Institutional Federal Compliance Report 2021

STATE OF NEW YORK

Schedule of Findings and Questioned Costs

Year ended March 31, 2018

Possible Asserted Effect Failure to perform a timely risk assessment over each subrecipient to determine appropriate subrecipient monitoring procedures may result in procedures that are insufficient to detect noncompliance with laws, regulations, and the terms and conditions of the award. Statistical Sampling The sample was not intended to be, and was not, a statistically valid sample. Repeat Finding A similar finding was included in the 2017 Single Audit Report as finding number 2017-010 on pages 31– 32. Questioned Costs None. Recommendation We recommend the Office implement and utilize its risk assessment procedures developed during the current year and utilize the results of the risk assessment performed to determine the appropriateness of its subrecipient monitoring procedures. Views of Responsible Officials Recommendation accepted. Agency has a risk assessment process in place and to elevate the process, Agency has developed and is currently implementing enhanced risk assessment procedures. Reference the corrective action plan for further details.

22

(Continued)