. CHAPTER 15 PREPARING FOR AN OMB CIRCULAR A-133 AUDIT TABLE OF CONTENTS PAGE DESCRIPTION 15-2 Overview 15-2 Auditee Responsibilities 15-3 Key Deadlines 15-4 Findings Related to Federal Awards 15-4 Audit Findings Follow-up 15-8 Schedule of Expenditures of Federal Awards 15-9 List of CSU Reports Commonly Utilized in the A-133 Audit 15-13 Changes to Federal Grant Policies and Single Audits 15-14 Single Audit A-133) PBC Lists Higher Scope Limited Scope Exhibit 23 Sample Reconciliation of SEFA Exhibit 24 Sample Single Audit Risk Assessment Questionnaire 15.00-1 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . OVERVIEW The Single Audit Act Amendments of 1996 was enacted to streamline and improve the effectiveness of audits of federal awards and to reduce the audit burden on states, local governments, and not-for-profit organizations (NPOs). Office of Management and Budget (OMB) Circular A-133 states that nonfederal entities that expend $500,000 or more of federal awards in a fiscal year should have a single audit. This section of the manual is designed to provide the user with an understanding of how to prepare for a successful A-133 audit and, in addition, describes the roles of the independent auditor and campus personnel in the audit process. AUDITEE RESPONSIBILITIES OMB Circular A-133 establishes the following responsibilities for the campus/auditee: Identifying in its accounts all federal awards received and expended and the federal programs under which they were received, including, as applicable, the CFDA title and number, the award number and year, the name of the federal agency, and the name of the pass-through entity. Establishing and maintaining effective internal control over compliance for federal programs that provides reasonable assurance that the auditee is managing federal awards in compliance with laws, regulations, and the provisions of contracts or grant agreements that could have a material effect on each of its federal programs. Complying with laws, regulations, and the provisions of contracts or grant agreements related to each of its federal programs. Following up and taking corrective action on audit findings (including the preparation of the previously discussed summary schedule of prior audit findings and a corrective action plan); A-133 recommends that corrective action should be initiated within six months after the receipt of the audit report and proceed as rapidly as possible. AUDITOR CONSIDERATION OF INTERNAL CONTROLS OVER COMPLIANCE FOR FEDERAL PROGRAMS OMB Circular A-133, Audits of States, Local Governments, and Non-Profit Organizations (Circular A-133), establishes requirements for additional audit procedures and reporting relative to the auditor's consideration of internal control over compliance for major programs. Those requirements are beyond those of a financial statement audit conducted in accordance with generally accepted auditing standards (GAAS) and Government Auditing Standards. Circular A133, states that the auditor should: Perform procedures to obtain an understanding of internal control over compliance for federal programs that is sufficient to plan the audit to support a low assessed level of control risk for major programs. 15.00-2 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . Plan the testing of internal control over compliance for major programs to support a low assessed level of control risk for the assertions relevant to the compliance requirements for each major program. Perform testing of internal control over compliance as planned. Report on internal control over compliance describing the scope of the testing of internal control and the results of the tests and, where applicable, referring to the separate schedule of findings and questioned costs. This schedule includes, where applicable, a statement that significant deficiencies in internal control over compliance for major programs were identified in the audit and whether any such deficiencies were material weaknesses. AUDITOR RESPONSIBILITIES FOR PERFORMING A COMPLIANCE AUDIT In a Circular A-133 compliance audit, the auditor performs the following: a) Identify the auditee's major programs to be tested and reported on for compliance b) Identify the applicable compliance requirements for each major program c) Determine which of the applicable compliance requirements identified in step b could have a direct and material effect on each major program d) Plan the engagement e) Consider relevant portions of the auditee's internal control over compliance for each direct and material compliance requirement for each major programs f) Obtain sufficient appropriate audit evidence, which involves testing internal control and compliance with direct and material compliance requirements for each major program g) Consider indications of abuse h) Consider