Finding 564525 (2023-018)

Finding 2023-018 – Lack of Internal Controls and Noncompliance with Subrecipient Monitoring Requirement – Emergency Rental Assistance Program (Repeat Finding – 2021-002, 2022-011) FEDERAL AGENCY: U.S. Department of the Treasury ASSISTANCE LISTING: 21.023 FEDERAL PROGRAM NAME: Emergency Rental Assistance Program FEDERAL AWARD NUMBER: ERAE0418 FEDERAL AWARD YEAR: 2023 CONTROL CATEGORY: Subrecipient Monitoring QUESTIONED COSTS: $1,739,575 Condition: During the process of documenting the County’s internal controls regarding federal disbursements, we noted that Oklahoma County has not established the following procedures to ensure compliance with the Subrecipient Monitoring requirements: • Evaluate each subrecipient’s risk of noncompliance for purposes of determining the appropriate subrecipient monitoring related to the subaward (2 CFR § 200.332(c)). • Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, complies with the terms and conditions of the subaward, and achieves performance goals (2 CFR § 200.332(d) through (f)). Further, when performing tests over compliance of the federal grant, it was noted that the County did not perform any subrecipient monitoring procedures; however, the County did implement a subaward agreement that was designed to ensure the subrecipients understand and use the funds in accordance with federal regulations, terms, and conditions of the subaward. Cause of Condition: Policies and procedures have not been designed and implemented to ensure the County complies with federal laws and regulations and grant agreements. Effect of Condition: This condition resulted in noncompliance with federal laws and regulations and grant requirements. Recommendation: OSAI recommends the County comply with federal laws and regulations and grant agreements by designing and implementing risk assessments for non-compliance and ensuring Subrecipient Monitoring is performed. Management Response: Chairman of the Board of County Commissioners: Oklahoma County will comply with federal laws and regulations and grant agreements by creating award agreements that are designed and implemented to ensure Subrecipient Monitoring is performed. Criteria: GAO Standards – Section 2 – Establishing an Effective Internal Control System – OV2.23 states in part: Objectives of an Entity – Compliance Objectives Management conducts activities in accordance with applicable laws and regulations. As part of specifying compliance objectives, the entity determines which laws and regulations apply to the entity. Management is expected to set objectives that incorporate these requirements. 2 CFR § 200.303(a) Internal Controls reads as follows: The non-Federal entity must: (a) Establish and maintain effective internal control over the Federal award that provides reasonable assurance that the non-Federal entity is managing the Federal award in compliance with Federal statutes, regulations, and the terms and conditions of the Federal award. These internal controls should be in compliance with guidance in “Standards for Internal Control in the Federal Government” issued by the Comptroller General of the United States or the “Internal Control Integrated Framework”, issued by the Committee of Sponsoring Organizations of the Treadway Commission (COSO). 2 CFR § 200.332 states: All pass-through entities must: (a) Ensure that every subaward is clearly identified to the subrecipient as a subaward and includes the following information at the time of the subaward and if any of these data elements change, include the changes in subsequent subaward modification. When some of this information is not available, the pass-through entity must provide the best information available to describe the Federal award and subaward… (b) Evaluate each subrecipient's risk of noncompliance with Federal statutes, regulations, and the terms and conditions of the subaward for purposes of determining the appropriate subrecipient monitoring described in paragraphs (d) and (e) of this section, which may include consideration of such factors as: ... (c) Consider imposing specific subaward conditions upon a subrecipient if appropriate as described in § 200.208. (d) Monitor the activities of the subrecipient as necessary to ensure that the subaward is used for authorized purposes, in compliance with Federal statutes, regulations, and the terms and conditions of the subaward; and that subaward performance goals are achieved... (e) Depending upon the pass-through entity's assessment of risk posed by the subrecipient (as described in paragraph (b) of this section), the following monitoring tools may be useful for the pass-through entity to ensure proper accountability and compliance with program requirements and achievement of performance goals: ... (f) Verify that every subrecipient is audited as required by Subpart F of this part when it is expected that the subrecipient's Federal awards expended during the respective fiscal year equaled or exceeded the threshold set forth in § 200.501. (g) Consider whether the results of the subrecipient's audits, on-site reviews, or other monitoring indicate conditions that necessitate adjustments to the pass-through entity's own records. (h) Consider taking enforcement action against noncompliant subrecipients as described in § 200.339 of this part and in program regulations.