Finding 559712 (2024-001)

Material Weakness
Requirement
B
Questioned Costs
-
Year
2024
Accepted
2025-05-06

AI Summary

  • Core Issue: The Foundation lacks detailed supporting documentation for disbursements, as individual invoices were not retained after shutting down the web portal.
  • Impacted Requirements: This situation violates the need for proper documentation as outlined in the approved document retention policy and federal guidelines.
  • Recommended Follow-Up: The Foundation should assess and improve its document retention practices and IT systems to prevent future data loss.

Finding Text

Criteria Documentation to support all disbursements should be maintained for a reasonable period of time, in accordance with an approved document retention policy in order to ensure proper financial reporting, internal control over financial reporting and to conform with rules and regulations included in the Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards (Uniform Guidance). Condition As part of the administration of its federal grant award, the Foundation established a web-based portal whereby recipients of the grant could submit supporting documentation to the Foundation to support the funds they were requesting be distributed under the requirements of the grant. Upon the conclusion of the Foundation’s grant award and with the permission of the Foundation’s oversight agency, the web-based portal was shut down. However, the data included within the portal – primarily the descriptions, amounts, dates, and categories were preserved from the portal as part of the Foundation’s monthly reviews. Invoices used to support the amounts distributed to recipients, was not maintained. Cause The data on the web-based portal was not backed up and stored in a manner consistent with best practices for document retention. Effect The Foundation no longer has access to the detailed supporting documentation, including individual invoices to support the amounts distributed to recipients. The Foundation does continue to retain summary level information of the amounts distributed and approvals of those distributions. Recommendation We recommend the Foundation evaluate its document retention practices and its use of information technology as part of document retention to ensure future data losses do not occur.

Corrective Action Plan

The Foundation acknowledges the auditor’s recommendations and shares the concern regarding the loss of documentation related to the portal shutdown. The portal was developed and hosted by a third-party IT vendor and used to collect and manage documentation for grant-related activities. Despite our communication with the vendor regarding the portal’s importance for reporting and documentation, appropriate data backup was not maintained. While the Foundation relied on the vendor to manage the technical infrastructure and ensure data integrity, we recognize the need for stronger oversight and internal controls related to third-party system management. As a result, we are actively reviewing our vendor management policies and will incorporate enhanced data retention and backup requirements into all future contracts involving critical data systems. The grant associated with this portal has been formally closed, and the State has issued closure documentation. While the loss of supporting documentation is regrettable, it did not impact the successful completion or reporting of the grant.

Categories

Internal Control / Segregation of Duties Allowable Costs / Cost Principles Reporting

Other Findings in this Audit

  • 1136154 2024-001
    Material Weakness

Programs in Audit

ALN Program Name Expenditures
93.323 Epidemiology and Laboratory Capacity for Infectious Diseases (elc) $5.07M