subsequent events i) Form an opinion about whether the auditee complied with the direct and material compliance requirements j) Perform follow-up procedures on previously identified findings KEY DEADLINES Campus to submit preliminary schedule of expenditures of federal awards (SEFA) via YES (TM1) – July 28, 2015 Office of the Chancellor team reviews campus submissions of SEFA – July 28-August 7, 2015 KPMG to be provided with preliminary SEFA – August 7, 2015 Fieldwork for Higher Scope Student Financial Aid (SFA) Campuses – August – September, 2015 Fieldwork for non-SFA Higher Scope procedures – TBD (based on selection of programs and amounts included in the SEFA submissions) 15.00-3 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . Higher Scope campuses to have completed PBCs ready prior to the start of final fieldwork and arrival of their KPMG audit team – see PBC listing for specific dates associated with all requests Other campuses to have completed General A-133 PBCs ready prior to the start of final fieldwork – see PBC listing for specific dates associated with all requests KPMG campus teams have an exit meeting with campus president and submit FINAL A-133 findings to KPMG Systemwide team (single audit summary of deficiencies document) – Varies by campus Issue A-133 report – October 15, 2015 FINDINGS RELATED TO FEDERAL AWARDS Circular A-133 states that the auditor should report as audit findings in the federal awards section of the schedule of findings and questioned costs: a) Significant deficiencies in the internal control over major programs. The auditor's determination of whether a deficiency in internal control is a significant deficiency for the purpose of reporting an audit finding is in relation to a type of compliance requirement for a major program or to an audit objective identified in the Compliance Supplement. The auditor should identify significant deficiencies that are individually or cumulatively material weaknesses. (See Chapter 9 Preparing for the Financial Statements Audit for definitions of significant deficiencies and material weaknesses in accordance with SAS 115). b) Material noncompliance with the provisions of laws, regulations, contracts, or grant agreements related to a major program. The auditor's determination of whether noncompliance with the provisions of laws, regulations, contracts, or grant agreements is material for the purpose of reporting an audit finding is in relation to a type of compliance requirement for a major program or an audit objective identified in the Compliance Supplement. c) Known questioned costs that are greater than $10,000 for a type of compliance requirement for a major program. Known questioned costs are those specifically identified by the auditor. In evaluating the effect of questioned costs on the opinion on compliance, the auditor should consider the best estimate of the total costs questioned (likely questioned costs), not just the questioned costs specifically identified (known questioned costs). The auditor also should report (in the schedule of findings and questioned costs) known questioned costs when likely questioned costs are greater than $10,000 for a type of compliance requirement for a major program. For example, if the auditor specifically identifies $7,000 in questioned costs but, based on his or her evaluation of the effect of questioned costs on the opinion on compliance, estimates that the total questioned costs are in the $50,000 to $60,000 range, the auditor would report a finding that identifies the known questioned costs of $7,000. Although the auditor is not required to report his or her estimate of the total questioned costs, the auditor would include information to provide proper perspective for judging the prevalence and consequences of the questioned costs. 15.00-4 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . d) Known questioned costs that are greater than $10,000 for programs that are not audited as major. Because (except for audit follow-up) the auditor is not required to perform audit procedures for federal programs that are not major, the auditor normally will not find questioned costs. However, if the auditor does become aware of questioned costs for a federal program that is not audited as a major program (for example, as part of audit follow-up or other audit procedures) and the known questioned costs are greater than $10,000, then the auditor should report this as an audit finding. e) The circumstances concerning why the auditor's report on compliance for major programs is other than an unqualified opinion, unless such circumstances are otherwise reported as audit findings in the schedule of findings and questioned costs for federal awards (for example, a scope limitation that is not otherwise reported as a finding). f) Known fraud affecting