transaction or department. The scope indicates a systemic control weakness during the audit period. Identification of Repeat Findings - This is a repeat finding from the prior year (Finding 2023-002). As a result of the 2023 audit report, issued in February 2026, the Organization began the process of developing updated policies for compliance. In 2025, the Organization formally adopted new policies and procedures that align with the internal control standards per 2 CFR Part 200. Recommendation - We recommend that the Organization ensure updated policies and procedures are implemented and consistently applied. This includes: Documented review and approval of all transactions related to expenses, and reporting. Maintenance of written evidence supporting such reviews. Regular training and internal monitoring to ensure control procedures are consistently followed. Management response - Management agrees with this assessment and has committed to a corrective action plan. Management has also engaged with a new accounting firm to oversee the financial reporting functions at the Organization.