Finding Text
Federal Award Program: U.S. Department of Commerce Pacific Coast Salmon Recovery - Pacific Salmon Treaty Program (Assistance Listing #11.438) Type of Finding: Significant deficiency in internal control over compliance Compliance Requirement: Allowable costs Criteria: Federal award terms and Uniform Guidance cost principles require costs charged to federal awards to be adequately supported and authorized. In addition, effective internal control over compliance should include documented approval of employee salary/wage rates and subsequent rate changes, such as through a pay rate authorization form or equivalent documentation, and independent review or approval of changes to pay rates before those rates are used to charge payroll costs to federal awards. Condition: Audit procedures identified that the Organization maintains employee salary and wage rates in a master rate spreadsheet; however, it does not maintain documentation to support approved pay rates. Evidence of approval for initial pay rates and subsequent rate changes was not retained. In addition, the master spreadsheet serves as the sole source of pay rate information and may be modified without documented oversight. Cause: The Organization has not designed and implemented a formal personnel action or pay rate approval process that requires documented authorization of initial pay rates and subsequent rate changes. The Organization relies on an internally maintained, editable spreadsheet as the primary support for pay rate information, without sufficient documented independent review, approval, or restriction over changes. Effect and Context: Unauthorized, unsupported, or incorrect pay rates could be entered into the payroll system and charged to federal awards without timely prevention or detection. If payroll or personnel compensation costs are charged to a major federal program, this deficiency could result in unallowable or unsupported payroll costs being charged to the program. Our sample size was 40 payroll trans ctions, and all selections in our sample used personnel pay rates for which evidence of approval could not be provided. Our sample was not statistically valid. Repeat finding: No. Auditor’s recommendation: We recommend that the Organization establish and implement formal payroll rate documentation and approval controls. At a minimum, management should maintain documentation to support all initial salary/wage rates and subsequent rate changes; require documented approval by an appropriate supervisor, executive, or governing body designee before pay rate changes are entered into the payroll system; restrict access to the master rate spreadsheet and maintain version history or change logs, and require independent review of all pay rate changes before payroll is processed. Management’s response: Management is in agreement with the finding. See corrective action plan.