Finding Text
FINDING 2022-002 Subject: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds - Internal Controls Federal Agency: Department of the Treasury Federal Program: COVID-19 - Coronavirus State and Local Fiscal Recovery Funds Assistance Listings Number: 21.027 Federal Award Number and Year (or Other Identifying Number): 20-1982-0-1-806 Compliance Requirement: Procurement and Suspension and Debarment Audit Finding: Material Weakness Condition and Context The County had not properly designed or implemented a system of internal controls, which would include appropriate segregation of duties that would likely be effective in preventing, or detecting and correcting, material noncompliance related to covered transactions made from State and Local Fiscal Recovery Funds (SLFRF). Prior to entering into subawards and covered transactions with SLFRF award funds, recipients are required to verify that such contractors and subrecipients are not suspended, debarred, or otherwise excluded. "Covered transactions" include, but are not limited to contracts for goods and services awarded under a non-procurement transaction (i.e. grant agreement) that are expected to equal or exceed $25,000. The verification is to be done by checking the Excluded Parties List System (EPLS), collecting a certification from that person, or adding a clause or condition to the covered transaction with that person. Due to Treasury's determination that the revenue loss eligible use category does not give rise to subawards, the County was only required to comply with suspension and debarment requirements related to covered transactions. Upon inquiry of the County in order to review the procedures in place for verifying that an entity with which it plans to enter into a covered transaction is not suspended, debarred, or otherwise excluded, the County divulged that a single employee was responsible for completing the verification of any vendor the County paid over $25,000 from SLFRF funds. The employee checked the SAMs exclusions for any vendor in which the purchase was to equal or exceed $25,000; however, there was no oversight or review to ensure the process was completed. The lack of internal controls was a systemic issue throughout the audit period. Criteria 2 CFR 200.303 states in part: "The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in 'Standards for Internal Control in the Federal Government' issued by the Comptroller General of the United States or the 'Internal Control Integrated Framework', issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). . . ." Cause A proper system of internal controls over the SLFRF expenditures was not designed by management of the County, which would include segregation of key functions to ensure SLFRF funds were being used appropriately. Embedded within a properly designed and implemented internal control system should be internal controls consisting of policies and procedures. Policies reflect the County's management of what should be done to effect internal controls, and procedures should consist of actions that would implement these policies. Effect Without the proper implementation of an effectively designed system of internal controls, including policies and procedures that provide segregation of duties and additional oversight as needed, the internal control system cannot be capable of effectively preventing, or detecting and correcting, material noncompliance. Noncompliance with the provisions of federal statutes, regulations, and the terms and conditions of the federal award could result in the loss of future federal funding to the County. Questioned Costs There were no questioned costs identified. Recommendation We recommended that management of the County design and implement a proper system of internal controls that would provide segregation of duties for the review covered transactions. Additionally, policies and procedures should be implemented to ensure appropriate reviews, approvals, and oversight are taking place. Views of Responsible Officials For the views of responsible officials, refer to the Corrective Action Plan that is part of this report.