Criteria for Federal program risk.

CFR · 2024-01-01 · US · Title 2

(a) (b) (i) A Federal program administered under multiple internal control structures may have higher risk. When assessing risk in a large single audit, the auditor must consider whether weaknesses are isolated in a single operating unit (e.g., one college campus) or pervasive throughout the entity. (ii) When significant parts of a Federal program are passed through to subrecipients, a weak system for monitoring subrecipients would indicate higher risk. (2) Prior audit findings would indicate higher risk, particularly when the situations identified in the audit findings could have a significant impact on a Federal program or have not been corrected. (3) Federal programs not recently audited as major programs may be of higher risk than Federal programs recently audited as major programs without audit findings. (c) (2) Federal agencies, with the concurrence of OMB, may identify Federal programs that are higher risk. OMB will provide this identification in the compliance supplement. (d) (2) The phase of a Federal program in its life cycle at the Federal agency may indicate risk. For example, a new Federal program with new or interim regulations may have higher risk than an established program with time-tested regulations. Also, significant changes in Federal programs, statutes, regulations, or the terms and conditions of Federal awards may increase risk. (3) The phase of a Federal program in its life cycle at the auditee may indicate risk. For example, during the first and last

official document · source cfr-2024 · id 2:§ 200.519