Finding Text
Criteria: In accordance with 2 CFR § 200.331, a non-federal entity that passes federal awards to subrecipients is responsible for 1) evaluating each subrecipient’s risk of noncompliance, 2) monitoring the activities of subrecipients to ensure that the subaward is used for authorized purposes, in compliance with laws and the terms and conditions of the subaward, and 3) verifying that subrecipients have audits in accordance with the Uniform Guidance, if applicable. Adequate internal controls are required to ensure compliance with these requirements under 2 CFR § 200.303.
Condition: During our audit, we noted that the Parish did not have sufficient internal controls in place to ensure effective subrecipient monitoring. Specifically, there was no documented risk assessment of subrecipients prior to issuing subawards, the Parish did not perform periodic reviews or site visits to monitor subrecipient performance or compliance, and the subrecipient audit reports were not consistently obtained or reviewed.
Cause: As discussed in item 2024-001, the Parish encountered several challenges during the transition of administration and key personnel. Parish administration and management were immediately tasked with enhancing operations related to procedural concerns from the prior administration and performing the accounting function without sufficient documentation on several balances and transactions. The documented controls were not in practice because of this.
Effect: Failure to properly monitor subrecipients increases the risk that federal funds may be misused or not spent in accordance with program requirements to achieve program objectives. It also exposes the Parish to potential liability for questioned costs incurred by subrecipients to be repaid to the federal agency.
Recommendation: We recommend that the entity establish and implement formal policies and procedures for subrecipient monitoring in accordance with 2 CFR § 200.331. This should include conducting and documenting pre-award risk assessments, developing a subrecipient monitoring plan (e.g., site visits, desk reviews), reviewing subrecipient performance and audit reports on a regular basis.