a federal award, unless such fraud is otherwise reported as an audit finding in the schedule of findings and questioned costs for federal awards. Circular A-133 does not require the auditor to make an additional reporting when the auditor confirms that the fraud was reported outside of the auditor's reports under the direct reporting requirements of Government Auditing Standards. g) Instances where the results of audit follow-up procedures disclosed that the summary schedule of prior audit findings prepared by the auditee in accordance with Section 315(b) of Circular A-133 materially misrepresents the status of any prior audit finding. h) Government Auditing Standards states that auditors should report, as applicable to the objectives of the audit, abuse that is either quantitatively or qualitatively material. For abuse involving federal awards that is material to the financial statement amounts, the auditor typically would present the finding in the financial statement section of the schedule of findings and questioned costs and refer to it from the Government Auditing Standards report. For abuse involving federal awards that is material to a major program, the auditor typically would present the finding in the federal awards section of the schedule of findings and questioned costs and refer to it from the Circular A-133 report. WHEN FINDINGS ARE REPORTED All questioned costs that exceed or are expected to exceed $10,000 are required to be reported as findings in the Independent Auditors’ Report on Compliance for Each Major Program; Report on Internal Control Over Compliance; and Report on Schedule of Expenditures of Federal Awards Required by OMB Circular A-133, Audits of States, Local Governments, and Non-Profit Organizations (Compliance and Control Report). In addition, such compliance findings will generally be accompanied by a control deficiency in the Compliance and Control Report, if it is determined that ineffective controls caused the errors noted. However, it is uncommon to have a compliance finding that is not associated with a reported control deficiency. Similarly, it is possible to have a control deficiency that is not associated with noncompliance. An example of this would be a situation where no identified controls over a compliance requirement were in place, yet the auditors’ sample did not yield any exceptions. Since the auditor is required 15.00-5 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . to report on both compliance and controls over compliance, such a situation could result in a reported control deficiency. For findings not associated with a question cost, the determination as to whether it will be reported in the Compliance and Control Report will generally be based on the following criteria: a) Noncompliance at any one particular campus that constitutes an error rate greater than 10-20% of the sample size depending on the particular compliance requirement b) Combined noncompliance at more than one campus that constitutes an error rate greater than 5% of the sample size for any particular compliance requirement (for the system as a whole). Sometimes a campus, on a stand alone basis, may have some noted exceptions that alone would not warrant inclusion in the Compliance and Control Report. However, if there are exceptions in a particular compliance requirement that cross several or more campuses, it may be considered a systemic issue and may therefore be reported in the Compliance and Control Report. The auditor generally can’t conclude on which findings will be included in the Compliance and Control Report until all potential findings at all campuses are resolved. AUDIT FINDING FOLLOW-UP The campus is responsible for follow-up and corrective action on all audit findings. As part of this responsibility, the campus shall prepare a summary schedule of prior audit findings. The campus shall also prepare a corrective action plan for current year audit findings. The summary schedule of prior audit findings and the corrective action plan shall include the reference numbers the auditor assigns to audit findings. Since the summary schedule may include audit findings from multiple years, it shall include the fiscal year in which the finding initially occurred. SUMMARY SCHEDULE OF PRIOR AUDIT FINDINGS The summary schedule of prior audit findings shall report the status of all audit findings included in the prior audit (e.g., FY2014) relative to Federal awards. The summary schedule shall also include audit findings reported in a prior audit (e.g., FY2013 and prior) where corrective action was not fully implemented in the prior year. (1) When audit findings were fully corrected, the summary schedule need only list the audit findings and state that corrective action was taken. (2) When audit findings were not corrected or were only partially corrected, the summary schedule shall describe the planned corrective action as well as any partial corrective action taken. (3) When corrective action taken is significantly different from corrective action previously reported in a corrective action plan or in the federal agency's or pass-through entity's management decision, the summary schedule shall provide an explanation. 