Reports

Small Business Administration OIG

SBA’s Oversight of Restaurant Revitalization Fund Recipients

We reviewed the U.S. Small Business Administration’s (SBA) oversight of Restaurant Revitalization Fund (RRF) recipients. The American Rescue Plan Act of 2021 authorized SBA to administer the RRF and provided $28.6 billion to assist eligible small businesses adversely affected by the Coronavirus Disease 2019 (COVID-19) pandemic. We determined program officials developed a plan for monitoring RRF award recipients use of funds and recovering unused or improperly awarded funds. However, program implementation was not executed in accordance with the plan. We made six recommendations for SBA to...

Full Details: Oversight.gov Report Page

Audit | 9/29/2023

Election Assistance Commission OIG

Audit of the HAVA Grants Awarded to the State of Wisconsin

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited $27.4 million in funds received by the State of Wisconsin under the Help America Vote Act. The objectives of the audit were to determine whether the State of Wisconsin Elections Commission: 1) used funds for authorized purposes in accordance with Section 101 and Section 251 of HAVA and other applicable requirements; 2) properly accounted for and controlled property purchased with HAVA payments; and 3) used the funds in a manner consistent with the informational plans provided to EAC. The audit...

Full Details: Oversight.gov Report Page

Audit | 9/27/2023

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of Missouri

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited $27.4 million in funds received by the State of Missouri under the Help America Vote Act. The objectives of the audit were to determine whether the Missouri Office of the Secretary of State: 1) used funds for authorized purposes in accordance with Section 101 and Section 251 of HAVA and other applicable requirements; 2) properly accounted for and controlled property purchased with HAVA payments; and 3) used the funds in a manner consistent with the informational plans provided to EAC. The audit...

Full Details: Oversight.gov Report Page

Audit | 8/25/2023

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of Alaska

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited $15.2 million in funds received by the State of Alaska under the Help America Vote Act. The objectives of the audit were to determine whether the Office of the Lieutenant Governor of Alaska: 1) used funds for authorized purposes in accordance with Section 101 and Section 251 of HAVA and other applicable requirements; 2) properly accounted for and controlled property purchased with HAVA payments; and 3) used the funds in a manner consistent with the informational plans provided to EAC. The audit...

Full Details: Oversight.gov Report Page

Audit | 8/02/2023

Tennessee Valley Authority OIG

Remote Application and Desktop Virtualization Client

The Office of the Inspector General audited the Tennessee Valley Authority’s (TVA) use of remote application and desktop virtualization client due to the risks of (1) potential system intrusion through misconfigurations and (2) continued elevated remote users during the COVID-19 pandemic. We found the configuration management control for TVA’s remote application desktop virtualization client was ineffective. However, we determined compensating access controls were in place to mitigate the risk to an overall acceptable level.

Full Details: Oversight.gov Report Page

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of the Northern Mariana Islands

EAC OIG audited funds received by the Commonwealth of the Northern Mariana Islands under the Help America Vote Act, totaling $1.2 million. This included Election Security and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 2/24/2023

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of California

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the State of California under the Help America Vote Act, including state matching funds and interest earned, totaling $216.3 million. This included Election Security, reissued Section 101, reissued Section 251, and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 10/04/2022

1 - Closed

We recommend that the EAC require the Office perform a reconciliation of the grant activity for the Election Security, Section 251 reissued, Section 101 reissued, and CARES Act funds and ensure that all expenditures are fully disclosed, and file amended FFRs, as applicable. If the Office determines that it is unable to perform the reconciliation of the grant activity, obtain financial services to support the completion of the reconciliation.

2 - Closed

We recommend that the EAC require the Office implement procedures and training to properly fill out the required Federal Financial Reports, which reflect the uses of award funds and the interest and program income generated from those funds for all HAVA grants.

3 - Closed

We recommend that the EAC require the Office transfer into the election fund $51,012 and any related fringe benefits and indirect costs for the unsupported payroll costs cited above.

4 - Closed

We recommend that the EAC require the Office implement procedures or provide additional training to ensure that payroll costs are adequately supported with appropriate signature approvals, pay rates, and timesheets when being allocated to the HAVA grants.

5 - Closed

We recommend that the EAC require the Office perform detailed testing on the $180,350 of additional wages selected for substantive testing to determine what amount, if any, remains unsupported.

6 - Closed

We recommend that the EAC work with the Office to resolve the one remaining unsupported County reimbursement.

7 - Closed

We recommend that the EAC require the Office to transfer into the election fund any amount which remains unsupported.

8 - Closed

We recommend that the EAC require the Office to develop and implement policies and procedures and provide training to ensure adequate documentation is maintained to support the allowability of expenditures charged to the HAVA grant.

Small Business Administration OIG

COVID-19 and Disaster Assistance Information Systems Security Controls

This report presents the results of our audit to determine whether the U.S. Small Business Administration (SBA) maintained effective management control activities and monitoring of the design and implementation of third-party operated SBA systems. SBA needed information technology systems from third-party service providers that could improve the system efficiency and productivity to process high transaction volumes, transmit data between other information systems, and safeguard the integrity and confidentiality of the personally identifiable information processed by the programs. We found the...

