Finding Text
Finding 2023-007 Failure to Create and Implement a Suitable Procurement Policy
Type of Finding:
Noncompliance and Material Weakness in Internal Control over Compliance
Condition and Context:
The Organization created and implemented a procurement policy to govern its federal expenditures. The procurement policy implemented by the Organization failed to include several key elements, including clearly establishing and governing the various expenditure purchasing thresholds, documenting a sufficient bid process for competitive bid proposals, and standards of conduct covering conflict of interest for employees involved in the bid evaluation process. Further, while the policy was in place, the Organization failed to implement the elements of the policy into its procurement process. As part of audit procedures, 12 transactions were included in the testing population and all 12 were tested. Of the testing group, the auditor identified 4 transactions that required competitive bid procedures for which the Organization failed to conduct. The Organization also failed to document its rationale to limit competition for all items tested.
Criteria:
Uniform Guidance requires organizations that receive federal funds to establish and maintain effective internal controls, including a documented procurement policy. A procurement policy outlines the procedures, thresholds, and guidelines for acquiring goods and services, ensuring transparency, competition, and cost-effectiveness while preventing fraud, waste, and abuse. Procurement policies must include relevant elements detailed in 2 CFR §200.317 - §200.327. The Organization is required to implement the procurement policy in its procedures and to develop internal controls to ensure its effectiveness.
Cause:
The Organization had not recognized the significance of a well-structured procurement policy in safeguarding federal funds and ensuring compliance. This lack of awareness led to inadequate attention being given to the establishment of such a policy. Once created, leadership failed to identify an effective implementation strategy to ensure compliance. These issues were exacerbated by a failure to maintain appropriate documentation and to have sufficient internal controls over the procurement process.
Effect:
The absence of a documented procurement policy exposes the Organization to several risks and potential consequences. Without established guidelines, there is a higher likelihood of inconsistent procurement practices, leading to inefficiencies and increased costs. The absence of a defined procurement process could result in a lack of transparency and accountability in vendor selection and contract award decisions. Failure to have necessary safeguards in standards of conduct over employee actions could result in unreported conflicts of interest or inappropriate actions taking in award decisions.
Questioned Costs:
Known questioned costs of $24,645 were identified.
Repeat Finding:
This is not a repeat finding.
Recommendation:
It is recommended that the Organization review their procurement policy in line with Uniform Guidance standards and update the policy to include the missing elements. The Organization should also identify an effective implementation plan to ensure that the procedures over procurement include the elements detailed in its procurement policy. Finally, it is recommended that the Organization implement an effective system of internal controls to ensure that the Organization's procurements are compliant with federal requirements.
Views of Responsible Officials:
The Organization retained a licensed CPA firm with significant expertise in financial reporting and single audit compliance. The Organization will revise and implement a formal Procurement Policy that fully aligns with Uniform Guidance and federal regulations and conduct mandatory training for all staff involved in the procurement process.