15.00-6 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . CORRECTIVE ACTION PLAN At the completion of the audit, the campus shall prepare a corrective action plan to address each audit finding included in the current year auditor's reports. The corrective action plan shall provide the name(s) and contact information of the contact person(s) responsible for corrective action, the corrective action planned, and the anticipated completion date. If the campus does not agree with the audit findings or believes corrective action is not required, then the corrective action plan shall include an explanation and specific reasons. SCHEDULE OF EXPENDITURE OF FEDERAL AWARDS (SEFA) IDENTIFICATION OF FEDERAL AWARDS The campus should identify in its accounts all federal awards received and expended, as well as the federal programs under which they were received. Federal program and award identification includes, as applicable, the CFDA title and number, the award number and year, the name of the federal granting agency, and the name of the pass-through entity. Using this information, the campus should be able to reconcile amounts presented in the financial statements to related amounts in the SEFA. BASIS FOR DETERMINING WHEN THE FEDERAL AWARD IS EXPENDED FEDERAL AWARDS BASIS FOR DETERMINING WHEN EXPENDED Grants, cost reimbursement contracts, When the expenditure or expense transactions cooperative agreements, and direct occur appropriations Amounts passed through to subrecipients When the disbursement is made to the subrecipient Loan and loan guarantees When the loan proceeds are used Donated property, surplus property including donated When the property is received Food commodities When the food commodities are distributed or consumed Interest subsidies When amounts are disbursed entitling the entity to the subsidy Endowments When federally restricted amounts are held Program income When received or used 15.00-7 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . CFDA NUMBER NOT AVAILABLE The campus may be unable to obtain the CFDA number, which is sometimes the case for new federal programs and R&D programs. In addition, cost-type contracts normally will not have a CFDA number. When the CFDA number is not available, the campus could indicate that the CFDA number is not available and include, if available, another identifying number, such as a contract or grant number. Specifically, if the program has a contract or grant number, the number shown as the CFDA number could be the awarding agency's 2-digit prefix listed for the agency (i.e., Department of Education 84, Health and Human Services 93, etc.) from the www.CFDA.gov website (or 99 if the agency is not listed) followed by the contract or grant number. If the program does not have a contract or grant number, the number shown as the CFDA number could be the awarding agency's 2-digit prefix (or 99) followed by "UNKNOWN." TREATMENT OF PASS-THROUGH AWARDS Circular A-133 defines a subrecipient as an entity that expends federal awards that are received from a pass-through entity to carry out a federal program. Characteristics of a subrecipient include: 1. Determines who is eligible to receive federal financial assistance; 2. Has its performance measured against whether the objects of the federal program are met; 3. Has responsibility for programmatic decision making; 4. Has responsibility for adherence to applicable federal program compliance; and 5. Uses the federal funds to carry out a program of the organization as compared to providing goods or services for a program or pass-through entity (which describes a vendor relationship). State or local government redistributions of federal awards to subrecipients, known as "passthrough awards," should be treated by the subrecipient as though they were received directly from the federal government. Circular A-133 states that the schedule should include the name of the pass-through entity and the identifying number assigned by the pass-through entity for federal awards received as a subrecipient. SUPPORT FOR FEDERAL AWARDS REPORTED AS EXPENDED ON THE REPORTING PACKAGE The auditors will need to test the accuracy of the amounts of federal awards reported as expended on the campus reporting package page that is used to compile the systemwide SEFA for the fiscal year 2014-15. These amounts reported are typically supported using SAM 07 reports that contain all disbursements made between July 