Finding Text
2024-004 – FAILURE TO COMPLETE THE SINGLE AUDIT TIMELY AND TO SUBMIT THE REQUIRED REPORTING PACKAGE TO THE FEDERAL AUDIT CLEARINGHOUSE Federal Program: Not applicable. Type of Finding: Significant deficiency in internal control over compliance; noncompliance. Repeat finding – reported in the prior year as finding 2023-005. Criteria: 2 CFR 200.501(a) requires a non-Federal entity that expends $750,000 or more in Federal awards during its fiscal year to have a single or program-specific audit conducted for that year. 2 CFR 200.512(a) requires the audit to be completed and the reporting package and data collection form (Form SF-SAC) to be submitted within the earlier of 30 calendar days after receipt of the auditor's reports or nine months after the end of the audit period, and 2 CFR 200.512(b) requires the auditee to electronically submit the data collection form and reporting package to the Federal Audit Clearinghouse. The Institute's grant agreements also require that an annual audit be performed. Condition: The audits of the Institute for the years ended December 31, 2022, 2023, and 2024 were not completed, and the reporting packages and data collection forms were not submitted to the Federal Audit Clearinghouse within the periods required by 2 CFR 200.512. Cause: The Institute has not established or implemented written policies, procedures, and related internal controls sufficient to ensure that the annual Single Audit is completed and that the reporting package and data collection form are submitted to the Federal Audit Clearinghouse by the required due date. Responsibility for monitoring these deadlines has not been assigned to specific personnel. Effect: The Institute did not comply with the audit and reporting requirements of the Uniform Guidance. Late submission of the reporting package may cause Federal awarding agencies and pass-through entities to impose additional award conditions or other remedies for noncompliance under 2 CFR 200.208 and 2 CFR 200.339, and precludes the Institute from qualifying as a low-risk auditee under 2 CFR 200.520. Questioned Costs: None Recommendation: The Institute should adopt written policies and procedures that assign responsibility for engaging the auditor, completing the annual Single Audit, and submitting the reporting package and data collection form to the Federal Audit Clearinghouse within nine months after each fiscal year end, and should maintain a compliance calendar to monitor those deadlines. Management's Views and Response: The Institute has engaged an auditor to complete the December 31, 2022, 2023, 2024, and 2025 Single Audits concurrently, and will submit each reporting package and data collection form to the Federal Audit Clearinghouse as each audit is completed. Thereafter, the Institute will complete the audit and submit the reporting package within nine months after year end.