Full Details: Oversight.gov Report Page

Audit | 9/27/2022

1 - Open

Ensure the existing SBA System Development Methodology is updated to include supply chain risk-management practices as required by OMB Circular A-130 and high-value asset system designation guidance. Also, ensure high-value asset system risks are incorporated into the enterprise risk management framework, as recommended by OMB M-19-03 and SBA SOP 90 47 6.

10 - Open

Implement an automated process to document and monitor system changes as recommended by NIST SP 800-53 Rev. 5.

2 - Open

Communicate and enforce the SBA System Development Methodology in which a traceability matrix is used to ensure that system requirements can be tested and demonstrated in the operational system. Ensure all requirements are aligned with the contractual acceptance criteria.

3 - Open

Implement in updated agency guidance, the requirements of OMB Circular No. A-123 that stipulate a SOC 1 Type 2 report is needed for all new and existing financial systems. This guidance should also require confirmation at least annually that the controls are functioning as designed.

4 - Closed

Enforce the requirement to establish and implement internal controls to ensure appropriate program officials perform and document contract reviews to ensure that information security is appropriately addressed in the contracting language, as required by OMB Circular A-130 and SBA SOP 90 47 6.

5 - Open

In conjunction with the Enterprise Risk Management Board, implement enterprise-wide privacy risk mitigation practices that can be assimilated into new and existing system program designs.

6 - Open

Complete an initial assessment and authorization for each information system and all agency-designated common controls before operation.

7 - Open

Transition information systems and common controls to an ongoing authorization process (when eligible for such a process) with the formal approval of the respective authorizing officials or reauthorize information systems and common controls as needed, on a time or event-driven basis in accordance with agency risk tolerance, as required by OMB Circular No. A-130 and SOP 90 47 6.

8 - Open

Review and update POA&Ms at least quarterly as required by SOP 90 47 6.

9 - Closed

Ensure data-sharing agreements are reviewed annually as required by SBA SOP 90 47 6.

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of Pennsylvania

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the Commonwealth of Pennsylvania under the Help America Vote Act, including state matching funds and interest earned, totaling $53.4 million. This included Election Security, reissued Section 251, and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 9/22/2022

Election Assistance Commission OIG

Audit of the Help America Vote Act Grants Awarded to the State of Delaware

EAC OIG, through the independent public accounting firm of McBride, Lock & Associates, LLC, audited funds received by the State of Delaware under the Help America Vote Act, including state matching funds and interest earned, totaling $20 million. This included Election Security and Coronavirus Aid, Relief, and Economic Security Act grants.

Full Details: Oversight.gov Report Page

Audit | 9/21/2022

1 - Closed

We recommend that the EAC require the Office to transfer to the election fund $629,248 for the unsupported costs cited above.

2 - Closed

We recommend that the EAC require the Office to implement policies and procedures or training to ensure adequate documentation is maintained to support the allowability of expenditures charged to the HAVA grant, including maintaining copies of invoices paid, contracts from which purchases were made and purchase orders for purchases exceeding $10,000.

3 - Closed

We recommend the EAC require the Office to provide the inventory listing maintained by the IT Department and each County.

4 - Closed

We recommend the EAC require the Office to implement policies and procedures or training to ensure that assets are managed in accordance Uniform Guidance and the State of Delaware’s policy.

5 - Closed

We recommend the EAC require the Office to ensure that documented policies and procedures related to internal controls and asset management are established and implemented in accordance with the State of Delaware’s policy. Implementation should include policies to review and update the procedures on a regular basis.

6 - Closed

We recommend that the EAC require the Office to provide transaction detail of interest income earned for the Election Security and CARES Act grants.

7 - Closed

We recommend that the EAC require the Office to complete and file FFRs for the Section 251 funds or if the Office is unable to complete the Section 251 FFR, obtain financial services to support the completion of the filings.

8 - Closed

We recommend that the EAC require the Office to implement procedures and training to properly fill out the required FFRs, which reflect the uses of award funds and the interest income generated from those funds for all HAVA grants.

Date Range

Report Type

Report Category

Submitting Agency

State/Local Agency

State (State and Local Reports)

Fraud Type

Agency Reviewed

Related Organizations

Management Challenges

Any Recommendations

Any Open Recommendations

Reports

SBA’s Oversight of Restaurant Revitalization Fund Recipients

Audit of the HAVA Grants Awarded to the State of Wisconsin

Audit of the Help America Vote Act Grants Awarded to the State of Missouri

Audit of the Help America Vote Act Grants Awarded to the State of Alaska

Remote Application and Desktop Virtualization Client

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of the Northern Mariana Islands

Audit of the Help America Vote Act Grants Awarded to the State of California

COVID-19 and Disaster Assistance Information Systems Security Controls

Audit of the Help America Vote Act Grants Awarded to the Commonwealth of Pennsylvania

Audit of the Help America Vote Act Grants Awarded to the State of Delaware

Glossary

Glossary name will go here