1, 2014 and June 30, 2015. The SAM 07 reports should be provided to the auditors for each type of grant award expended. SUPPORT FOR AMOUNTS REPORTED AS EXPENDED ON THE FISAP The auditors will also need to test the accuracy of financial aid reported as expended on the FISAP for the award year. Be prepared to provide the auditors with supporting documents for amounts reported using such items as COD report queries, Direct Loan School Account Statements, PeopleSoft queries, etc. 15.00-8 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . RECONCILIATION SCHEDULE OF REPORTING PACKAGE SEFA TO FISAP AND GENERAL LEDGER Another procedure the auditors will perform is to test that the amounts reported on the SEFA are reconcilable with other financial reports submitted for those same grant programs to federal funding agencies. The most common example of this type of reconciliation would be to compare the student financial aid amounts reported as expended on the reporting package to the amounts reported as expended on the FISAP. The amounts included in SEFA per the reporting package are to be based on amounts disbursed during the campus fiscal year (July 1, 2014 and June 30, 2015). Conversely, the amounts reported in the FISAP are based on amounts disbursed for a specified award year (all disbursements made for 2014-15 awards granted). Thus, a reconciliation schedule is needed to bridge the gap. See Exhibit 23 for an example of the reconciliation. Given the difference in measurement periods stated above, the amounts presented in the SEFA per the reporting package will not agree to amounts included in the FISAP. The campus would need to provide supporting documentation for the various reconciling items. For campuses that establish a unique general ledger reference code in PeopleSoft, a query generated PeopleSoft that supports these timing differences in disbursements and award years would provide adequate support. CSU FUNDS FOR FEDERALLY FUNDED PROGRAMS COVERED BY THE A-133 AUDIT State / CSU Fund STUDENT AID 0948 FINANCIAL 401, 403, 406, 407, 408, 409, 410, 411, 412, 413, 434, 436, 485 Non Financial Aid 465 PLANNING Items on the PBC list must be centrally accumulated to be provided to the audit team on the first day of fieldwork or sooner. All schedules must be clearly labeled and cross-referenced to the PBC list. When posted in SharePoint for electronic delivery, please ensure that the campus name as well as the PBC reference number is included in the title of the file. Additionally, please ensure that any Personally Identifiable Information (PII) is removed from the files. Although the PBC items will be prepared by Financial Aid, the respective campus GAAP Coordinator should also be prepared to act as the point of delivery and liaison with the audit team. AUDIT TERMINOLOGY The terminology used by independent auditors may not be understood by the individuals responsible for preparing audit schedules and thus they may be unable to provide the information requested. Following are some key terms with their definitions used by independent auditors: 15.00-9 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . Cognizant Agency – A Federal agency designed to carry out the federal responsibilities with regard to a single audit. For recipients expending more than $50 million a year in federal awards, the cognizant agency for audit will be the federal awarding agency that provides the predominant amount of direct funding to the recipient unless the OMB makes a specific cognizant agency for audit assignment. Federal award. Federal financial assistance and federal cost-reimbursement contracts that nonfederal entities receive directly from federal awarding agencies or indirectly from pass-through entities. It does not include procurement contracts, under grants or contracts, used to buy goods or services from vendors. Nonfederal entity A state, local government, or non-profit organization (NPO). Recipient. A nonfederal entity that expends federal awards received directly from a federal awarding agency to carry out a federal program. Pass-through entity. A nonfederal entity that provides a federal award to a subrecipient to carry out a federal program. Subrecipient. A nonfederal entity that expends federal awards received from a pass-through entity to carry out a federal program but does not include an individual who is a beneficiary of such a program. A subrecipient may also be a recipient of other federal awards directly from a federal awarding agency. Vendor. A dealer, distributor, merchant, or other seller providing goods or services that is required for the conduct of a federal program. These goods or services may be for an organization's own use or for the use of beneficiaries of the federal program. LIST OF CSU REPORTS COMMONLY USED DURING THE AUDIT SAM 07 – Pre-closing