Finding Text
Federal Agency: Department of Health and Human Services Federal Program: Research and Development Cluster Assistance Listing Number: 93.847 & 93.867 Federal Award Identification Number and Year: Various Award Period: January 1, 2022, through December 31, 2022 Type of Finding: Other Matters Finding related to Compliance within Uniform Guidance and Material Weakness in Internal Control Over Compliance Criteria or Specific Requirement: According to 2 CFR Part 200, Subpart D, Section 200.332, pass-through entities are required to perform certain subrecipient monitoring procedures. These procedures include providing the subrecipient necessary award information so that the federal award is used in accordance with federal regulations, evaluating risks of noncompliance of subrecipients, implementing monitoring procedures based upon identified risks, and obtaining a copy of the subrecipients? annual audit and taking appropriate action on deficiencies detected through the audits, just to name a few. Lastly, in accordance with 2 CFR Title 2, Subtitle A, Chapter 2, Part 200, Subpart D, 200.303, the non-federal entity must establish and maintain effective internal controls over the federal award to provide reasonable assurance that the non-federal entity is managing the award in compliance with federal regulations. Condition: The Organization did not verify whether the subject subrecipients received a required annual audit under 2 CFR Part 200. By not verifying and obtaining a copy of the most recent audit of the subrecipients, the Organization was unaware if any enforcement actions against noncompliant subrecipients had occurred. Context: During our testing, it was noted that the Organization did not have any procedures in place to monitor their subrecipients and did not secure the required annual report for any of the subrecipients tested. Cause: Prior to 2022, the Organization was unaware of this federal requirement. Effect: The Organization did not comply with subrecipient monitoring requirements relative to obtaining the annual audit reports and performing the appropriate follow-up procedures (if necessary). By not securing the required annual report of subrecipients, there is a risk that subrecipients could have instances of deficiencies or noncompliance that directly impacts the award, but the Organization is unable to respond accordingly, given it would not be aware of the issues identified. Recommendation: We recommend the Organization implement a comprehensive process (and relevant internal controls) to ensure all elements of 2 CFR Part 200, Subpart D, Section 200.332 are being met, including obtaining a copy of the subject subrecipients? annual audits and taking appropriate action on deficiencies detected through the audits. Tools, such as checklists or electronic workflows, can assist in ensuring all required elements are being met. Repeat Finding: No. Questioned Costs: None Views of Responsible Officials: There is no disagreement with the audit finding. See Corrective Action Plan prepared by the Organization.