or post-closing trial balance used to prepare legal basis balance sheet accounts that support the GAAP conversion template. Commonly referred to as the general ledger for the audit process. OTHER REPORTS THAT HAVE PROVED VALUABLE FOR THE AUDIT PROCESS: The June 30th report from ECSI, third party loan service provider, regarding Perkins and Nursing student loans receivable balances. This report can be used to determine entries needed for accrued interest income and allowances for doubtful accounts. This report should also be used to verify that the year-end GAAP balances for Perkins and Nursing loans receivable have been accurately recorded. CHANGES TO FEDERAL GRANT POLICIES AND SINGLE AUDITS In December 2013, the OMB, issued Uniform Administrative Requirements, Cost Principles, and Audit Requirements for Federal Awards Final Rule (Uniform Guidance). The effective date of the new Uniform Guidance is for years beginning after December 26, 2014. Accordingly, the CSU will be subject to the Uniform Guidance for the fiscal year ending June 30, 2016. However, 15.00-10 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . the Uniform Guidance will apply to funding or funding increments received after December 2014. Accordingly, it is possible that the audit of the June 30, 2015, Federal Awards would be subject to audit both under the old rules and the new Uniform Guidance. A summary of the changes is as follows: ADMINISTRATIVE REQUIREMENTS 1. Procurement – Will provide five prescriptive procurement methods 2. Pass through entities – Clarifies Federal expectations, including subrecipient monitoring 3. Internal Control – Clarifies Federal expectations about establishing and maintaining effective internal control over compliance. Entities should comply with COSO COST PRINCIPLES 1. Consolidates cost principles for higher education institutions, state and local governments and other not-for-profits 2. Includes significant differences in time and effort documentation requirements a. Emphasis on internal controls b. Less prescriptive guidance on documentation c. Changes related to indirect costs CHANGES TO THE SINGLE AUDIT 1. Increases threshold from $500,000 to $750,000 2. Changes risk assessments for major program determination 3. Changes questioned costs threshold from $10,000 to $25,000 4. Decreases percentage of coverage to: a. 40% for no low-risk auditees (currently 50%) b. 20% for low-risk auditees (currently 25%) c. Changes single audit reporting and requires a senior level representative certification upon submission and makes single audit reports publically available 5. Other changes expected when new Compliance Supplement is released 15.00-11 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . A-133 CONTACTS Office of the Chancellor Dean Kulju, Director, Director, Student Financial Aid (562) 951-4737; dkulju@calstate.edu Sue DeRosa, Director, Director, Sponsored Programs Administration (562) 951- 4213; sderosa@calstate.edu Sheralin Klinthong, Associate Director, Financial Reporting and Review (562) 951-4548; sklinthong@calstate.edu KPMG Brett Burns, Manager (213) 533-3039; bburns@kpmg.com CERTIFICATION OF DATA Beginning with fiscal year ended June 30, 2015, the certification previously required in connection with the submission of the SCO GAAP templates has been superseded by a more all-encompassing form now located in Chapter 11.03 of this manual and which is fully described in Chapter 11.02. The new form is intended to include confirmation by each campus of the quality and completeness of the data submitted on all templates required by this chapter. It remains important that the campus management thoroughly review the schedules prepared by staff to ensure accuracy. The CO has a very short period in which to consolidate the campus data and to prepare other required schedules. It cannot perform in-depth reviews of the submissions and comparisons with other available data. In the event the CO identifies an unacceptable level of errors, the submission will be rejected and returned to the campus with those errors noted. Re-submissions, when necessary, need to be given high priority by the campus so the CSU’s filing obligations with the SCO can be met. 15.00-12 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015 . REVISION CONTROL Document Title: CHAPTER 15 – PREPARING FOR AN OMB CIRCULAR A-133 AUDIT REVISION AND APPROVAL HISTORY Section(s) Revised Summary of Revisions Revision Date Changes to Federal Grant Policies and Single Audits Added discussion on the “upcoming changes to the Federal Grant Policies and Single Audits” change in questioned costs threshold under the Uniform Guidance April 2015 Updated the Single Audit Risk Assessment Questionnaire April 2015 Exhibit 24 15.00-13 GAAP Manual | Preparing for an OMB Circular A-133 Audit | June 30, 2015